Valorant Root TBR12[.]045[.]rar

Resubmissions

08-08-2024 03:56

240808-ehkhfashla 3

Sharing

Copy URL

Twitter E-mail

General

Target

Valorant Root TBR12.045.rar
Size

76.0MB
MD5

25c11c92540229ecd3eb2b898ac3467a
SHA1

c850915f6a26a20fa777d95251648a2e5399c3e8
SHA256

49b6d67f90aa66ed8f757f77b9c88ddeae10d6f04e56320973a058bd125ea621
SHA512

6196c68dc3474a4ee72357ec40f60527840eb9ebe4d0de951471df9a3859f064eb3de26302a76b1d86094503d4eba5de60c76b54c49d9631ce32b26d5962d0d0
SSDEEP

1572864:IDY9lLq0GhkjOuw132FxRX+4VeZyFTWMd5oLvuri8enaOyxaQ/N+HUhmyDCEfO16:iY2PhkjomFL48T/5auri8IVQ/MHdyjOo

Score

3^/10

pyinstaller

Malware Config

Signatures

Detects Pyinstaller 1 IoCs

pyinstaller

resource	yara_rule
static1/unpack001/Valorant Root TBR12.045/VR_TBR12.045.exe	pyinstaller

Unsigned PE 18 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Valorant Root TBR12.045/Boot/C_G18030.DLL
unpack001/Valorant Root TBR12.045/Boot/C_IS2022.DLL
unpack001/Valorant Root TBR12.045/Boot/C_ISCII.DLL
unpack001/Valorant Root TBR12.045/Boot/c_GSM7.DLL
unpack001/Valorant Root TBR12.045/Boot/cabapi.dll
unpack001/Valorant Root TBR12.045/Boot/cabview.dll
unpack001/Valorant Root TBR12.045/Config/xwizards.dll
unpack001/Valorant Root TBR12.045/Config/xwreg.dll
unpack001/Valorant Root TBR12.045/Config/xwtpdui.dll
unpack001/Valorant Root TBR12.045/Config/xwtpw32.dll
unpack001/Valorant Root TBR12.045/Config/zipcontainer.dll
unpack001/Valorant Root TBR12.045/Config/zipfldr.dll
unpack001/Valorant Root TBR12.045/Config/ztrace_maps.dll
unpack001/Valorant Root TBR12.045/Resources/ffmpeg.dll
unpack001/Valorant Root TBR12.045/Resources/libEGL.dll
unpack001/Valorant Root TBR12.045/Resources/libGLESv2.dll
unpack001/Valorant Root TBR12.045/Resources/vulkan-1.dll
unpack001/Valorant Root TBR12.045/VR_TBR12.045.exe

Files

Valorant Root TBR12.045.rar
.rar
Valorant Root TBR12.045/Boot/C_037.NLS
Valorant Root TBR12.045/Boot/C_10000.NLS
Valorant Root TBR12.045/Boot/C_10001.NLS
Valorant Root TBR12.045/Boot/C_10002.NLS
Valorant Root TBR12.045/Boot/C_10003.NLS
Valorant Root TBR12.045/Boot/C_10004.NLS
Valorant Root TBR12.045/Boot/C_10005.NLS
Valorant Root TBR12.045/Boot/C_10006.NLS
Valorant Root TBR12.045/Boot/C_10007.NLS
Valorant Root TBR12.045/Boot/C_10008.NLS
Valorant Root TBR12.045/Boot/C_10010.NLS
Valorant Root TBR12.045/Boot/C_10017.NLS
Valorant Root TBR12.045/Boot/C_10021.NLS
Valorant Root TBR12.045/Boot/C_10029.NLS
Valorant Root TBR12.045/Boot/C_10079.NLS
Valorant Root TBR12.045/Boot/C_10081.NLS
Valorant Root TBR12.045/Boot/C_10082.NLS
Valorant Root TBR12.045/Boot/C_1026.NLS
Valorant Root TBR12.045/Boot/C_1047.NLS
Valorant Root TBR12.045/Boot/C_1140.NLS
Valorant Root TBR12.045/Boot/C_1141.NLS
Valorant Root TBR12.045/Boot/C_1142.NLS
Valorant Root TBR12.045/Boot/C_1143.NLS
Valorant Root TBR12.045/Boot/C_1144.NLS
Valorant Root TBR12.045/Boot/C_1145.NLS
Valorant Root TBR12.045/Boot/C_1146.NLS
Valorant Root TBR12.045/Boot/C_1147.NLS
Valorant Root TBR12.045/Boot/C_1148.NLS
Valorant Root TBR12.045/Boot/C_1149.NLS
Valorant Root TBR12.045/Boot/C_1250.NLS
Valorant Root TBR12.045/Boot/C_1251.NLS
Valorant Root TBR12.045/Boot/C_1252.NLS
Valorant Root TBR12.045/Boot/C_1253.NLS
Valorant Root TBR12.045/Boot/C_1254.NLS
Valorant Root TBR12.045/Boot/C_1255.NLS
Valorant Root TBR12.045/Boot/C_1256.NLS
Valorant Root TBR12.045/Boot/C_1257.NLS
Valorant Root TBR12.045/Boot/C_1258.NLS
Valorant Root TBR12.045/Boot/C_1361.NLS
Valorant Root TBR12.045/Boot/C_20000.NLS
Valorant Root TBR12.045/Boot/C_20001.NLS
Valorant Root TBR12.045/Boot/C_20002.NLS
Valorant Root TBR12.045/Boot/C_20003.NLS
Valorant Root TBR12.045/Boot/C_20004.NLS
Valorant Root TBR12.045/Boot/C_20005.NLS
Valorant Root TBR12.045/Boot/C_20105.NLS
Valorant Root TBR12.045/Boot/C_20106.NLS
Valorant Root TBR12.045/Boot/C_20107.NLS
Valorant Root TBR12.045/Boot/C_20108.NLS
Valorant Root TBR12.045/Boot/C_20127.NLS
Valorant Root TBR12.045/Boot/C_20261.NLS
Valorant Root TBR12.045/Boot/C_20269.NLS
Valorant Root TBR12.045/Boot/C_20273.NLS
Valorant Root TBR12.045/Boot/C_20277.NLS
Valorant Root TBR12.045/Boot/C_20278.NLS
Valorant Root TBR12.045/Boot/C_20280.NLS
Valorant Root TBR12.045/Boot/C_20284.NLS
Valorant Root TBR12.045/Boot/C_20285.NLS
Valorant Root TBR12.045/Boot/C_20290.NLS
Valorant Root TBR12.045/Boot/C_20297.NLS
Valorant Root TBR12.045/Boot/C_20420.NLS
Valorant Root TBR12.045/Boot/C_20423.NLS
Valorant Root TBR12.045/Boot/C_20424.NLS
Valorant Root TBR12.045/Boot/C_20833.NLS
Valorant Root TBR12.045/Boot/C_20838.NLS
Valorant Root TBR12.045/Boot/C_20866.NLS
Valorant Root TBR12.045/Boot/C_20871.NLS
Valorant Root TBR12.045/Boot/C_20880.NLS
Valorant Root TBR12.045/Boot/C_20905.NLS
Valorant Root TBR12.045/Boot/C_20924.NLS
Valorant Root TBR12.045/Boot/C_20932.NLS
Valorant Root TBR12.045/Boot/C_20936.NLS
Valorant Root TBR12.045/Boot/C_20949.NLS
Valorant Root TBR12.045/Boot/C_21025.NLS
Valorant Root TBR12.045/Boot/C_21027.NLS
Valorant Root TBR12.045/Boot/C_21866.NLS
Valorant Root TBR12.045/Boot/C_28591.NLS
Valorant Root TBR12.045/Boot/C_28592.NLS
Valorant Root TBR12.045/Boot/C_28593.NLS
Valorant Root TBR12.045/Boot/C_28594.NLS
Valorant Root TBR12.045/Boot/C_28595.NLS
Valorant Root TBR12.045/Boot/C_28596.NLS
Valorant Root TBR12.045/Boot/C_28597.NLS
Valorant Root TBR12.045/Boot/C_28598.NLS
Valorant Root TBR12.045/Boot/C_28599.NLS
Valorant Root TBR12.045/Boot/C_28605.NLS
Valorant Root TBR12.045/Boot/C_437.NLS
Valorant Root TBR12.045/Boot/C_500.NLS
Valorant Root TBR12.045/Boot/C_708.NLS
Valorant Root TBR12.045/Boot/C_720.NLS
Valorant Root TBR12.045/Boot/C_737.NLS
Valorant Root TBR12.045/Boot/C_775.NLS
Valorant Root TBR12.045/Boot/C_850.NLS
Valorant Root TBR12.045/Boot/C_852.NLS
Valorant Root TBR12.045/Boot/C_855.NLS
Valorant Root TBR12.045/Boot/C_857.NLS
Valorant Root TBR12.045/Boot/C_858.NLS
Valorant Root TBR12.045/Boot/C_860.NLS
Valorant Root TBR12.045/Boot/C_861.NLS
Valorant Root TBR12.045/Boot/C_862.NLS
Valorant Root TBR12.045/Boot/C_863.NLS
Valorant Root TBR12.045/Boot/C_864.NLS
Valorant Root TBR12.045/Boot/C_865.NLS
Valorant Root TBR12.045/Boot/C_866.NLS
Valorant Root TBR12.045/Boot/C_869.NLS
Valorant Root TBR12.045/Boot/C_870.NLS
Valorant Root TBR12.045/Boot/C_874.NLS
Valorant Root TBR12.045/Boot/C_875.NLS
Valorant Root TBR12.045/Boot/C_932.NLS
Valorant Root TBR12.045/Boot/C_936.NLS
Valorant Root TBR12.045/Boot/C_949.NLS
Valorant Root TBR12.045/Boot/C_950.NLS
Valorant Root TBR12.045/Boot/C_G18030.DLL
.dll .ps1 windows:10 windows x64 arch:x64 polyglot

b368e03a1fa9cbdc76715c9af16e670e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c_g18030.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm

api-ms-win-crt-private-l1-1-0

_o___std_type_info_destroy_list
_o__cexit
_o__configure_narrow_argv
_o__execute_onexit_table
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__seh_filter_dll
__C_specific_handler

api-ms-win-crt-string-l1-1-0

memset

api-ms-win-core-errorhandling-l1-1-0

SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter

api-ms-win-core-localization-l1-2-0

IsValidCodePage

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

TerminateProcess
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

Exports

Exports

NlsDllCodePageTranslation

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Valorant Root TBR12.045/Boot/C_IS2022.DLL
.dll windows:10 windows x64 arch:x64

d6473f4ac063d67707c023470b0b9504

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c_is2022.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm

api-ms-win-crt-private-l1-1-0

_o___std_type_info_destroy_list
_o__cexit
_o__configure_narrow_argv
_o__execute_onexit_table
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__seh_filter_dll
__C_specific_handler
memcpy

api-ms-win-crt-string-l1-1-0

memset

ntdll

RtlFreeHeap
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlAllocateHeap

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter
SetLastError
SetUnhandledExceptionFilter

api-ms-win-core-localization-l1-2-0

IsDBCSLeadByteEx
IsValidCodePage

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

TerminateProcess
GetCurrentProcess
GetCurrentThreadId
GetCurrentProcessId

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

Exports

Exports

NlsDllCodePageTranslation

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Valorant Root TBR12.045/Boot/C_ISCII.DLL
.dll windows:10 windows x64 arch:x64

4dcee0bb1fe57861802bbd0465c0bf09

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c_iscii.pdb

Imports

ntdll

RtlCaptureContext
RtlFreeHeap
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlAllocateHeap
memcpy

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
SetLastError
UnhandledExceptionFilter

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcess
TerminateProcess
GetCurrentProcessId

api-ms-win-core-sysinfo-l1-1-0

GetTickCount
GetSystemTimeAsFileTime

Exports

Exports

NlsDllCodePageTranslation

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Valorant Root TBR12.045/Boot/c_28603.nls
Valorant Root TBR12.045/Boot/c_GSM7.DLL
.dll windows:10 windows x64 arch:x64

2304484f12481684794a3041fc8dd8a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c_GSM7.pdb

Imports

msvcrt

__C_specific_handler
_initterm
malloc
free
_amsg_exit
_XcptFilter
memcpy

api-ms-win-core-errorhandling-l1-1-0

SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

TerminateProcess
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

ntdll

RtlFreeHeap
RtlAllocateHeap

Exports

Exports

NlsDllCodePageTranslation

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Valorant Root TBR12.045/Boot/cabapi.dll
.dll windows:10 windows x64 arch:x64

20cb3620be5512649d53bd91793871cc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

CabAPI.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm

api-ms-win-crt-private-l1-1-0

_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__register_onexit_function
_o__seh_filter_dll
_o__wcsicmp
memmove
_o__wcsnicmp
_o__wsplitpath_s
_o_free
_o_malloc
_o_rand
_o_terminate
_o_wcscpy_s
__C_specific_handler
_CxxThrowException
_o__configure_narrow_argv
_o__cexit
_o__callnewh
_o__execute_onexit_table
_o__errno
_o___stdio_common_vswprintf
_o___stdio_common_vsprintf
_o___stdio_common_vsnprintf_s
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
__CxxFrameHandler3
memcpy
_o__crt_atexit

api-ms-win-crt-string-l1-1-0

memset
strncmp
wcsncmp

ntdll

VerSetConditionMask
RtlLeaveCriticalSection
RtlRaiseStatus
DbgPrintEx
RtlNtStatusToDosErrorNoTeb
RtlEnterCriticalSection
NtClose
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

api-ms-win-core-libraryloader-l1-1-0

GetProcAddress
GetModuleHandleExW
LoadLibraryExW
DisableThreadLibraryCalls
GetModuleFileNameA
GetModuleHandleW
FreeLibrary

api-ms-win-core-synch-l1-1-0

InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
CreateMutexExW
OpenSemaphoreW
WaitForSingleObjectEx
CreateSemaphoreExW
ReleaseMutex
ReleaseSemaphore
WaitForSingleObject
CreateEventW

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapFree
HeapAlloc

api-ms-win-core-errorhandling-l1-1-0

SetLastError
UnhandledExceptionFilter
GetLastError
SetUnhandledExceptionFilter

api-ms-win-core-heap-obsolete-l1-1-0

LocalAlloc
LocalFree

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
TerminateProcess
GetCurrentProcess
GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
IsDebuggerPresent
DebugBreak

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount64
GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

cabinet

ord12
ord21
ord11
ord14
ord20
ord13
ord23
ord10
ord22

api-ms-win-core-file-l1-1-0

FindFirstFileW
FindNextFileW
WriteFile
SetFilePointer
FindClose
CreateFileW
SetFileTime
GetFileInformationByHandle
FileTimeToLocalFileTime
CreateDirectoryW
SetFileAttributesW
DeleteFileW
GetFullPathNameW
ReadFile
GetVolumeInformationByHandleW
SetFileInformationByHandle
GetFileAttributesW

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-kernel32-legacy-l1-1-0

DosDateTimeToFileTime
FileTimeToDosDateTime

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime
SystemTimeToFileTime

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

Exports

Exports

Cab_CheckForFile
Cab_CheckIsCabinet
Cab_CreateCab
Cab_CreateCabSelected
Cab_Extract
Cab_ExtractOne
Cab_ExtractOneToBuffer
Cab_ExtractSelected
Cab_ExtractSelectedToTarget
Cab_FreeBuffer
Cab_FreeFileList
Cab_FreeFileSizeList
Cab_GetFileList
Cab_GetFileSizeList

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Valorant Root TBR12.045/Boot/cabinet.dll
.dll windows:10 windows x64 arch:x64

aa036be751b7d65f231fa28daf180fc3

Code Sign

33:00:00:04:13:31:bc:19:88:07:a9:07:74:00:00:00:00:04:13
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

03-02-2023 00:05

Not After

01-02-2024 00:05

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1a:6a:7e:5e:ab:70:bb:ae:bd:89:4c:69:c4:63:a0:d3:70:07:e4:c2:7e:3b:22:c0:64:b3:63:78:9d:a1:40:2d
Signer

Actual PE Digest

1a:6a:7e:5e:ab:70:bb:ae:bd:89:4c:69:c4:63:a0:d3:70:07:e4:c2:7e:3b:22:c0:64:b3:63:78:9d:a1:40:2d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

PDB Paths

cabinet.pdb

Imports

api-ms-win-crt-string-l1-1-0

memset
memmove_s

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm

api-ms-win-crt-private-l1-1-0

_o__cexit
_o__configure_narrow_argv
_o__execute_onexit_table
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__seh_filter_dll
memmove
_o__wcsicmp
_o_memcpy_s
__C_specific_handler
_o___std_type_info_destroy_list
memcmp
memcpy

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls

api-ms-win-core-file-l1-1-0

SetFilePointer
WriteFile
LocalFileTimeToFileTime
ReadFile
CreateFileA
DeleteFileA
CreateDirectoryA
SetFileAttributesA
SetFileTime

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetLastError

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapAlloc
HeapFree

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiA

api-ms-win-core-kernel32-legacy-l1-1-0

DosDateTimeToFileTime

ntdll

RtlGetCompressionWorkSpaceSize
NtQueryValueKey
RtlComputeCrc32
RtlCompressBuffer
RtlDecompressBufferEx
NtClose
RtlInitUnicodeString
NtOpenKey

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Exports

Exports

CloseCompressor
CloseDecompressor
Compress
CreateCompressor
CreateDecompressor
Decompress
DeleteExtractedFiles
DllGetVersion
Extract
FCIAddFile
FCICreate
FCIDestroy
FCIFlushCabinet
FCIFlushFolder
FDICopy
FDICreate
FDIDestroy
FDIIsCabinet
FDITruncateCabinet
GetDllVersion
QueryCompressorInformation
QueryDecompressorInformation
ResetCompressor
ResetDecompressor
SetCompressorInformation
SetDecompressorInformation

Sections

.text
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Valorant Root TBR12.045/Boot/cabview.dll
.dll windows:10 windows x64 arch:x64

acf26915808c81505ed7b88a6e1c5e41

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

cabview.pdb

Imports

msvcrt

_vsnwprintf
memcpy
memmove
_onexit
__dllonexit
_unlock
_lock
__C_specific_handler
_initterm
_amsg_exit
_XcptFilter
memmove_s
malloc
free
memcpy_s
memcmp
memset

shell32

AssocGetDetailsOfPropKey
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
ord701
ord27
ord743
ord155
ord256
ord744
ord19
SHBrowseForFolderW
SHGetPathFromIDListA
SHBindToObject
SHBindToParent
ord152
ord18
ord846

shlwapi

AssocCreate
PathFindExtensionW
ord500
PathAppendW
ord158
PathIsRelativeW
ord619
SHStrDupW
ord199
ord172
ord186
PathFindFileNameW
PathCombineW
PathAddBackslashA
ord216
PathFindFileNameA
ord217
ord215
StrRetToBufW
ord219

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-processthreads-l1-1-0

TerminateProcess
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
SetThreadPriority
GetCurrentThreadId

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapAlloc
HeapFree

api-ms-win-core-libraryloader-l1-2-0

LoadStringW
GetModuleFileNameW
LockResource
FindResourceExW
LoadResource
GetProcAddress
GetModuleHandleW
GetModuleHandleExW
GetModuleFileNameA
LoadLibraryExW

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
DebugBreak
IsDebuggerPresent

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
GetLastError
SetLastError
UnhandledExceptionFilter

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-synch-l1-1-0

ReleaseSRWLockShared
OpenSemaphoreW
DeleteCriticalSection
ReleaseSemaphore
EnterCriticalSection
AcquireSRWLockShared
AcquireSRWLockExclusive
WaitForSingleObject
ReleaseSRWLockExclusive
InitializeCriticalSectionEx
ReleaseMutex
LeaveCriticalSection
WaitForSingleObjectEx
CreateSemaphoreExW
CreateMutexExW

api-ms-win-core-heap-l2-1-0

GlobalFree
LocalAlloc
GlobalAlloc

api-ms-win-core-com-l1-1-0

CoInitializeEx
CoUninitialize
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
PropVariantClear

api-ms-win-core-file-l1-1-0

GetTempFileNameW
CreateFileW
SetFilePointer
ReadFile
GetFileSizeEx
GetShortPathNameW
LocalFileTimeToFileTime

api-ms-win-core-file-l1-2-0

GetTempPathW

oleaut32

SysAllocString
VariantInit
VariantClear

api-ms-win-core-threadpool-l1-2-0

WaitForThreadpoolTimerCallbacks
CreateThreadpoolTimer
CloseThreadpoolTimer
SetThreadpoolTimer

api-ms-win-core-synch-l1-2-0

Sleep
InitOnceBeginInitialize
InitOnceComplete

api-ms-win-eventing-provider-l1-1-0

EventActivityIdControl
EventSetInformation
EventUnregister
EventRegister
EventWriteTransfer

api-ms-win-core-sysinfo-l1-1-0

GetTickCount
GetSystemTimeAsFileTime
GetSystemDirectoryW

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

kernel32

_lwrite
_lclose
lstrlenA
DosDateTimeToFileTime
lstrcmpiW
lstrlenW
ActivateActCtx
DeactivateActCtx
CreateActCtxW
ReleaseActCtx
_lread
_llseek

ntdll

RtlIsDosDeviceName_U

ole32

OleSetClipboard

propsys

VariantToPropVariant
PSFormatForDisplay
InitVariantFromFileTime
InitVariantFromStrRet
VariantCompare

user32

DestroyMenu
MessageBoxW
RegisterClipboardFormatW
SendMessageW
LoadCursorW
GetMenuItemCount
GetMenuItemInfoW
DeleteMenu
SetCursor
LoadMenuW
GetSubMenu
RemoveMenu
InsertMenuW
SetMenuDefaultItem
CreatePopupMenu
InsertMenuItemW

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Exports

Exports

DllCanUnloadNow
DllGetClassObject
Uninstall

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Valorant Root TBR12.045/Config/Tools/.gitignore
Valorant Root TBR12.045/Config/Tools/@AppHelpToast.png
.png
Valorant Root TBR12.045/Config/Tools/@AudioToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/@BackgroundAccessToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/@EnrollmentToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/@StorageSenseToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/@VpnToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/@WLOGO_96x96.png
.png
Valorant Root TBR12.045/Config/Tools/@WindowsHelloFaceToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/@bitlockertoastimage.png
.png
Valorant Root TBR12.045/Config/Tools/@language_notification_icon.png
.png
Valorant Root TBR12.045/Config/Tools/Combat/.gitignore
Valorant Root TBR12.045/Config/Tools/Combat/@AppHelpToast.png
.png
Valorant Root TBR12.045/Config/Tools/Combat/@AudioToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Combat/@BackgroundAccessToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Combat/@EnrollmentToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Combat/@StorageSenseToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Combat/@VpnToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Combat/@WLOGO_96x96.png
.png
Valorant Root TBR12.045/Config/Tools/Combat/@WindowsHelloFaceToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Combat/@bitlockertoastimage.png
.png
Valorant Root TBR12.045/Config/Tools/Combat/@language_notification_icon.png
.png
Valorant Root TBR12.045/Config/Tools/Combat/ComputerToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Combat/DisplaySystemToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Combat/KeyboardSystemToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Combat/MixedRealityRuntime.json
Valorant Root TBR12.045/Config/Tools/Combat/NdfEventView.xml
Valorant Root TBR12.045/Config/Tools/Combat/RestartManagerUninstall.mof
Valorant Root TBR12.045/Config/Tools/Combat/UevAppMonitor.exe.config
.xml
Valorant Root TBR12.045/Config/Tools/Combat/k202_type_0_restore.txt
Valorant Root TBR12.045/Config/Tools/Combat/k9001_type_0_restore.txt
Valorant Root TBR12.045/Config/Tools/Combat/k900_restore.txt
Valorant Root TBR12.045/Config/Tools/Combat/k900_type_0_restore.txt
Valorant Root TBR12.045/Config/Tools/Combat/odbcconf.rsp
Valorant Root TBR12.045/Config/Tools/Combat/pcl.sep
Valorant Root TBR12.045/Config/Tools/Combat/pscript.sep
Valorant Root TBR12.045/Config/Tools/Combat/regtest.txt
Valorant Root TBR12.045/Config/Tools/Combat/winrm.cmd
Valorant Root TBR12.045/Config/Tools/ComputerToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/DisplaySystemToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Fix/.gitignore
Valorant Root TBR12.045/Config/Tools/Fix/@AppHelpToast.png
.png
Valorant Root TBR12.045/Config/Tools/Fix/@AudioToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Fix/@BackgroundAccessToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Fix/@EnrollmentToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Fix/@StorageSenseToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Fix/@VpnToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Fix/@WLOGO_96x96.png
.png
Valorant Root TBR12.045/Config/Tools/Fix/@WindowsHelloFaceToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Fix/@bitlockertoastimage.png
.png
Valorant Root TBR12.045/Config/Tools/Fix/@language_notification_icon.png
.png
Valorant Root TBR12.045/Config/Tools/Fix/ComputerToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Fix/DisplaySystemToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Fix/KeyboardSystemToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Fix/MixedRealityRuntime.json
Valorant Root TBR12.045/Config/Tools/Fix/NdfEventView.xml
Valorant Root TBR12.045/Config/Tools/Fix/RestartManagerUninstall.mof
Valorant Root TBR12.045/Config/Tools/Fix/UevAppMonitor.exe.config
.xml
Valorant Root TBR12.045/Config/Tools/Fix/k202_type_0_restore.txt
Valorant Root TBR12.045/Config/Tools/Fix/k9001_type_0_restore.txt
Valorant Root TBR12.045/Config/Tools/Fix/k900_restore.txt
Valorant Root TBR12.045/Config/Tools/Fix/k900_type_0_restore.txt
Valorant Root TBR12.045/Config/Tools/Fix/odbcconf.rsp
Valorant Root TBR12.045/Config/Tools/Fix/pcl.sep
Valorant Root TBR12.045/Config/Tools/Fix/pscript.sep
Valorant Root TBR12.045/Config/Tools/Fix/regtest.txt
Valorant Root TBR12.045/Config/Tools/Fix/winrm.cmd
Valorant Root TBR12.045/Config/Tools/KeyboardSystemToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/MixedRealityRuntime.json
Valorant Root TBR12.045/Config/Tools/NdfEventView.xml
Valorant Root TBR12.045/Config/Tools/Replace/.gitignore
Valorant Root TBR12.045/Config/Tools/Replace/@AppHelpToast.png
.png
Valorant Root TBR12.045/Config/Tools/Replace/@AudioToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Replace/@BackgroundAccessToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Replace/@EnrollmentToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Replace/@StorageSenseToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Replace/@VpnToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Replace/@WLOGO_96x96.png
.png
Valorant Root TBR12.045/Config/Tools/Replace/@WindowsHelloFaceToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Replace/@bitlockertoastimage.png
.png
Valorant Root TBR12.045/Config/Tools/Replace/@language_notification_icon.png
.png
Valorant Root TBR12.045/Config/Tools/Replace/ComputerToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Replace/DisplaySystemToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Replace/KeyboardSystemToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Replace/MixedRealityRuntime.json
Valorant Root TBR12.045/Config/Tools/Replace/NdfEventView.xml
Valorant Root TBR12.045/Config/Tools/Replace/RestartManagerUninstall.mof
Valorant Root TBR12.045/Config/Tools/Replace/UevAppMonitor.exe.config
.xml
Valorant Root TBR12.045/Config/Tools/Replace/k202_type_0_restore.txt
Valorant Root TBR12.045/Config/Tools/Replace/k9001_type_0_restore.txt
Valorant Root TBR12.045/Config/Tools/Replace/k900_restore.txt
Valorant Root TBR12.045/Config/Tools/Replace/k900_type_0_restore.txt
Valorant Root TBR12.045/Config/Tools/Replace/odbcconf.rsp
Valorant Root TBR12.045/Config/Tools/Replace/pcl.sep
Valorant Root TBR12.045/Config/Tools/Replace/pscript.sep
Valorant Root TBR12.045/Config/Tools/Replace/regtest.txt
Valorant Root TBR12.045/Config/Tools/Replace/winrm.cmd
Valorant Root TBR12.045/Config/Tools/RestartManagerUninstall.mof
Valorant Root TBR12.045/Config/Tools/Sources/.gitignore
Valorant Root TBR12.045/Config/Tools/Sources/@AppHelpToast.png
.png
Valorant Root TBR12.045/Config/Tools/Sources/@AudioToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Sources/@BackgroundAccessToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Sources/@EnrollmentToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Sources/@StorageSenseToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Sources/@VpnToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Sources/@WLOGO_96x96.png
.png
Valorant Root TBR12.045/Config/Tools/Sources/@WindowsHelloFaceToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Sources/@bitlockertoastimage.png
.png
Valorant Root TBR12.045/Config/Tools/Sources/@language_notification_icon.png
.png
Valorant Root TBR12.045/Config/Tools/Sources/ComputerToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Sources/DisplaySystemToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Sources/KeyboardSystemToastIcon.png
.png
Valorant Root TBR12.045/Config/Tools/Sources/MixedRealityRuntime.json
Valorant Root TBR12.045/Config/Tools/Sources/NdfEventView.xml
Valorant Root TBR12.045/Config/Tools/Sources/RestartManagerUninstall.mof
Valorant Root TBR12.045/Config/Tools/Sources/UevAppMonitor.exe.config
.xml
Valorant Root TBR12.045/Config/Tools/Sources/k202_type_0_restore.txt
Valorant Root TBR12.045/Config/Tools/Sources/k9001_type_0_restore.txt
Valorant Root TBR12.045/Config/Tools/Sources/k900_restore.txt
Valorant Root TBR12.045/Config/Tools/Sources/k900_type_0_restore.txt
Valorant Root TBR12.045/Config/Tools/Sources/odbcconf.rsp
Valorant Root TBR12.045/Config/Tools/Sources/pcl.sep
Valorant Root TBR12.045/Config/Tools/Sources/pscript.sep
Valorant Root TBR12.045/Config/Tools/Sources/regtest.txt
Valorant Root TBR12.045/Config/Tools/Sources/winrm.cmd
Valorant Root TBR12.045/Config/Tools/UevAppMonitor.exe.config
.xml
Valorant Root TBR12.045/Config/Tools/k202_type_0_restore.txt
Valorant Root TBR12.045/Config/Tools/k9001_type_0_restore.txt
Valorant Root TBR12.045/Config/Tools/k900_restore.txt
Valorant Root TBR12.045/Config/Tools/k900_type_0_restore.txt
Valorant Root TBR12.045/Config/Tools/odbcconf.rsp
Valorant Root TBR12.045/Config/Tools/pcl.sep
Valorant Root TBR12.045/Config/Tools/pscript.sep
Valorant Root TBR12.045/Config/Tools/regtest.txt
Valorant Root TBR12.045/Config/Tools/winrm.cmd
Valorant Root TBR12.045/Config/xwizards.dll
.dll windows:10 windows x64 arch:x64

bcdce6271121b495fc8165815b0327b8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

xwizards.pdb

Imports

msvcrt

??1type_info@@UEAA@XZ
memcmp
_onexit
__dllonexit
_unlock
_lock
_vsnprintf
?terminate@@YAXXZ
realloc
_errno
_vsnwprintf
iswxdigit
__RTDynamicCast
_wcstoi64
iswdigit
_wcstoui64
towlower
wcstoul
_initterm
_amsg_exit
_XcptFilter
memmove
memcpy
__CxxFrameHandler3
_CxxThrowException
?what@exception@@UEBAPEBDXZ
??1exception@@UEAA@XZ
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@AEBQEBDH@Z
??0exception@@QEAA@AEBQEBD@Z
_callnewh
sscanf_s
wcstod
wcsncpy_s
malloc
free
_purecall
toupper
_wcsicmp
wcstol
memcpy_s
??_V@YAXPEAX@Z
__C_specific_handler
__CxxFrameHandler4
??3@YAXPEAX@Z
memset

rpcrt4

NdrOleAllocate
IUnknown_Release_Proxy
NdrOleFree
NdrDllGetClassObject
IUnknown_QueryInterface_Proxy
NdrDllCanUnloadNow
NdrStubCall3
IUnknown_AddRef_Proxy
NdrStubForwardingFunction

api-ms-win-core-com-midlproxystub-l1-1-0

NdrProxyForwardingFunction5
ObjectStublessClient9
ObjectStublessClient10
NdrProxyForwardingFunction9
NdrProxyForwardingFunction4
ObjectStublessClient13
ObjectStublessClient7
NdrProxyForwardingFunction3
NdrProxyForwardingFunction6
NdrProxyForwardingFunction7
NdrProxyForwardingFunction8
ObjectStublessClient11
ObjectStublessClient14
ObjectStublessClient8
ObjectStublessClient12

api-ms-win-core-libraryloader-l1-2-0

SizeofResource
LoadResource
GetModuleFileNameW
LoadLibraryExW
GetProcAddress
DisableThreadLibraryCalls
FindResourceExW
GetModuleHandleW
FreeLibrary

api-ms-win-core-file-l1-1-0

FindNextFileW
WriteFile
GetFullPathNameW
FindFirstFileW
CreateFileW

api-ms-win-core-registry-l1-1-0

RegQueryValueExW
RegEnumKeyExW
RegDeleteValueW
RegCloseKey
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW

api-ms-win-core-synch-l1-1-0

DeleteCriticalSection
CreateMutexW
OpenMutexW
WaitForSingleObject
InitializeCriticalSection
ReleaseSemaphore
LeaveCriticalSection
EnterCriticalSection
ReleaseMutex
InitializeCriticalSectionAndSpinCount

api-ms-win-core-com-l1-1-0

CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CoInitializeEx
CoCreateInstance
CoFreeUnusedLibrariesEx
CoTaskMemRealloc
StringFromCLSID
CoUninitialize
StringFromGUID2

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer
EventUnregister
EventRegister

api-ms-win-eventing-classicprovider-l1-1-0

TraceMessage
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
RegisterTraceGuidsW
UnregisterTraceGuids

api-ms-win-core-string-l2-1-0

CharNextW

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
CompareStringW
WideCharToMultiByte

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter
GetLastError
SetUnhandledExceptionFilter
SetLastError
RaiseException

api-ms-win-core-processthreads-l1-1-0

CreateProcessW
TlsGetValue
TlsFree
GetExitCodeProcess
TlsAlloc
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
TlsSetValue
GetThreadId

api-ms-win-core-handle-l1-1-0

CloseHandle
DuplicateHandle

api-ms-win-core-heap-l2-1-0

LocalFree
LocalAlloc

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetVersionExW
GetTickCount
GetSystemTimeAsFileTime

api-ms-win-core-debug-l1-1-0

OutputDebugStringA

api-ms-win-shcore-obsolete-l1-1-0

CommandLineToArgvW

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiW

shlwapi

PathUnExpandEnvStringsW
ord615
PathFileExistsW

user32

PeekMessageW
TranslateMessage
ShowWindowAsync
GetPropW
EnumChildWindows
SetPropW
FindWindowW
GetParent
SetForegroundWindow
ReplyMessage
GetWindowLongPtrW
SetProcessDPIAware
SetWindowLongPtrW
IsWindow
MessageBoxW
DispatchMessageW
MsgWaitForMultipleObjectsEx

api-ms-win-core-heap-l1-1-0

HeapFree
GetProcessHeap
HeapAlloc

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

ntdll

NtQueryInformationToken
NtOpenProcessToken
NtClose
NtOpenThreadToken

api-ms-win-core-memory-l1-1-0

UnmapViewOfFile
CreateFileMappingW
MapViewOfFile

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-core-atoms-l1-1-0

GlobalAddAtomA
GlobalGetAtomNameA
GlobalGetAtomNameW

api-ms-win-core-synch-l1-2-1

CreateSemaphoreW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
ProcessXMLFileA
ProcessXMLFileW
ResetRegistrationA
ResetRegistrationW
RunPropertySheetA
RunPropertySheetW
RunWizardA
RunWizardW
XWProcessXMLFile
XWRegisterHost
XWRegisterPageWithPage
XWRegisterPageWithTask
XWRegisterTaskWithHost
XWUnregisterHost
XWUnregisterHostTaskLink
XWUnregisterPage
XWUnregisterPagesLink
XWUnregisterTask
XWUnregisterTaskPageLink

Sections

.text
Size: 224KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Valorant Root TBR12.045/Config/xwreg.dll
.dll windows:10 windows x64 arch:x64

ebb62b726face7c794ff286bfcf3c604

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

xwreg.pdb

Imports

msvcrt

_vsnprintf
?terminate@@YAXXZ
memcpy
__CxxFrameHandler3
_CxxThrowException
?what@exception@@UEBAPEBDXZ
_lock
??0exception@@QEAA@AEBV0@@Z
_vsnwprintf
__dllonexit
_onexit
towlower
??1type_info@@UEAA@XZ
??0exception@@QEAA@AEBQEBDH@Z
??0exception@@QEAA@AEBQEBD@Z
realloc
memmove
_XcptFilter
_callnewh
_amsg_exit
_initterm
wcsncpy_s
malloc
_unlock
free
_errno
_purecall
memcpy_s
??_V@YAXPEAX@Z
__C_specific_handler
??1exception@@UEAA@XZ
??3@YAXPEAX@Z
tolower
__CxxFrameHandler4
iswxdigit
memset

api-ms-win-core-libraryloader-l1-2-0

SizeofResource
GetModuleFileNameW
LoadLibraryExW
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadResource
FindResourceExW
DisableThreadLibraryCalls

api-ms-win-core-synch-l1-1-0

OpenMutexW
LeaveCriticalSection
ReleaseMutex
DeleteCriticalSection
CreateMutexW
ReleaseSemaphore
EnterCriticalSection
InitializeCriticalSection

api-ms-win-core-com-l1-1-0

StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
CLSIDFromString
CoTaskMemFree
CoTaskMemAlloc

api-ms-win-core-registry-l1-1-0

RegDeleteValueW
RegCreateKeyExW
RegOpenKeyExW
RegRestoreKeyW
RegQueryValueExW
RegEnumKeyExW
RegCloseKey
RegSetValueExW
RegQueryInfoKeyW

api-ms-win-eventing-classicprovider-l1-1-0

GetTraceLoggerHandle
UnregisterTraceGuids
TraceMessage
GetTraceEnableLevel
GetTraceEnableFlags
RegisterTraceGuidsW

api-ms-win-core-string-l2-1-0

CharNextW

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

api-ms-win-core-errorhandling-l1-1-0

RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
TerminateProcess
GetCurrentProcessId
GetCurrentProcess
OpenProcessToken

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount

api-ms-win-core-debug-l1-1-0

OutputDebugStringA

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiW

api-ms-win-core-handle-l1-1-0

DuplicateHandle
CloseHandle

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-core-file-l1-1-0

DeleteFileW
GetTempFileNameW
FlushFileBuffers
ReadFile
WriteFile
GetFullPathNameW
SetFilePointer

api-ms-win-security-base-l1-1-0

AdjustTokenPrivileges
AllocateAndInitializeSid
FreeSid
CheckTokenMembership

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-registry-l2-1-0

RegSaveKeyW
RegDeleteKeyW

user32

MsgWaitForMultipleObjectsEx
TranslateMessage
DispatchMessageW
PeekMessageW

api-ms-win-core-synch-l1-2-1

CreateSemaphoreW

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-core-shlwapi-legacy-l1-1-0

PathUnExpandEnvStringsW
PathFileExistsW

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Valorant Root TBR12.045/Config/xwtpdui.dll
.dll windows:10 windows x64 arch:x64

6f524b365fb6f31fa12f2ce1c84ebc96

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

xwtpdui.pdb

Imports

msvcrt

?terminate@@YAXXZ
__CxxFrameHandler4
__C_specific_handler
??_V@YAXPEAX@Z
memcpy_s
_purecall
free
malloc
wcsncpy_s
towlower
tolower
_wcsicmp
_vsnwprintf
_callnewh
??0exception@@QEAA@AEBQEBD@Z
??0exception@@QEAA@AEBQEBDH@Z
??0exception@@QEAA@AEBV0@@Z
??1exception@@UEAA@XZ
_lock
_unlock
__dllonexit
?what@exception@@UEBAPEBDXZ
_onexit
??1type_info@@UEAA@XZ
_CxxThrowException
__CxxFrameHandler3
memcpy
memmove
__RTDynamicCast
_XcptFilter
_amsg_exit
_initterm
??3@YAXPEAX@Z
_errno
realloc
memset

api-ms-win-core-libraryloader-l1-2-0

FindResourceExW
LoadLibraryExW
DisableThreadLibraryCalls
LoadResource
SizeofResource
GetModuleHandleA
FreeLibrary
GetModuleHandleW
GetModuleFileNameW
GetProcAddress
LockResource
GetModuleFileNameA

api-ms-win-core-processthreads-l1-1-0

TlsGetValue
TlsFree
TlsAlloc
GetCurrentProcessId
TlsSetValue
GetCurrentProcess
TerminateProcess
GetCurrentThreadId

api-ms-win-core-synch-l1-1-0

InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
OpenMutexW
CreateMutexW
ReleaseMutex
DeleteCriticalSection

api-ms-win-core-com-l1-1-0

CoCreateInstance
CoCreateGuid
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2
CoTaskMemRealloc
CLSIDFromString

api-ms-win-core-registry-l1-1-0

RegDeleteValueW
RegEnumKeyExW
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegCreateKeyExW

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventWriteTransfer
EventRegister

api-ms-win-eventing-classicprovider-l1-1-0

GetTraceLoggerHandle
UnregisterTraceGuids
TraceMessage
RegisterTraceGuidsW
GetTraceEnableLevel
GetTraceEnableFlags

api-ms-win-core-string-l2-1-0

CharUpperW
CharNextW

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-errorhandling-l1-1-0

GetLastError
UnhandledExceptionFilter
RaiseException
SetLastError
SetUnhandledExceptionFilter

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount

api-ms-win-core-debug-l1-1-0

OutputDebugStringA
DebugBreak

api-ms-win-core-kernel32-legacy-l1-1-0

MulDiv

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiW
lstrcmpiA

gdi32

CreateFontIndirectW
GetObjectW
GetTextMetricsW
SelectObject
GetStockObject
DeleteObject

user32

DefWindowProcW
DestroyWindow
CreateWindowExW
UnregisterClassW
RegisterClassExW
LoadCursorW
SetWindowLongW
GetMessageExtraInfo
GetWindow
ShowWindow
GetDlgCtrlID
IsWindowEnabled
GetDlgItem
CreateDialogIndirectParamW
InvalidateRect
GetNextDlgTabItem
GetWindowLongW
GetMessageW
AdjustWindowRectEx
GetKeyState
CallWindowProcW
PostMessageW
GetWindowRect
GetFocus
GetDC
SetWindowPos
SetMessageExtraInfo
MessageBoxW
GetPropW
MonitorFromWindow
SetWindowLongPtrW
SendMessageW
RemovePropW
MessageBeep
NotifyWinEvent
GetWindowLongPtrW
GetWindowPlacement
LoadStringW
IsWindow
OffsetRect
DispatchMessageW
IsDialogMessageW
GetMonitorInfoW
EnumPropsA
PeekMessageW
EnumPropsExW
IsChild
EnumPropsW
MoveWindow
SetFocus
SetPropW
TranslateMessage
GetClassNameW
MapDialogRect
GetClientRect
IsZoomed
SetRect
PostQuitMessage
GetDesktopWindow
SystemParametersInfoW
EnumPropsExA
GetParent
RegisterWindowMessageW
LoadImageW
ReleaseDC
EnableWindow
GetWindowTextW
FindWindowExW
GetSystemMetrics

duser

GetGadgetFocus

dui70

?Insert@Element@DirectUI@@UEAAJPEAPEAV12@II@Z
?GetWidth@Element@DirectUI@@QEAAHXZ
?GetHeight@Element@DirectUI@@QEAAHXZ
?SetHeight@Element@DirectUI@@QEAAJH@Z
?CreateXBaby@XProvider@DirectUI@@UEAAJPEAVIXElementCP@2@PEAUHWND__@@PEAVElement@2@PEAKPEAPEAUIXBaby@2@@Z
??0XProvider@DirectUI@@QEAA@XZ
??1XProvider@DirectUI@@UEAA@XZ
DisableAnimations
EnableAnimations
?SyncRect@HWNDHost@DirectUI@@IEAAXI_N@Z
?GetChildren@Element@DirectUI@@QEAAPEAV?$DynamicArray@PEAVElement@DirectUI@@$0A@@2@PEAPEAVValue@2@@Z
?GetClass@Element@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z
?SetVisited@TouchHyperLink@DirectUI@@QEAAJ_N@Z
?GetNotificationSinkHWND@XElement@DirectUI@@UEAAPEAUHWND__@@XZ
?GetCreationFlags@XElement@DirectUI@@UEAAIXZ
??0XElement@DirectUI@@QEAA@XZ
??1XElement@DirectUI@@UEAA@XZ
?OnInput@XElement@DirectUI@@UEAAXPEAUInputEvent@2@@Z
?OnMessage@XElement@DirectUI@@UEAA_NI_K_JPEA_J@Z
?OnSysChar@XElement@DirectUI@@UEAA_NG@Z
?OnSinkThemeChanged@XElement@DirectUI@@UEAA_NI_K_JPEA_J@Z
?OnEvent@XElement@DirectUI@@UEAAXPEAUEvent@2@@Z
?CreateHWND@XElement@DirectUI@@UEAAPEAUHWND__@@PEAU3@@Z
?SetKeyFocus@XElement@DirectUI@@UEAAXXZ
?GetClassInfoPtr@XElement@DirectUI@@SAPEAUIClassInfo@2@XZ
?Register@XElement@DirectUI@@SAJXZ
?SetProvider@XElement@DirectUI@@QEAAJPEAUIUnknown@@@Z
ElementFromGadget
?GetElementNull@Value@DirectUI@@SAPEAV12@XZ
?ParentProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
??1CritSecLock@DirectUI@@QEAA@XZ
?UpdateTooltip@Element@DirectUI@@MEAAXPEAV12@@Z
?ActivateTooltip@Element@DirectUI@@MEAAXPEAV12@K@Z
?RemoveTooltip@Element@DirectUI@@MEAAXPEAV12@@Z
?SetActive@Element@DirectUI@@QEAAJH@Z
?SetID@Element@DirectUI@@QEAAJPEBG@Z
?GetHWND@HWNDHost@DirectUI@@UEAAPEAUHWND__@@XZ
??0ClassInfoBase@DirectUI@@QEAA@XZ
??1ClassInfoBase@DirectUI@@UEAA@XZ
?Initialize@ClassInfoBase@DirectUI@@QEAAJPEAUHINSTANCE__@@PEBG_NPEBQEBUPropertyInfo@2@I@Z
?Register@ClassInfoBase@DirectUI@@QEAAJXZ
?ClassExist@ClassInfoBase@DirectUI@@SA_NPEAPEAUIClassInfo@2@PEBQEBUPropertyInfo@2@IPEAU32@PEAUHINSTANCE__@@PEBG_N@Z
?AddRef@ClassInfoBase@DirectUI@@UEAAXXZ
?Release@ClassInfoBase@DirectUI@@UEAAHXZ
?EnumPropertyInfo@ClassInfoBase@DirectUI@@UEAAPEBUPropertyInfo@2@I@Z
?GetByClassIndex@ClassInfoBase@DirectUI@@UEAAPEBUPropertyInfo@2@I@Z
?GetPICount@ClassInfoBase@DirectUI@@UEBAIXZ
?GetGlobalIndex@ClassInfoBase@DirectUI@@UEBAIXZ
?GetName@ClassInfoBase@DirectUI@@UEBAPEBGXZ
?IsValidProperty@ClassInfoBase@DirectUI@@UEBA_NPEBUPropertyInfo@2@@Z
?IsSubclassOf@ClassInfoBase@DirectUI@@UEBA_NPEAUIClassInfo@2@@Z
?GetModule@ClassInfoBase@DirectUI@@UEBAPEAUHINSTANCE__@@XZ
?IsGlobal@ClassInfoBase@DirectUI@@UEBA_NXZ
?AddChild@ClassInfoBase@DirectUI@@UEAAXXZ
?RemoveChild@ClassInfoBase@DirectUI@@UEAAXXZ
?GetChildren@ClassInfoBase@DirectUI@@UEBAHXZ
?AssertPIZeroRef@ClassInfoBase@DirectUI@@UEBAXXZ
?OnPropertyChanged@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?OnGroupChanged@Element@DirectUI@@UEAAXH_N@Z
?GetFactoryLock@Element@DirectUI@@SAPEAU_RTL_CRITICAL_SECTION@@XZ
?KeyFocusedProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?OnPropertyChanged@HWNDHost@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?OnInput@HWNDHost@DirectUI@@UEAAXPEAUInputEvent@2@@Z
?OnEvent@HWNDHost@DirectUI@@UEAAXPEAUEvent@2@@Z
?OnDestroy@HWNDHost@DirectUI@@UEAAXXZ
?OnNotify@HWNDHost@DirectUI@@UEAA_NI_K_JPEA_J@Z
?OnSysChar@HWNDHost@DirectUI@@UEAA_NG@Z
?OnSinkThemeChanged@HWNDHost@DirectUI@@UEAA_NI_K_JPEA_J@Z
?OnCtrlThemeChanged@HWNDHost@DirectUI@@UEAA_NI_K_JPEA_J@Z
?OnWindowStyleChanged@HWNDHost@DirectUI@@UEAAX_KPEBUtagSTYLESTRUCT@@@Z
?OnAdjustWindowSize@HWNDHost@DirectUI@@UEAAHHHI@Z
?MessageCallback@HWNDHost@DirectUI@@UEAAIPEAUtagGMSG@@@Z
?Paint@HWNDHost@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z
?GetKeyFocused@HWNDHost@DirectUI@@UEAA_NXZ
?SetKeyFocus@HWNDHost@DirectUI@@UEAAXXZ
?SetWindowDirection@HWNDHost@DirectUI@@UEAAXPEAUHWND__@@@Z
?GetClassInfoPtr@HWNDHost@DirectUI@@SAPEAUIClassInfo@2@XZ
?Register@HWNDHost@DirectUI@@SAJXZ
?GetAccessibleImpl@HWNDHost@DirectUI@@UEAAJPEAPEAUIAccessible@@@Z
??0HWNDHost@DirectUI@@QEAA@XZ
?Initialize@HWNDHost@DirectUI@@QEAAJIIPEAVElement@2@PEAK@Z
??1HWNDHost@DirectUI@@UEAA@XZ
?OnHosted@HWNDHost@DirectUI@@MEAAXPEAVElement@2@@Z
?OnUnHosted@HWNDHost@DirectUI@@MEAAXPEAVElement@2@@Z
?EraseBkgnd@HWNDHost@DirectUI@@MEAA_NPEAUHDC__@@PEA_J@Z
?Release@Value@DirectUI@@QEAAXXZ
?IsRTLReading@Element@DirectUI@@UEAA_NXZ
?IsContentProtected@Element@DirectUI@@UEAA_NXZ
?QueryInterface@Element@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z
?GetBorderThickness@Element@DirectUI@@QEAAPEBUtagRECT@@PEAPEAVValue@2@@Z
?GetPadding@Element@DirectUI@@QEAAPEBUtagRECT@@PEAPEAVValue@2@@Z
?GetFontFace@Element@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z
?GetFontSize@Element@DirectUI@@QEAAHXZ
?GetFontWeight@Element@DirectUI@@QEAAHXZ
?GetFontStyle@Element@DirectUI@@QEAAHXZ
?GetFontQuality@Element@DirectUI@@QEAAHXZ
?GetContentAlign@Element@DirectUI@@QEAAHXZ
?GetKeyFocused@Element@DirectUI@@UEAA_NXZ
?SetVisible@Element@DirectUI@@QEAAJ_N@Z
?SetWidth@Element@DirectUI@@QEAAJH@Z
?SetLayoutPos@Element@DirectUI@@QEAAJH@Z
?SetForegroundColor@Element@DirectUI@@QEAAJK@Z
?SetContentString@Element@DirectUI@@QEAAJPEBG@Z
?SetFontFace@Element@DirectUI@@QEAAJPEBG@Z
?SetFontSize@Element@DirectUI@@QEAAJH@Z
?SetFontWeight@Element@DirectUI@@QEAAJH@Z
?SetFontStyle@Element@DirectUI@@QEAAJH@Z
?SetFontQuality@Element@DirectUI@@QEAAJH@Z
?SetContentAlign@Element@DirectUI@@QEAAJH@Z
?SetClass@Element@DirectUI@@QEAAJPEBG@Z
?SetSelected@Element@DirectUI@@QEAAJ_N@Z
?SetAccessible@Element@DirectUI@@QEAAJ_N@Z
?SetAccRole@Element@DirectUI@@QEAAJH@Z
?SetAccName@Element@DirectUI@@QEAAJPEBG@Z
?SetAccDesc@Element@DirectUI@@QEAAJPEBG@Z
?SetEnabled@Element@DirectUI@@QEAAJ_N@Z
?SetLayout@Element@DirectUI@@QEAAJPEAVLayout@2@@Z
?CanSetFocus@HWNDElement@DirectUI@@UEAA_NXZ
?IsMSAAEnabled@HWNDElement@DirectUI@@UEAA_NXZ
?GetHWND@HWNDElement@DirectUI@@UEAAPEAUHWND__@@XZ
?GetClassInfoW@HWNDElement@DirectUI@@UEAAPEAUIClassInfo@2@XZ
?ShowWindow@NativeHWNDHost@DirectUI@@QEAAXH@Z
?DestroyWindow@NativeHWNDHost@DirectUI@@QEAAXXZ
?UpdateTooltip@TouchHWNDElement@DirectUI@@UEAAXPEAVElement@2@@Z
?ActivateTooltip@TouchHWNDElement@DirectUI@@UEAAXPEAVElement@2@K@Z
?RemoveTooltip@TouchHWNDElement@DirectUI@@UEAAXPEAVElement@2@@Z
?GetClassInfoW@TouchHWNDElement@DirectUI@@UEAAPEAUIClassInfo@2@XZ
??0IXProviderCP@DirectUI@@QEAA@XZ
?StartNavigate@Browser@DirectUI@@SA?AVUID@@XZ
CreateDUIWrapperTouchEx
?GetClassInfoPtr@TouchCommandButton@DirectUI@@SAPEAUIClassInfo@2@XZ
UnInitThread
CreateDUIWrapperEx
?SetLightDismissIHM@TouchHWNDElement@DirectUI@@QEAAJ_N@Z
?Initialize@TouchHWNDElement@DirectUI@@QEAAJPEAUHWND__@@_NIPEAVElement@2@PEAK@Z
?MessageCallback@TouchHWNDElement@DirectUI@@UEAAIPEAUtagGMSG@@@Z
?OnInput@TouchHWNDElement@DirectUI@@UEAAXPEAUInputEvent@2@@Z
?OnEvent@TouchHWNDElement@DirectUI@@UEAAXPEAUEvent@2@@Z
?OnKeyFocusMoved@TouchHWNDElement@DirectUI@@UEAAXPEAVElement@2@0@Z
?OnPropertyChanged@TouchHWNDElement@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?WndProc@TouchHWNDElement@DirectUI@@UEAA_JPEAUHWND__@@I_K_J@Z
?IsMSAAEnabled@TouchHWNDElement@DirectUI@@UEAA_NXZ
?OnDestroy@TouchHWNDElement@DirectUI@@UEAAXXZ
??0TouchHWNDElement@DirectUI@@QEAA@XZ
??1TouchHWNDElement@DirectUI@@UEAA@XZ
?_OnUIStateChanged@TouchHWNDElement@DirectUI@@MEAAXGG@Z
?Create@FillLayout@DirectUI@@SAJPEAPEAVLayout@2@@Z
?GetClassInfoPtr@TouchHyperLink@DirectUI@@SAPEAUIClassInfo@2@XZ
?Create@DUIXmlParser@DirectUI@@SAJPEAPEAV12@P6APEAVValue@2@PEBGPEAX@Z2P6AX11H2@Z2@Z
?Destroy@DUIXmlParser@DirectUI@@QEAAXXZ
?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJPEBGPEAUHINSTANCE__@@1@Z
?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJIPEAUHINSTANCE__@@0@Z
?CreateElement@DUIXmlParser@DirectUI@@QEAAJPEBGPEAVElement@2@1PEAKPEAPEAV32@@Z
?GetUnset@Value@DirectUI@@SAPEAV12@XZ
GetFontCache
?GetCount@Pages@DirectUI@@QEAAIXZ
?GetPage@Pages@DirectUI@@QEAAPEAVElement@2@I@Z
UnInitProcessPriv
?Destroy@Element@DirectUI@@QEAAJ_N@Z
?DestroyAll@Element@DirectUI@@QEAAJ_N@Z
?GetValue@Element@DirectUI@@QEAAPEAVValue@2@P6APEBUPropertyInfo@2@XZHPEAUUpdateCache@2@@Z
?GetValue@Element@DirectUI@@QEAAPEAVValue@2@PEBUPropertyInfo@2@HPEAUUpdateCache@2@@Z
?SetValue@Element@DirectUI@@QEAAJPEBUPropertyInfo@2@HPEAVValue@2@@Z
?RemoveLocalValue@Element@DirectUI@@QEAAJP6APEBUPropertyInfo@2@XZ@Z
?StartDefer@Element@DirectUI@@QEAAXPEAK@Z
?EndDefer@Element@DirectUI@@QEAAXK@Z
?GetContentStringAsDisplayed@Element@DirectUI@@UEAAPEBGPEAPEAVValue@2@@Z
?OnPropertyChanging@Element@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UEAA_NPEAUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanged@Element@DirectUI@@UEAAXPEAUPropertyInfo@2@HPEAVValue@2@1@Z
?OnKeyFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z
?OnMouseFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z
?FireEvent@Element@DirectUI@@QEAAXPEAUEvent@2@_N1@Z
?Paint@Element@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z
?GetContentSize@Element@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
?Add@Element@DirectUI@@UEAAJPEAPEAV12@I@Z
?Add@Element@DirectUI@@QEAAJPEAV12@@Z
?Remove@Element@DirectUI@@UEAAJPEAPEAV12@I@Z
?FindDescendent@Element@DirectUI@@QEAAPEAV12@G@Z
?IsDescendent@Element@DirectUI@@QEAA_NPEAV12@@Z
?GetAdjacent@Element@DirectUI@@UEAAPEAV12@PEAV12@HPEBUNavReference@2@K@Z
?EnsureVisible@Element@DirectUI@@UEAA_NHHHH@Z
?SetKeyFocus@Element@DirectUI@@UEAAXXZ
RegisterPVLBehaviorFactory
?s_uButtonFocusChangeMsg@XElement@DirectUI@@2IB
?_OnUIStateChanged@HWNDElement@DirectUI@@MEAAXGG@Z
?Initialize@HWNDElement@DirectUI@@QEAAJPEAUHWND__@@_NIPEAVElement@2@PEAK@Z
??1HWNDElement@DirectUI@@UEAA@XZ
??0HWNDElement@DirectUI@@QEAA@XZ
?GetAccessibleImpl@HWNDElement@DirectUI@@UEAAJPEAPEAUIAccessible@@@Z
?GetClassInfoPtr@HWNDElement@DirectUI@@SAPEAUIClassInfo@2@XZ
?FindShortcut@HWNDElement@DirectUI@@SA_NGPEAVElement@2@PEAPEAV32@PEAH2H@Z
?GetKeyFocusedElement@HWNDElement@DirectUI@@SAPEAVElement@2@XZ
?GetWindowClassNameAndStyle@HWNDElement@DirectUI@@UEAAXPEAPEBGPEAI@Z
?WndProc@HWNDElement@DirectUI@@UEAA_JPEAUHWND__@@I_K_J@Z
?CreateStyleParser@HWNDElement@DirectUI@@UEAAJPEAPEAVDUIXmlParser@2@@Z
?RemoveTooltip@HWNDElement@DirectUI@@UEAAXPEAVElement@2@@Z
?ActivateTooltip@HWNDElement@DirectUI@@UEAAXPEAVElement@2@K@Z
?UpdateTooltip@HWNDElement@DirectUI@@UEAAXPEAVElement@2@@Z
?OnCompositionChanged@HWNDElement@DirectUI@@UEAAXXZ
?OnWmSettingChanged@HWNDElement@DirectUI@@UEAAX_K_J@Z
?OnWmThemeChanged@HWNDElement@DirectUI@@UEAAX_K_J@Z
?OnGetDlgCode@HWNDElement@DirectUI@@UEAAXPEAUtagMSG@@PEA_J@Z
?OnNoChildWithShortcutFound@HWNDElement@DirectUI@@UEAAXPEAUKeyboardEvent@2@@Z
?OnInput@HWNDElement@DirectUI@@UEAAXPEAUInputEvent@2@@Z
?OnImmersiveColorSchemeChanged@HWNDElement@DirectUI@@UEAAXXZ
?OnThemeChanged@HWNDElement@DirectUI@@UEAAXPEAUThemeChangedEvent@2@@Z
?OnEvent@HWNDElement@DirectUI@@UEAAXPEAUEvent@2@@Z
?OnDestroy@HWNDElement@DirectUI@@UEAAXXZ
?OnGroupChanged@HWNDElement@DirectUI@@UEAAXH_N@Z
?OnPropertyChanged@HWNDElement@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?GetType@DCSurface@DirectUI@@UEBA?AW4EType@Surface@2@XZ
??1DCSurface@DirectUI@@UEAA@XZ
??0DCSurface@DirectUI@@QEAA@PEAUHDC__@@@Z
InitProcessPriv
?Click@Button@DirectUI@@SA?AVUID@@XZ
InitThread
?CreateHostWindow@NativeHWNDHost@DirectUI@@UEAAPEAUHWND__@@KPEBG0KHHHHPEAU3@PEAUHMENU__@@PEAUHINSTANCE__@@PEAX@Z
??1NativeHWNDHost@DirectUI@@UEAA@XZ
?Initialize@NativeHWNDHost@DirectUI@@QEAAJPEBG0PEAUHWND__@@PEAUHICON__@@HHHHHHPEAUHINSTANCE__@@I@Z
??0NativeHWNDHost@DirectUI@@QEAA@XZ
?Host@NativeHWNDHost@DirectUI@@QEAAXPEAVElement@2@@Z
?Destroy@NativeHWNDHost@DirectUI@@QEAAXXZ
?GetClassInfoPtr@CCPushButton@DirectUI@@SAPEAUIClassInfo@2@XZ
?GetClassInfoPtr@TouchButton@DirectUI@@SAPEAUIClassInfo@2@XZ
?Click@TouchButton@DirectUI@@SA?AVUID@@XZ
StrToID
?GetUiaFocusDelegate@Element@DirectUI@@UEAAPEAV12@XZ
?HandleUiaEventListener@Element@DirectUI@@UEAAXPEAUEvent@2@@Z
?HandleUiaPropertyChangingListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@@Z
?HandleUiaPropertyListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?HandleUiaDestroyListener@Element@DirectUI@@UEAAXXZ
?GetElementProviderImpl@Element@DirectUI@@UEAAJPEAVInvokeHelper@2@PEAPEAVElementProvider@2@@Z
?GetUIAElementProvider@Element@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z
?DefaultAction@Element@DirectUI@@UEAAJXZ
?KeyWithinProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?ActiveProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?BackgroundProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?ForegroundProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?DesiredSizeProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?WidthProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?VisibleProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?KeyboardNavigate@Element@DirectUI@@SA?AVUID@@XZ
?GetRoot@Element@DirectUI@@QEAAPEAV12@XZ
?OnUnHosted@Element@DirectUI@@MEAAXPEAV12@@Z
?OnHosted@Element@DirectUI@@MEAAXPEAV12@@Z
?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
?_SelfLayoutDoLayout@Element@DirectUI@@MEAAXHH@Z
?GetImmersiveFocusRectOffsets@Element@DirectUI@@UEAAXPEAUtagRECT@@@Z
?_UpdateDesiredSize@Element@DirectUI@@QEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
?MessageCallback@Element@DirectUI@@UEAAIPEAUtagGMSG@@@Z
?RemoveBehavior@Element@DirectUI@@UEAAJPEAUIDuiBehavior@@@Z
?AddBehavior@Element@DirectUI@@UEAAJPEAUIDuiBehavior@@@Z
?RemoveListener@Element@DirectUI@@QEAAXPEAUIElementListener@2@@Z
?AddListener@Element@DirectUI@@QEAAJPEAUIElementListener@2@@Z

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-libraryloader-l1-2-1

FindResourceW

api-ms-win-core-heap-l1-1-0

HeapAlloc
HeapFree
GetProcessHeap

api-ms-win-core-heap-l2-1-0

LocalFree

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-atoms-l1-1-0

GlobalAddAtomW
GlobalGetAtomNameW
GlobalDeleteAtom

api-ms-win-core-sidebyside-l1-1-0

ReleaseActCtx
DeactivateActCtx
ActivateActCtx
CreateActCtxW

api-ms-win-core-file-l1-1-0

GetFullPathNameW

api-ms-win-core-memory-l1-1-0

WriteProcessMemory

api-ms-win-core-shlwapi-legacy-l1-1-0

PathUnExpandEnvStringsW
PathFileExistsW

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 164KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Valorant Root TBR12.045/Config/xwtpw32.dll
.dll windows:10 windows x64 arch:x64

300fc784c161dd9297a5014527f364e5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

xwtpw32.pdb

Imports

msvcrt

_callnewh
_XcptFilter
__C_specific_handler
__CxxFrameHandler4
_vsnwprintf
towlower
tolower
memmove
memcpy
_initterm
_onexit
?what@exception@@UEBAPEBDXZ
??1exception@@UEAA@XZ
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@AEBQEBDH@Z
??0exception@@QEAA@AEBQEBD@Z
??_V@YAXPEAX@Z
memcpy_s
_purecall
??1type_info@@UEAA@XZ
??3@YAXPEAX@Z
_errno
__dllonexit
realloc
?terminate@@YAXXZ
__RTDynamicCast
free
malloc
__CxxFrameHandler3
wcsncpy_s
_lock
_CxxThrowException
_unlock
_amsg_exit
memset

api-ms-win-core-libraryloader-l1-2-0

LoadLibraryExW
GetModuleHandleA
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadResource
FindResourceExW
GetModuleFileNameW
GetModuleFileNameA
DisableThreadLibraryCalls
SizeofResource

api-ms-win-core-processthreads-l1-1-0

TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentProcessId
TlsFree
GetCurrentProcess
GetCurrentThreadId
TerminateProcess

api-ms-win-core-synch-l1-1-0

CreateMutexW
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
ReleaseMutex
InitializeCriticalSection

api-ms-win-core-com-l1-1-0

CoCreateGuid
CoTaskMemFree
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CLSIDFromString
StringFromGUID2

api-ms-win-core-registry-l1-1-0

RegDeleteValueW
RegOpenKeyExW
RegCreateKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegCloseKey
RegSetValueExW

api-ms-win-eventing-provider-l1-1-0

EventRegister
EventWriteTransfer
EventUnregister

api-ms-win-eventing-classicprovider-l1-1-0

UnregisterTraceGuids
GetTraceEnableFlags
RegisterTraceGuidsW
TraceMessage
GetTraceEnableLevel
GetTraceLoggerHandle

api-ms-win-core-string-l2-1-0

CharNextW

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
MultiByteToWideChar

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
SetLastError
GetLastError
RaiseException
UnhandledExceptionFilter

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount

api-ms-win-core-debug-l1-1-0

OutputDebugStringA
DebugBreak

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiA
lstrcmpiW

gdi32

DeleteObject
CreateFontIndirectW
GetObjectW

user32

PostMessageW
GetWindowRect
GetFocus
DestroyWindow
SetWindowPos
MessageBoxW
GetPropW
SetWindowLongPtrW
SendMessageW
RemovePropW
GetSystemMetrics
MessageBeep
GetWindowLongPtrW
IsWindow
EnumPropsA
PeekMessageW
EnumPropsExW
EnumPropsW
SetPropW
EnumPropsExA
GetParent
LoadImageW
GetWindowTextW
PostQuitMessage
LoadStringW
FindWindowExW
CallWindowProcW

dui70

?Create@DUIXmlParser@DirectUI@@SAJPEAPEAV12@P6APEAVValue@2@PEBGPEAX@Z2P6AX11H2@Z2@Z
InitThread
?AddListener@Element@DirectUI@@QEAAJPEAUIElementListener@2@@Z
?Destroy@Element@DirectUI@@QEAAJ_N@Z
?SetAccessible@Element@DirectUI@@QEAAJ_N@Z
??0IXProviderCP@DirectUI@@QEAA@XZ
UnInitThread
CreateDUIWrapperEx
InitProcessPriv
?Destroy@DUIXmlParser@DirectUI@@QEAAXXZ
?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJIPEAUHINSTANCE__@@0@Z
?CreateElement@DUIXmlParser@DirectUI@@QEAAJPEBGPEAVElement@2@1PEAKPEAPEAV32@@Z
UnInitProcessPriv

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapFree
HeapReAlloc
HeapAlloc

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-libraryloader-l1-2-1

FindResourceW
LoadLibraryW

api-ms-win-core-heap-l2-1-0

LocalFree

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-atoms-l1-1-0

GlobalGetAtomNameW
GlobalAddAtomW
GlobalDeleteAtom

api-ms-win-core-sidebyside-l1-1-0

DeactivateActCtx
ReleaseActCtx
CreateActCtxW
ActivateActCtx

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-file-l1-1-0

GetFullPathNameW

api-ms-win-core-memory-l1-1-0

WriteProcessMemory

api-ms-win-core-shlwapi-legacy-l1-1-0

PathUnExpandEnvStringsW
PathFileExistsW

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Valorant Root TBR12.045/Config/ze_loader.dll
.dll windows:6 windows x64 arch:x64

29b57bf2548b89ebc933ecd551bbecf9

Code Sign

33:00:00:00:dc:34:1a:52:0f:bb:cf:3d:8c:00:00:00:00:00:dc
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10-03-2022 19:58

Not After

08-03-2023 19:58

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:dc:34:1a:52:0f:bb:cf:3d:8c:00:00:00:00:00:dc
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10-03-2022 19:58

Not After

08-03-2023 19:58

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

20:1b:4e:49:c8:d4:30:a4:bb:ae:fd:75:2c:7c:74:2e:74:fe:4c:b0:b6:f3:65:9b:91:60:c4:db:4a:1c:32:50
Signer

Actual PE Digest

20:1b:4e:49:c8:d4:30:a4:bb:ae:fd:75:2c:7c:74:2e:74:fe:4c:b0:b6:f3:65:9b:91:60:c4:db:4a:1c:32:50

Digest Algorithm

sha256

PE Digest Matches

true

20:1b:4e:49:c8:d4:30:a4:bb:ae:fd:75:2c:7c:74:2e:74:fe:4c:b0:b6:f3:65:9b:91:60:c4:db:4a:1c:32:50
Signer

Actual PE Digest

20:1b:4e:49:c8:d4:30:a4:bb:ae:fd:75:2c:7c:74:2e:74:fe:4c:b0:b6:f3:65:9b:91:60:c4:db:4a:1c:32:50

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\project\build\bin\Release\ze_loader.pdb

Imports

cfgmgr32

CM_Open_DevNode_Key
CM_Locate_DevNodeW
CM_Get_DevNode_Status
CM_Get_Device_ID_List_SizeW
CM_Get_Device_ID_ListW

kernel32

WriteConsoleW
CreateFileW
GetEnvironmentVariableA
GetProcAddress
FreeLibrary
LoadLibraryExA
InitOnceBeginInitialize
InitOnceComplete
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleHandleW
EncodePointer
DecodePointer
MultiByteToWideChar
WideCharToMultiByte
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
SetFilePointerEx
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetStdHandle
HeapSize
CloseHandle

ole32

StringFromGUID2

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey

Exports

Exports

zeCommandListAppendBarrier
zeCommandListAppendEventReset
zeCommandListAppendImageCopy
zeCommandListAppendImageCopyFromMemory
zeCommandListAppendImageCopyFromMemoryExt
zeCommandListAppendImageCopyRegion
zeCommandListAppendImageCopyToMemory
zeCommandListAppendImageCopyToMemoryExt
zeCommandListAppendLaunchCooperativeKernel
zeCommandListAppendLaunchKernel
zeCommandListAppendLaunchKernelIndirect
zeCommandListAppendLaunchMultipleKernelsIndirect
zeCommandListAppendMemAdvise
zeCommandListAppendMemoryCopy
zeCommandListAppendMemoryCopyFromContext
zeCommandListAppendMemoryCopyRegion
zeCommandListAppendMemoryFill
zeCommandListAppendMemoryPrefetch
zeCommandListAppendMemoryRangesBarrier
zeCommandListAppendQueryKernelTimestamps
zeCommandListAppendSignalEvent
zeCommandListAppendWaitOnEvents
zeCommandListAppendWriteGlobalTimestamp
zeCommandListClose
zeCommandListCreate
zeCommandListCreateImmediate
zeCommandListDestroy
zeCommandListReset
zeCommandQueueCreate
zeCommandQueueDestroy
zeCommandQueueExecuteCommandLists
zeCommandQueueSynchronize
zeContextCreate
zeContextCreateEx
zeContextDestroy
zeContextEvictImage
zeContextEvictMemory
zeContextGetStatus
zeContextMakeImageResident
zeContextMakeMemoryResident
zeContextSystemBarrier
zeDeviceCanAccessPeer
zeDeviceGet
zeDeviceGetCacheProperties
zeDeviceGetCommandQueueGroupProperties
zeDeviceGetComputeProperties
zeDeviceGetExternalMemoryProperties
zeDeviceGetGlobalTimestamps
zeDeviceGetImageProperties
zeDeviceGetMemoryAccessProperties
zeDeviceGetMemoryProperties
zeDeviceGetModuleProperties
zeDeviceGetP2PProperties
zeDeviceGetProperties
zeDeviceGetStatus
zeDeviceGetSubDevices
zeDevicePciGetPropertiesExt
zeDeviceReserveCacheExt
zeDeviceSetCacheAdviceExt
zeDriverGet
zeDriverGetApiVersion
zeDriverGetExtensionFunctionAddress
zeDriverGetExtensionProperties
zeDriverGetIpcProperties
zeDriverGetProperties
zeEventCreate
zeEventDestroy
zeEventHostReset
zeEventHostSignal
zeEventHostSynchronize
zeEventPoolCloseIpcHandle
zeEventPoolCreate
zeEventPoolDestroy
zeEventPoolGetIpcHandle
zeEventPoolOpenIpcHandle
zeEventQueryKernelTimestamp
zeEventQueryStatus
zeEventQueryTimestampsExp
zeFenceCreate
zeFenceDestroy
zeFenceHostSynchronize
zeFenceQueryStatus
zeFenceReset
zeGetCommandListProcAddrTable
zeGetCommandQueueProcAddrTable
zeGetContextProcAddrTable
zeGetDeviceProcAddrTable
zeGetDriverProcAddrTable
zeGetEventExpProcAddrTable
zeGetEventPoolProcAddrTable
zeGetEventProcAddrTable
zeGetFenceProcAddrTable
zeGetGlobalProcAddrTable
zeGetImageExpProcAddrTable
zeGetImageProcAddrTable
zeGetKernelExpProcAddrTable
zeGetKernelProcAddrTable
zeGetMemProcAddrTable
zeGetModuleBuildLogProcAddrTable
zeGetModuleProcAddrTable
zeGetPhysicalMemProcAddrTable
zeGetSamplerProcAddrTable
zeGetVirtualMemProcAddrTable
zeImageCreate
zeImageDestroy
zeImageGetAllocPropertiesExt
zeImageGetMemoryPropertiesExp
zeImageGetProperties
zeImageViewCreateExp
zeInit
zeKernelCreate
zeKernelDestroy
zeKernelGetIndirectAccess
zeKernelGetName
zeKernelGetProperties
zeKernelGetSourceAttributes
zeKernelSchedulingHintExp
zeKernelSetArgumentValue
zeKernelSetCacheConfig
zeKernelSetGlobalOffsetExp
zeKernelSetGroupSize
zeKernelSetIndirectAccess
zeKernelSuggestGroupSize
zeKernelSuggestMaxCooperativeGroupCount
zeLoaderGetTracingHandle
zeLoaderInit
zeMemAllocDevice
zeMemAllocHost
zeMemAllocShared
zeMemCloseIpcHandle
zeMemFree
zeMemFreeExt
zeMemGetAddressRange
zeMemGetAllocProperties
zeMemGetIpcHandle
zeMemOpenIpcHandle
zeModuleBuildLogDestroy
zeModuleBuildLogGetString
zeModuleCreate
zeModuleDestroy
zeModuleDynamicLink
zeModuleGetFunctionPointer
zeModuleGetGlobalPointer
zeModuleGetKernelNames
zeModuleGetNativeBinary
zeModuleGetProperties
zeModuleInspectLinkageExt
zePhysicalMemCreate
zePhysicalMemDestroy
zeSamplerCreate
zeSamplerDestroy
zeVirtualMemFree
zeVirtualMemGetAccessAttribute
zeVirtualMemMap
zeVirtualMemQueryPageSize
zeVirtualMemReserve
zeVirtualMemSetAccessAttribute
zeVirtualMemUnmap
zelGetTracerApiProcAddrTable
zelLoaderDriverCheck
zelLoaderGetVersions
zelLoaderGetVersionsInternal
zelLoaderTranslateHandle
zelLoaderTranslateHandleInternal
zelTracerCommandListAppendBarrierRegisterCallback
zelTracerCommandListAppendEventResetRegisterCallback
zelTracerCommandListAppendImageCopyFromMemoryExtRegisterCallback
zelTracerCommandListAppendImageCopyFromMemoryRegisterCallback
zelTracerCommandListAppendImageCopyRegionRegisterCallback
zelTracerCommandListAppendImageCopyRegisterCallback
zelTracerCommandListAppendImageCopyToMemoryExtRegisterCallback
zelTracerCommandListAppendImageCopyToMemoryRegisterCallback
zelTracerCommandListAppendLaunchCooperativeKernelRegisterCallback
zelTracerCommandListAppendLaunchKernelIndirectRegisterCallback
zelTracerCommandListAppendLaunchKernelRegisterCallback
zelTracerCommandListAppendLaunchMultipleKernelsIndirectRegisterCallback
zelTracerCommandListAppendMemAdviseRegisterCallback
zelTracerCommandListAppendMemoryCopyFromContextRegisterCallback
zelTracerCommandListAppendMemoryCopyRegionRegisterCallback
zelTracerCommandListAppendMemoryCopyRegisterCallback
zelTracerCommandListAppendMemoryFillRegisterCallback
zelTracerCommandListAppendMemoryPrefetchRegisterCallback
zelTracerCommandListAppendMemoryRangesBarrierRegisterCallback
zelTracerCommandListAppendQueryKernelTimestampsRegisterCallback
zelTracerCommandListAppendSignalEventRegisterCallback
zelTracerCommandListAppendWaitOnEventsRegisterCallback
zelTracerCommandListAppendWriteGlobalTimestampRegisterCallback
zelTracerCommandListCloseRegisterCallback
zelTracerCommandListCreateImmediateRegisterCallback
zelTracerCommandListCreateRegisterCallback
zelTracerCommandListDestroyRegisterCallback
zelTracerCommandListResetRegisterCallback
zelTracerCommandQueueCreateRegisterCallback
zelTracerCommandQueueDestroyRegisterCallback
zelTracerCommandQueueExecuteCommandListsRegisterCallback
zelTracerCommandQueueSynchronizeRegisterCallback
zelTracerContextCreateExRegisterCallback
zelTracerContextCreateRegisterCallback
zelTracerContextDestroyRegisterCallback
zelTracerContextEvictImageRegisterCallback
zelTracerContextEvictMemoryRegisterCallback
zelTracerContextGetStatusRegisterCallback
zelTracerContextMakeImageResidentRegisterCallback
zelTracerContextMakeMemoryResidentRegisterCallback
zelTracerContextSystemBarrierRegisterCallback
zelTracerCreate
zelTracerDestroy
zelTracerDeviceCanAccessPeerRegisterCallback
zelTracerDeviceGetCachePropertiesRegisterCallback
zelTracerDeviceGetCommandQueueGroupPropertiesRegisterCallback
zelTracerDeviceGetComputePropertiesRegisterCallback
zelTracerDeviceGetExternalMemoryPropertiesRegisterCallback
zelTracerDeviceGetGlobalTimestampsRegisterCallback
zelTracerDeviceGetImagePropertiesRegisterCallback
zelTracerDeviceGetMemoryAccessPropertiesRegisterCallback
zelTracerDeviceGetMemoryPropertiesRegisterCallback
zelTracerDeviceGetModulePropertiesRegisterCallback
zelTracerDeviceGetP2PPropertiesRegisterCallback
zelTracerDeviceGetPropertiesRegisterCallback
zelTracerDeviceGetRegisterCallback
zelTracerDeviceGetStatusRegisterCallback
zelTracerDeviceGetSubDevicesRegisterCallback
zelTracerDevicePciGetPropertiesExtRegisterCallback
zelTracerDeviceReserveCacheExtRegisterCallback
zelTracerDeviceSetCacheAdviceExtRegisterCallback
zelTracerDriverGetApiVersionRegisterCallback
zelTracerDriverGetExtensionFunctionAddressRegisterCallback
zelTracerDriverGetExtensionPropertiesRegisterCallback
zelTracerDriverGetIpcPropertiesRegisterCallback
zelTracerDriverGetPropertiesRegisterCallback
zelTracerDriverGetRegisterCallback
zelTracerEventCreateRegisterCallback
zelTracerEventDestroyRegisterCallback
zelTracerEventHostResetRegisterCallback
zelTracerEventHostSignalRegisterCallback
zelTracerEventHostSynchronizeRegisterCallback
zelTracerEventPoolCloseIpcHandleRegisterCallback
zelTracerEventPoolCreateRegisterCallback
zelTracerEventPoolDestroyRegisterCallback
zelTracerEventPoolGetIpcHandleRegisterCallback
zelTracerEventPoolOpenIpcHandleRegisterCallback
zelTracerEventQueryKernelTimestampRegisterCallback
zelTracerEventQueryStatusRegisterCallback
zelTracerEventQueryTimestampsExpRegisterCallback
zelTracerFenceCreateRegisterCallback
zelTracerFenceDestroyRegisterCallback
zelTracerFenceHostSynchronizeRegisterCallback
zelTracerFenceQueryStatusRegisterCallback
zelTracerFenceResetRegisterCallback
zelTracerImageCreateRegisterCallback
zelTracerImageDestroyRegisterCallback
zelTracerImageGetAllocPropertiesExtRegisterCallback
zelTracerImageGetMemoryPropertiesExpRegisterCallback
zelTracerImageGetPropertiesRegisterCallback
zelTracerImageViewCreateExpRegisterCallback
zelTracerInitRegisterCallback
zelTracerKernelCreateRegisterCallback
zelTracerKernelDestroyRegisterCallback
zelTracerKernelGetIndirectAccessRegisterCallback
zelTracerKernelGetNameRegisterCallback
zelTracerKernelGetPropertiesRegisterCallback
zelTracerKernelGetSourceAttributesRegisterCallback
zelTracerKernelSchedulingHintExpRegisterCallback
zelTracerKernelSetArgumentValueRegisterCallback
zelTracerKernelSetCacheConfigRegisterCallback
zelTracerKernelSetGlobalOffsetExpRegisterCallback
zelTracerKernelSetGroupSizeRegisterCallback
zelTracerKernelSetIndirectAccessRegisterCallback
zelTracerKernelSuggestGroupSizeRegisterCallback
zelTracerKernelSuggestMaxCooperativeGroupCountRegisterCallback
zelTracerMemAllocDeviceRegisterCallback
zelTracerMemAllocHostRegisterCallback
zelTracerMemAllocSharedRegisterCallback
zelTracerMemCloseIpcHandleRegisterCallback
zelTracerMemFreeExtRegisterCallback
zelTracerMemFreeRegisterCallback
zelTracerMemGetAddressRangeRegisterCallback
zelTracerMemGetAllocPropertiesRegisterCallback
zelTracerMemGetIpcHandleRegisterCallback
zelTracerMemOpenIpcHandleRegisterCallback
zelTracerModuleBuildLogDestroyRegisterCallback
zelTracerModuleBuildLogGetStringRegisterCallback
zelTracerModuleCreateRegisterCallback
zelTracerModuleDestroyRegisterCallback
zelTracerModuleDynamicLinkRegisterCallback
zelTracerModuleGetFunctionPointerRegisterCallback
zelTracerModuleGetGlobalPointerRegisterCallback
zelTracerModuleGetKernelNamesRegisterCallback
zelTracerModuleGetNativeBinaryRegisterCallback
zelTracerModuleGetPropertiesRegisterCallback
zelTracerModuleInspectLinkageExtRegisterCallback
zelTracerPhysicalMemCreateRegisterCallback
zelTracerPhysicalMemDestroyRegisterCallback
zelTracerSamplerCreateRegisterCallback
zelTracerSamplerDestroyRegisterCallback
zelTracerSetEnabled
zelTracerSetEpilogues
zelTracerSetPrologues
zelTracerVirtualMemFreeRegisterCallback
zelTracerVirtualMemGetAccessAttributeRegisterCallback
zelTracerVirtualMemMapRegisterCallback
zelTracerVirtualMemQueryPageSizeRegisterCallback
zelTracerVirtualMemReserveRegisterCallback
zelTracerVirtualMemSetAccessAttributeRegisterCallback
zelTracerVirtualMemUnmapRegisterCallback
zesDeviceEnumDiagnosticTestSuites
zesDeviceEnumEngineGroups
zesDeviceEnumFabricPorts
zesDeviceEnumFans
zesDeviceEnumFirmwares
zesDeviceEnumFrequencyDomains
zesDeviceEnumLeds
zesDeviceEnumMemoryModules
zesDeviceEnumPerformanceFactorDomains
zesDeviceEnumPowerDomains
zesDeviceEnumPsus
zesDeviceEnumRasErrorSets
zesDeviceEnumSchedulers
zesDeviceEnumStandbyDomains
zesDeviceEnumTemperatureSensors
zesDeviceEventRegister
zesDeviceGetCardPowerDomain
zesDeviceGetProperties
zesDeviceGetState
zesDevicePciGetBars
zesDevicePciGetProperties
zesDevicePciGetState
zesDevicePciGetStats
zesDeviceProcessesGetState
zesDeviceReset
zesDiagnosticsGetProperties
zesDiagnosticsGetTests
zesDiagnosticsRunTests
zesDriverEventListen
zesDriverEventListenEx
zesEngineGetActivity
zesEngineGetProperties
zesFabricPortGetConfig
zesFabricPortGetLinkType
zesFabricPortGetProperties
zesFabricPortGetState
zesFabricPortGetThroughput
zesFabricPortSetConfig
zesFanGetConfig
zesFanGetProperties
zesFanGetState
zesFanSetDefaultMode
zesFanSetFixedSpeedMode
zesFanSetSpeedTableMode
zesFirmwareFlash
zesFirmwareGetProperties
zesFrequencyGetAvailableClocks
zesFrequencyGetProperties
zesFrequencyGetRange
zesFrequencyGetState
zesFrequencyGetThrottleTime
zesFrequencyOcGetCapabilities
zesFrequencyOcGetFrequencyTarget
zesFrequencyOcGetIccMax
zesFrequencyOcGetMode
zesFrequencyOcGetTjMax
zesFrequencyOcGetVoltageTarget
zesFrequencyOcSetFrequencyTarget
zesFrequencyOcSetIccMax
zesFrequencyOcSetMode
zesFrequencyOcSetTjMax
zesFrequencyOcSetVoltageTarget
zesFrequencySetRange
zesGetDeviceProcAddrTable
zesGetDiagnosticsProcAddrTable
zesGetDriverProcAddrTable
zesGetEngineProcAddrTable
zesGetFabricPortProcAddrTable
zesGetFanProcAddrTable
zesGetFirmwareProcAddrTable
zesGetFrequencyProcAddrTable
zesGetLedProcAddrTable
zesGetMemoryProcAddrTable
zesGetPerformanceFactorProcAddrTable
zesGetPowerProcAddrTable
zesGetPsuProcAddrTable
zesGetRasProcAddrTable
zesGetSchedulerProcAddrTable
zesGetStandbyProcAddrTable
zesGetTemperatureProcAddrTable
zesLedGetProperties
zesLedGetState
zesLedSetColor
zesLedSetState
zesMemoryGetBandwidth
zesMemoryGetProperties
zesMemoryGetState
zesPerformanceFactorGetConfig
zesPerformanceFactorGetProperties
zesPerformanceFactorSetConfig
zesPowerGetEnergyCounter
zesPowerGetEnergyThreshold
zesPowerGetLimits
zesPowerGetProperties
zesPowerSetEnergyThreshold
zesPowerSetLimits
zesPsuGetProperties
zesPsuGetState
zesRasGetConfig
zesRasGetProperties
zesRasGetState
zesRasSetConfig
zesSchedulerGetCurrentMode
zesSchedulerGetProperties
zesSchedulerGetTimeoutModeProperties
zesSchedulerGetTimesliceModeProperties
zesSchedulerSetComputeUnitDebugMode
zesSchedulerSetExclusiveMode
zesSchedulerSetTimeoutMode
zesSchedulerSetTimesliceMode
zesStandbyGetMode
zesStandbyGetProperties
zesStandbySetMode
zesTemperatureGetConfig
zesTemperatureGetProperties
zesTemperatureGetState
zesTemperatureSetConfig
zetCommandListAppendMetricMemoryBarrier
zetCommandListAppendMetricQueryBegin
zetCommandListAppendMetricQueryEnd
zetCommandListAppendMetricStreamerMarker
zetContextActivateMetricGroups
zetDebugAcknowledgeEvent
zetDebugAttach
zetDebugDetach
zetDebugGetRegisterSetProperties
zetDebugInterrupt
zetDebugReadEvent
zetDebugReadMemory
zetDebugReadRegisters
zetDebugResume
zetDebugWriteMemory
zetDebugWriteRegisters
zetDeviceGetDebugProperties
zetGetCommandListProcAddrTable
zetGetContextProcAddrTable
zetGetDebugProcAddrTable
zetGetDeviceProcAddrTable
zetGetKernelProcAddrTable
zetGetMetricGroupExpProcAddrTable
zetGetMetricGroupProcAddrTable
zetGetMetricProcAddrTable
zetGetMetricQueryPoolProcAddrTable
zetGetMetricQueryProcAddrTable
zetGetMetricStreamerProcAddrTable
zetGetModuleProcAddrTable
zetGetTracerExpProcAddrTable
zetKernelGetProfileInfo
zetMetricGet
zetMetricGetProperties
zetMetricGroupCalculateMetricValues
zetMetricGroupCalculateMultipleMetricValuesExp
zetMetricGroupGet
zetMetricGroupGetProperties
zetMetricQueryCreate
zetMetricQueryDestroy
zetMetricQueryGetData
zetMetricQueryPoolCreate
zetMetricQueryPoolDestroy
zetMetricQueryReset
zetMetricStreamerClose
zetMetricStreamerOpen
zetMetricStreamerReadData
zetModuleGetDebugInfo
zetTracerExpCreate
zetTracerExpDestroy
zetTracerExpSetEnabled
zetTracerExpSetEpilogues
zetTracerExpSetPrologues

Sections

.text
Size: 224KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Valorant Root TBR12.045/Config/ze_tracing_layer.dll
.dll windows:6 windows x64 arch:x64

cc740e021649bf1a632f8d7a9220fadb

Code Sign

33:00:00:00:dc:34:1a:52:0f:bb:cf:3d:8c:00:00:00:00:00:dc
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10-03-2022 19:58

Not After

08-03-2023 19:58

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:dc:34:1a:52:0f:bb:cf:3d:8c:00:00:00:00:00:dc
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10-03-2022 19:58

Not After

08-03-2023 19:58

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:f8:1b:a2:3e:56:3e:7f:2b:6f:68:ad:2a:ae:e6:cb:2a:8d:26:a4:d1:4c:5b:4a:b5:41:2a:84:63:cf:8f:f7
Signer

Actual PE Digest

07:f8:1b:a2:3e:56:3e:7f:2b:6f:68:ad:2a:ae:e6:cb:2a:8d:26:a4:d1:4c:5b:4a:b5:41:2a:84:63:cf:8f:f7

Digest Algorithm

sha256

PE Digest Matches

true

07:f8:1b:a2:3e:56:3e:7f:2b:6f:68:ad:2a:ae:e6:cb:2a:8d:26:a4:d1:4c:5b:4a:b5:41:2a:84:63:cf:8f:f7
Signer

Actual PE Digest

07:f8:1b:a2:3e:56:3e:7f:2b:6f:68:ad:2a:ae:e6:cb:2a:8d:26:a4:d1:4c:5b:4a:b5:41:2a:84:63:cf:8f:f7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\project\build\bin\Release\ze_tracing_layer.pdb

Imports

kernel32

QueryPerformanceCounter
QueryPerformanceFrequency
CloseHandle
Sleep
GetCurrentThreadId
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
WideCharToMultiByte
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
InitializeSListHead
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
HeapAlloc
HeapFree
GetStdHandle
GetFileType
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
ReadFile
ReadConsoleW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
CreateFileW
WriteConsoleW
RtlUnwind

Exports

Exports

zeGetCommandListProcAddrTable
zeGetCommandQueueProcAddrTable
zeGetContextProcAddrTable
zeGetDeviceProcAddrTable
zeGetDriverProcAddrTable
zeGetEventExpProcAddrTable
zeGetEventPoolProcAddrTable
zeGetEventProcAddrTable
zeGetFenceProcAddrTable
zeGetGlobalProcAddrTable
zeGetImageExpProcAddrTable
zeGetImageProcAddrTable
zeGetKernelExpProcAddrTable
zeGetKernelProcAddrTable
zeGetMemProcAddrTable
zeGetModuleBuildLogProcAddrTable
zeGetModuleProcAddrTable
zeGetPhysicalMemProcAddrTable
zeGetSamplerProcAddrTable
zeGetVirtualMemProcAddrTable
zelGetTracerApiProcAddrTable
zelLoaderGetVersion
zelTracerCommandListAppendBarrierRegisterCallback
zelTracerCommandListAppendEventResetRegisterCallback
zelTracerCommandListAppendImageCopyFromMemoryExtRegisterCallback
zelTracerCommandListAppendImageCopyFromMemoryRegisterCallback
zelTracerCommandListAppendImageCopyRegionRegisterCallback
zelTracerCommandListAppendImageCopyRegisterCallback
zelTracerCommandListAppendImageCopyToMemoryExtRegisterCallback
zelTracerCommandListAppendImageCopyToMemoryRegisterCallback
zelTracerCommandListAppendLaunchCooperativeKernelRegisterCallback
zelTracerCommandListAppendLaunchKernelIndirectRegisterCallback
zelTracerCommandListAppendLaunchKernelRegisterCallback
zelTracerCommandListAppendLaunchMultipleKernelsIndirectRegisterCallback
zelTracerCommandListAppendMemAdviseRegisterCallback
zelTracerCommandListAppendMemoryCopyFromContextRegisterCallback
zelTracerCommandListAppendMemoryCopyRegionRegisterCallback
zelTracerCommandListAppendMemoryCopyRegisterCallback
zelTracerCommandListAppendMemoryFillRegisterCallback
zelTracerCommandListAppendMemoryPrefetchRegisterCallback
zelTracerCommandListAppendMemoryRangesBarrierRegisterCallback
zelTracerCommandListAppendQueryKernelTimestampsRegisterCallback
zelTracerCommandListAppendSignalEventRegisterCallback
zelTracerCommandListAppendWaitOnEventsRegisterCallback
zelTracerCommandListAppendWriteGlobalTimestampRegisterCallback
zelTracerCommandListCloseRegisterCallback
zelTracerCommandListCreateImmediateRegisterCallback
zelTracerCommandListCreateRegisterCallback
zelTracerCommandListDestroyRegisterCallback
zelTracerCommandListResetRegisterCallback
zelTracerCommandQueueCreateRegisterCallback
zelTracerCommandQueueDestroyRegisterCallback
zelTracerCommandQueueExecuteCommandListsRegisterCallback
zelTracerCommandQueueSynchronizeRegisterCallback
zelTracerContextCreateExRegisterCallback
zelTracerContextCreateRegisterCallback
zelTracerContextDestroyRegisterCallback
zelTracerContextEvictImageRegisterCallback
zelTracerContextEvictMemoryRegisterCallback
zelTracerContextGetStatusRegisterCallback
zelTracerContextMakeImageResidentRegisterCallback
zelTracerContextMakeMemoryResidentRegisterCallback
zelTracerContextSystemBarrierRegisterCallback
zelTracerCreate
zelTracerDestroy
zelTracerDeviceCanAccessPeerRegisterCallback
zelTracerDeviceGetCachePropertiesRegisterCallback
zelTracerDeviceGetCommandQueueGroupPropertiesRegisterCallback
zelTracerDeviceGetComputePropertiesRegisterCallback
zelTracerDeviceGetExternalMemoryPropertiesRegisterCallback
zelTracerDeviceGetGlobalTimestampsRegisterCallback
zelTracerDeviceGetImagePropertiesRegisterCallback
zelTracerDeviceGetMemoryAccessPropertiesRegisterCallback
zelTracerDeviceGetMemoryPropertiesRegisterCallback
zelTracerDeviceGetModulePropertiesRegisterCallback
zelTracerDeviceGetP2PPropertiesRegisterCallback
zelTracerDeviceGetPropertiesRegisterCallback
zelTracerDeviceGetRegisterCallback
zelTracerDeviceGetStatusRegisterCallback
zelTracerDeviceGetSubDevicesRegisterCallback
zelTracerDevicePciGetPropertiesExtRegisterCallback
zelTracerDeviceReserveCacheExtRegisterCallback
zelTracerDeviceSetCacheAdviceExtRegisterCallback
zelTracerDriverGetApiVersionRegisterCallback
zelTracerDriverGetExtensionFunctionAddressRegisterCallback
zelTracerDriverGetExtensionPropertiesRegisterCallback
zelTracerDriverGetIpcPropertiesRegisterCallback
zelTracerDriverGetPropertiesRegisterCallback
zelTracerDriverGetRegisterCallback
zelTracerEventCreateRegisterCallback
zelTracerEventDestroyRegisterCallback
zelTracerEventHostResetRegisterCallback
zelTracerEventHostSignalRegisterCallback
zelTracerEventHostSynchronizeRegisterCallback
zelTracerEventPoolCloseIpcHandleRegisterCallback
zelTracerEventPoolCreateRegisterCallback
zelTracerEventPoolDestroyRegisterCallback
zelTracerEventPoolGetIpcHandleRegisterCallback
zelTracerEventPoolOpenIpcHandleRegisterCallback
zelTracerEventQueryKernelTimestampRegisterCallback
zelTracerEventQueryStatusRegisterCallback
zelTracerEventQueryTimestampsExpRegisterCallback
zelTracerFenceCreateRegisterCallback
zelTracerFenceDestroyRegisterCallback
zelTracerFenceHostSynchronizeRegisterCallback
zelTracerFenceQueryStatusRegisterCallback
zelTracerFenceResetRegisterCallback
zelTracerImageCreateRegisterCallback
zelTracerImageDestroyRegisterCallback
zelTracerImageGetAllocPropertiesExtRegisterCallback
zelTracerImageGetMemoryPropertiesExpRegisterCallback
zelTracerImageGetPropertiesRegisterCallback
zelTracerImageViewCreateExpRegisterCallback
zelTracerInitRegisterCallback
zelTracerKernelCreateRegisterCallback
zelTracerKernelDestroyRegisterCallback
zelTracerKernelGetIndirectAccessRegisterCallback
zelTracerKernelGetNameRegisterCallback
zelTracerKernelGetPropertiesRegisterCallback
zelTracerKernelGetSourceAttributesRegisterCallback
zelTracerKernelSchedulingHintExpRegisterCallback
zelTracerKernelSetArgumentValueRegisterCallback
zelTracerKernelSetCacheConfigRegisterCallback
zelTracerKernelSetGlobalOffsetExpRegisterCallback
zelTracerKernelSetGroupSizeRegisterCallback
zelTracerKernelSetIndirectAccessRegisterCallback
zelTracerKernelSuggestGroupSizeRegisterCallback
zelTracerKernelSuggestMaxCooperativeGroupCountRegisterCallback
zelTracerMemAllocDeviceRegisterCallback
zelTracerMemAllocHostRegisterCallback
zelTracerMemAllocSharedRegisterCallback
zelTracerMemCloseIpcHandleRegisterCallback
zelTracerMemFreeExtRegisterCallback
zelTracerMemFreeRegisterCallback
zelTracerMemGetAddressRangeRegisterCallback
zelTracerMemGetAllocPropertiesRegisterCallback
zelTracerMemGetIpcHandleRegisterCallback
zelTracerMemOpenIpcHandleRegisterCallback
zelTracerModuleBuildLogDestroyRegisterCallback
zelTracerModuleBuildLogGetStringRegisterCallback
zelTracerModuleCreateRegisterCallback
zelTracerModuleDestroyRegisterCallback
zelTracerModuleDynamicLinkRegisterCallback
zelTracerModuleGetFunctionPointerRegisterCallback
zelTracerModuleGetGlobalPointerRegisterCallback
zelTracerModuleGetKernelNamesRegisterCallback
zelTracerModuleGetNativeBinaryRegisterCallback
zelTracerModuleGetPropertiesRegisterCallback
zelTracerModuleInspectLinkageExtRegisterCallback
zelTracerPhysicalMemCreateRegisterCallback
zelTracerPhysicalMemDestroyRegisterCallback
zelTracerSamplerCreateRegisterCallback
zelTracerSamplerDestroyRegisterCallback
zelTracerSetEnabled
zelTracerSetEpilogues
zelTracerSetPrologues
zelTracerVirtualMemFreeRegisterCallback
zelTracerVirtualMemGetAccessAttributeRegisterCallback
zelTracerVirtualMemMapRegisterCallback
zelTracerVirtualMemQueryPageSizeRegisterCallback
zelTracerVirtualMemReserveRegisterCallback
zelTracerVirtualMemSetAccessAttributeRegisterCallback
zelTracerVirtualMemUnmapRegisterCallback

Sections

.text
Size: 329KB - Virtual size: 329KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Valorant Root TBR12.045/Config/ze_validation_layer.dll
.dll windows:6 windows x64 arch:x64

ee97861aae9ec5766031c542c399e52b

Code Sign

33:00:00:00:dc:34:1a:52:0f:bb:cf:3d:8c:00:00:00:00:00:dc
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10-03-2022 19:58

Not After

08-03-2023 19:58

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:dc:34:1a:52:0f:bb:cf:3d:8c:00:00:00:00:00:dc
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10-03-2022 19:58

Not After

08-03-2023 19:58

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

35:ec:6e:85:64:50:d7:73:7c:04:57:d2:29:12:39:9c:98:b7:82:b9:2f:c1:d1:7b:53:3b:6a:bf:97:b6:a6:c2
Signer

Actual PE Digest

35:ec:6e:85:64:50:d7:73:7c:04:57:d2:29:12:39:9c:98:b7:82:b9:2f:c1:d1:7b:53:3b:6a:bf:97:b6:a6:c2

Digest Algorithm

sha256

PE Digest Matches

true

35:ec:6e:85:64:50:d7:73:7c:04:57:d2:29:12:39:9c:98:b7:82:b9:2f:c1:d1:7b:53:3b:6a:bf:97:b6:a6:c2
Signer

Actual PE Digest

35:ec:6e:85:64:50:d7:73:7c:04:57:d2:29:12:39:9c:98:b7:82:b9:2f:c1:d1:7b:53:3b:6a:bf:97:b6:a6:c2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\project\build\bin\Release\ze_validation_layer.pdb

Imports

kernel32

GetEnvironmentVariableA
WriteConsoleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle

Exports

Exports

zeGetCommandListProcAddrTable
zeGetCommandQueueProcAddrTable
zeGetContextProcAddrTable
zeGetDeviceProcAddrTable
zeGetDriverProcAddrTable
zeGetEventExpProcAddrTable
zeGetEventPoolProcAddrTable
zeGetEventProcAddrTable
zeGetFenceProcAddrTable
zeGetGlobalProcAddrTable
zeGetImageExpProcAddrTable
zeGetImageProcAddrTable
zeGetKernelExpProcAddrTable
zeGetKernelProcAddrTable
zeGetMemProcAddrTable
zeGetModuleBuildLogProcAddrTable
zeGetModuleProcAddrTable
zeGetPhysicalMemProcAddrTable
zeGetSamplerProcAddrTable
zeGetVirtualMemProcAddrTable
zelLoaderGetVersion
zesGetDeviceProcAddrTable
zesGetDiagnosticsProcAddrTable
zesGetDriverProcAddrTable
zesGetEngineProcAddrTable
zesGetFabricPortProcAddrTable
zesGetFanProcAddrTable
zesGetFirmwareProcAddrTable
zesGetFrequencyProcAddrTable
zesGetLedProcAddrTable
zesGetMemoryProcAddrTable
zesGetPerformanceFactorProcAddrTable
zesGetPowerProcAddrTable
zesGetPsuProcAddrTable
zesGetRasProcAddrTable
zesGetSchedulerProcAddrTable
zesGetStandbyProcAddrTable
zesGetTemperatureProcAddrTable
zetGetCommandListProcAddrTable
zetGetContextProcAddrTable
zetGetDebugProcAddrTable
zetGetDeviceProcAddrTable
zetGetKernelProcAddrTable
zetGetMetricGroupExpProcAddrTable
zetGetMetricGroupProcAddrTable
zetGetMetricProcAddrTable
zetGetMetricQueryPoolProcAddrTable
zetGetMetricQueryProcAddrTable
zetGetMetricStreamerProcAddrTable
zetGetModuleProcAddrTable
zetGetTracerExpProcAddrTable

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Valorant Root TBR12.045/Config/zipcontainer.dll
.dll windows:10 windows x64 arch:x64

7258535c6a60642590c2e8a1c82d1ad1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

ZipContainer.pdb

Imports

msvcrt

_callnewh
malloc
_XcptFilter
_lock
_amsg_exit
free
_wcsicmp
__dllonexit
_initterm
_onexit
memmove
_unlock
__CxxFrameHandler3
_vsnwprintf
__C_specific_handler
memcpy
memset

api-ms-win-core-file-l1-1-0

WriteFile
CreateFileW
ReadFile
DeleteFileW
SetEndOfFile
CreateDirectoryW
SetFilePointer

api-ms-win-core-errorhandling-l1-1-0

GetLastError
RaiseException
SetUnhandledExceptionFilter
UnhandledExceptionFilter

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-heap-l2-1-0

LocalFree
LocalAlloc

api-ms-win-core-registry-l1-1-0

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

api-ms-win-core-synch-l1-1-0

EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-core-com-l1-1-0

StringFromGUID2
CoCreateGuid

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
GetCurrentThreadId
TerminateProcess
GetCurrentProcess

api-ms-win-core-sysinfo-l1-1-0

GetTickCount
GetSystemTimeAsFileTime

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry

api-ms-win-core-heap-l1-1-0

HeapFree
HeapAlloc
GetProcessHeap

Exports

Exports

CreateFileStream
ZipContainerCreateArchiveOnFile
ZipContainerInitialize
ZipContainerUninitialize

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Valorant Root TBR12.045/Config/zipfldr.dll
.dll windows:10 windows x64 arch:x64

18051d580a1b619b0408f57ab733d3f8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

zipfldr.pdb

Imports

api-ms-win-crt-string-l1-1-0

memset
strncmp
wcsncmp
strcmp

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e

api-ms-win-crt-private-l1-1-0

_o__mktime32
_o__purecall
_o__register_onexit_function
_o__seh_filter_dll
_o_abort
_o_calloc
memmove
_o_ceilf
_o_free
_o_iswspace
_o_malloc
_o_qsort
__C_specific_handler
__CxxFrameHandler3
_o__localtime32
_o__ismbstrail
wcsrchr
wcsstr
__std_terminate
__CxxFrameHandler4
wcschr
_o__invalid_parameter_noinfo_noreturn
_o__invalid_parameter_noinfo
_o__initialize_onexit_table
_o__initialize_narrow_environment
_o__gmtime32
_o__getdrive
_o__execute_onexit_table
_o__errno
_o__crt_atexit
_o__configure_narrow_argv
_o__cexit
_o__access
_o___stdio_common_vswscanf
_o___stdio_common_vswprintf
_o___stdio_common_vsprintf
_o___stdio_common_vsnprintf_s
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
_CxxThrowException
memcmp
memcpy

propsys

InitVariantFromBuffer
PSCreateMemoryPropertyStore
PropVariantToVariant
PSFormatForDisplay
VariantToPropVariant
VariantCompare
VariantToBuffer
VariantToStringArrayAlloc
PropVariantGetElementCount
PSCreateSimplePropertyChange
PSCreatePropertyChangeArray
InitVariantFromFileTime

shell32

ord28
SHChangeNotifySuspendResume
ord190
SHFileOperationW
SHGetIDListFromObject
SHBindToObject
ord165
ord714
SHGetFolderPathEx
ShellExecuteW
SHCreateItemWithParent
ord152
ord25
SHCreateDataObject
ord67
ShellExecuteExW
ord73
ExtractIconExW
ord18
SHGetSpecialFolderPathW
ord75
ord21
SHBindToParent
SHGetPathFromIDListW
ord19
SHBindToFolderIDListParent
SHBindToFolderIDListParentEx
SHCreateItemFromIDList
AssocCreateForClasses
ord743
SHAddToRecentDocs
ord744
ord781
ord17
SHGetSpecialFolderLocation
ord155
ord760
SHParseDisplayName
DragQueryFileW
SHGetKnownFolderPath
ord853
SHCreateShellItemArrayFromDataObject
SHGetItemFromDataObject
SHGetNameFromIDList
SHChangeNotify
ord239
SHGetFileInfoW
ord16
SHCreateItemFromParsingName
SHGetStockIconInfo
ord256

shlwapi

StrFormatKBSizeW
ord354
ord500
ord503
ord217
ord215
ord158
ord388
PathIsUNCW
PathGetDriveNumberW
PathFindExtensionW
StrRetToBufW
SHStrDupW
PathFindFileNameW
ord219
PathCombineW
ord157
PathStripToRootW
PathSkipRootW
PathRemoveFileSpecW
ord16
PathStripPathW
PathFileExistsW
ord446
ord172
PathAppendW
ord218
ord199
ord501
StrCmpNIW
ord174
ord186
PathRemoveBackslashW
PathAddBackslashW
SHAutoComplete
ord516
StrTrimW
PathIsRelativeW
PathIsDirectoryW
ord517
PathRemoveBlanksW
ord176
SHCreateStreamOnFileW
ord540
PathRemoveExtensionW
ord346
PathCompactPathW
ord485
ord619
StrChrW
ord502
PathFindExtensionA
PathIsSameRootW
PathMatchSpecExA
StrCmpIW
PathIsPrefixW
ord216
StrDupW
ord456
PathCanonicalizeW
ord231

archiveint

archive_write_set_bytes_per_block
archive_read_has_encrypted_entries
archive_error_string
archive_errno
archive_read_next_header
archive_read_open_filename_w
archive_read_support_filter_all
archive_read_support_format_raw
archive_read_support_format_all
archive_read_free
archive_read_data_block
archive_entry_fflags
archive_entry_mode
archive_entry_birthtime
archive_entry_birthtime_nsec
archive_entry_birthtime_is_set
archive_entry_atime
archive_entry_atime_nsec
archive_entry_atime_is_set
archive_entry_mtime_is_set
archive_write_free
archive_entry_free
archive_entry_linkresolver_free
archive_write_data
archive_write_header
archive_entry_set_mode
archive_entry_set_rdev
archive_entry_set_gid
archive_entry_set_uid
archive_entry_set_size
archive_entry_set_nlink
archive_entry_set_ino64
archive_entry_set_dev
archive_entry_set_ctime
archive_entry_set_birthtime
archive_entry_set_mtime
archive_read_new
archive_entry_copy_symlink_w
archive_entry_set_symlink_type
archive_entry_copy_sourcepath_w
archive_entry_copy_pathname_w
archive_entry_clear
archive_entry_sourcepath_w
archive_entry_linkify
archive_entry_linkresolver_set_strategy
archive_entry_linkresolver_new
archive_entry_new2
archive_write_open
archive_write_set_bytes_in_last_block
archive_entry_set_atime
archive_write_set_option
archive_write_add_filter
archive_write_set_options
archive_write_set_format
archive_write_new
archive_entry_hardlink_w
archive_set_error
archive_write_fail
archive_read_set_format_option
archive_entry_size
archive_entry_mtime
archive_entry_mtime_nsec
archive_format
archive_entry_filetype
archive_entry_pathname_w
archive_entry_symlink_w
archive_entry_symlink_type

api-ms-win-core-libraryloader-l1-2-0

LoadStringW
DisableThreadLibraryCalls
FindResourceExW
LoadResource
GetModuleFileNameA
GetModuleHandleExA
LoadLibraryExW
GetModuleFileNameW
LockResource
GetModuleHandleExW
GetModuleHandleW
GetProcAddress
FindStringOrdinal

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize
InitOnceComplete

api-ms-win-core-synch-l1-1-0

OpenSemaphoreW
CreateSemaphoreExW
ReleaseSRWLockShared
EnterCriticalSection
CreateMutexExW
ReleaseSRWLockExclusive
InitializeCriticalSection
AcquireSRWLockShared
DeleteCriticalSection
ReleaseMutex
SetEvent
WaitForSingleObject
InitializeCriticalSectionAndSpinCount
ResetEvent
InitializeCriticalSectionEx
WaitForSingleObjectEx
LeaveCriticalSection
CreateEventW
ReleaseSemaphore
CreateEventExW
AcquireSRWLockExclusive

api-ms-win-core-heap-l1-1-0

HeapFree
HeapAlloc
GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetLastError
GetLastError

api-ms-win-eventing-provider-l1-1-0

EventSetInformation
EventUnregister
EventRegister
EventWriteTransfer
EventActivityIdControl

api-ms-win-core-threadpool-l1-2-0

WaitForThreadpoolTimerCallbacks
CreateThreadpoolTimer
SetThreadpoolTimer
CloseThreadpoolTimer

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess
GetProcessId
TlsAlloc
GetCurrentThreadId
TlsFree
TlsSetValue
GetCurrentProcessId
TerminateProcess
TlsGetValue

api-ms-win-core-localization-l1-2-0

FormatMessageW
IsDBCSLeadByte

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
DebugBreak
OutputDebugStringW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-heap-l2-1-0

LocalFree
GlobalFree
GlobalAlloc
LocalAlloc

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler
CoTaskMemAlloc
CoInitializeEx
CoTaskMemFree
CoGetCallContext
CoUnmarshalInterface
CoTaskMemRealloc
CoGetInterfaceAndReleaseStream
PropVariantClear
CoReleaseMarshalData
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
CoUninitialize

api-ms-win-core-string-l1-1-0

CompareStringOrdinal
WideCharToMultiByte
CompareStringW
MultiByteToWideChar

api-ms-win-core-path-l1-1-0

PathCchAppendEx
PathCchRemoveFileSpec
PathCchSkipRoot
PathAllocCombine
PathCchCanonicalizeEx
PathCchAppend
PathCchCombine

api-ms-win-core-file-l1-1-0

CreateFileA
GetFileSizeEx
GetDriveTypeA
FileTimeToLocalFileTime
GetFileAttributesExA
GetVolumeInformationW
FindFirstFileA
GetFullPathNameW
SetFileInformationByHandle
FindClose
FindNextFileA
GetDiskFreeSpaceExW
GetFinalPathNameByHandleW
CompareFileTime
GetFileTime
SetFilePointer
CreateDirectoryW
GetFileAttributesExW
FindNextFileW
SetFileTime
DeleteFileW
GetDriveTypeW
GetFileInformationByHandle
GetFileAttributesW
FindFirstFileExW
LocalFileTimeToFileTime
FindFirstFileW
WriteFile
SetFileAttributesW
RemoveDirectoryW
ReadFile
CreateFileW

api-ms-win-core-string-l2-1-0

CharLowerW
CharUpperBuffW
CharNextW
CharUpperW

api-ms-win-security-credentials-l1-1-0

CredReadW
CredFree
CredWriteW

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-core-processenvironment-l1-1-0

SetCurrentDirectoryW
GetCurrentDirectoryW

oleaut32

VariantInit
SafeArrayCreate
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
SysAllocString
SysStringLen
SysFreeString
SetErrorInfo
VariantClear

api-ms-win-core-file-l2-1-0

GetFileInformationByHandleEx
CreateHardLinkW
ReplaceFileW
CreateSymbolicLinkW

rpcrt4

UuidToStringW
UuidCreate
RpcStringFreeW

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-io-l1-1-0

DeviceIoControl

api-ms-win-core-registry-l1-1-0

RegGetValueA

api-ms-win-shcore-taskpool-l1-1-0

SHTaskPoolQueueTask

gdi32

GetStockObject

kernel32

GlobalReAlloc
GlobalHandle
lstrcmpiW
lstrlenA
GlobalSize
GlobalLock
lstrcmpW
lstrlenW
GlobalUnlock
DosDateTimeToFileTime
lstrcmpA
lstrcmpiA
ActivateActCtx
DeactivateActCtx
CreateActCtxW
ReleaseActCtx
FileTimeToDosDateTime

ntdll

RtlpEnsureBufferSize
RtlFreeUnicodeString
RtlNtPathNameToDosPathName
RtlGetLastNtStatus
RtlIsPartialPlaceholder
WinSqmAddToStream

ole32

CoAllowSetForegroundWindow
CreateBindCtx
ReleaseStgMedium
OleSetClipboard
OleGetClipboard

user32

RegisterClipboardFormatW
InsertMenuW
CharToOemA
OemToCharBuffA
SetMenuDefaultItem
DestroyMenu
CreateWindowExW
CharUpperBuffA
CharPrevA
CharToOemBuffA
CharLowerA
CharNextA
DispatchMessageA
PeekMessageA
GetWindowTextLengthW
GetDesktopWindow
GetParent
DialogBoxParamW
RemoveMenu
GetSubMenu
LoadMenuW
DestroyWindow
SetWindowLongPtrW
TrackPopupMenu
GetForegroundWindow
RegisterClassW
DefWindowProcW
GetAsyncKeyState
SetForegroundWindow
GetWindowRect
GetDlgItemTextW
GetWindowLongPtrW
SendMessageW
PostMessageW
EnableWindow
GetDlgItem
SetDlgItemTextW
GetWindowTextW
IsDlgButtonChecked
SetFocus
SetThreadDpiAwarenessContext
PeekMessageW
TranslateMessage
DispatchMessageW
DeleteMenu
EndDialog
SetCursor
LoadCursorW
ShowCursor
DestroyIcon
SendDlgItemMessageW
SetWindowTextW
CheckDlgButton
GetWindow
GetWindowLongW

msvcp_win

?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z

api-ms-win-crt-time-l1-1-0

_time32

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-sysinfo-l1-2-0

GetSystemTimePreciseAsFileTime

Exports

Exports

DllCanUnloadNow
DllGetClassObject
RouteTheCall

Sections

.text
Size: 448KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Valorant Root TBR12.045/Config/ztrace_maps.dll
.dll windows:10 windows x64 arch:x64

f4ce4a99f4aa4a7ca7fe6c5acbc36e55

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

ztrace_maps.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm

api-ms-win-crt-private-l1-1-0

_o___stdio_common_vsprintf
_o__callnewh
_o__cexit
_o__configure_narrow_argv
_o__crt_atexit
_o__execute_onexit_table
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__register_onexit_function
_o__seh_filter_dll
_o___std_type_info_destroy_list
_o_free
_o_malloc
_CxxThrowException
_o___std_exception_destroy
_o___std_exception_copy
__C_specific_handler

api-ms-win-crt-string-l1-1-0

memset

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls

api-ms-win-eventing-provider-l1-1-0

EventRegister
EventUnregister
EventWriteTransfer
EventSetInformation

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
OutputDebugStringA

api-ms-win-core-registry-l1-1-0

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

api-ms-win-core-errorhandling-l1-1-0

GetLastError
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException

api-ms-win-core-synch-l1-1-0

EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
TerminateProcess

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind
RtlCaptureContext
RtlLookupFunctionEntry

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

Exports

Exports

ZTraceClose
ZTraceEnabledHelper
ZTraceHelper
ZTraceHelperNoThis
ZTraceHelperV
ZTraceHelperVC
ZTraceInit
ZTraceReportIgnore
ZTraceReportIgnoreC
ZTraceReportIgnoreNoThis
ZTraceReportOrigination
ZTraceReportOriginationC
ZTraceReportOriginationNoThis
ZTraceReportPropagation
ZTraceReportPropagationC
ZTraceReportPropagationNoThis
ZTraceTestCopyTrace
ZTraceTestForceClose
ZTraceTestInit

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Valorant Root TBR12.045/Game.db
Valorant Root TBR12.045/Game.manifest
Valorant Root TBR12.045/Plugins/Astra/hurtoler.client
Valorant Root TBR12.045/Plugins/Breach/tgn76y.client
Valorant Root TBR12.045/Plugins/Brimstone/ghy65.client
Valorant Root TBR12.045/Plugins/Chamber/vgt54.client
Valorant Root TBR12.045/Plugins/Clove/bhuvu7.client
Valorant Root TBR12.045/Plugins/Cypher/awdcr5.client
Valorant Root TBR12.045/Plugins/Deadlock/56yhgt4.client
Valorant Root TBR12.045/Plugins/Fade/kmjuy7.client
Valorant Root TBR12.045/Plugins/Gekko/bhgt54.client
Valorant Root TBR12.045/Plugins/Harbor/plkmj7651.client
Valorant Root TBR12.045/Plugins/Iso/019dhydb.client
Valorant Root TBR12.045/Plugins/Jett/bhyd6.client
Valorant Root TBR12.045/Plugins/Kay_O/cdre34sw.client
Valorant Root TBR12.045/Plugins/Killjoy/54rfdew.client
Valorant Root TBR12.045/Plugins/Neon/gt56r.client
Valorant Root TBR12.045/Plugins/Omen/cvfgt543.client
Valorant Root TBR12.045/Plugins/Phoneix/12gds67.client
Valorant Root TBR12.045/Plugins/Raze/654fgtr4.client
Valorant Root TBR12.045/Plugins/Reyna/hurtoler.client
Valorant Root TBR12.045/Plugins/Sage/hurtoler.client
Valorant Root TBR12.045/Plugins/Skye/hurtoler.client
Valorant Root TBR12.045/Plugins/Sova/hurtoler.client
Valorant Root TBR12.045/Plugins/Viper/hurtoler.client
Valorant Root TBR12.045/Plugins/Yoru/hurtoler.client
Valorant Root TBR12.045/Resources/LICENSE.electron.txt
Valorant Root TBR12.045/Resources/LICENSES.chromium.html
Valorant Root TBR12.045/Resources/chrome_100_percent.pak
Valorant Root TBR12.045/Resources/chrome_200_percent.pak
Valorant Root TBR12.045/Resources/d3dcompiler_47.dll
.dll windows:10 windows x86 arch:x86

185ce3a45c3a9cfb3bf83afd7f79c140

Code Sign

33:00:00:03:df:fb:6a:e3:f4:27:ec:b6:a3:00:00:00:00:03:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-12-2020 21:24

Not After

02-12-2021 21:24

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

84:01:09:e5:f9:cf:93:de:bb:73:ba:83:76:3f:3b:3a:15:05:a8:8b:66:6c:b6:da:27:97:34:46:68:78:5b:68
Signer

Actual PE Digest

84:01:09:e5:f9:cf:93:de:bb:73:ba:83:76:3f:3b:3a:15:05:a8:8b:66:6c:b6:da:27:97:34:46:68:78:5b:68

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D3DCompiler_47.pdb

Imports

kernel32

WriteFile
FreeLibrary
Sleep
TlsAlloc
TlsSetValue
HeapDestroy
TlsGetValue
TlsFree
GetFullPathNameW
GetFullPathNameA
GetEnvironmentVariableA
VirtualFree
VirtualAlloc
GetSystemInfo
GetProcAddress
LoadLibraryExW
SetLastError
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentThreadId
GetStdHandle
GetFileType
GetStartupInfoW
RaiseException
EncodePointer
DecodePointer
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
GetModuleHandleW
GetModuleHandleExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetFilePointerEx
GetStringTypeW
SetStdHandle
GetEnvironmentStringsW
FreeEnvironmentStringsW
ReadFile
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
GetModuleFileNameW
ReadConsoleW
HeapSize
HeapReAlloc
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
InitializeSListHead
RtlUnwind
InterlockedFlushSList
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
LocalAlloc
LocalFree
GetFileSizeEx
GetLastError
CreateFileW
HeapFree
GetProcessHeap
UnmapViewOfFile
GetFileSize
CreateFileMappingW
MapViewOfFile
GetFileAttributesW
SetFileAttributesW
DeleteFileW
SetEndOfFile
DeviceIoControl
MapViewOfFileEx
CreateFileMappingA
ExpandEnvironmentStringsW
HeapAlloc
OutputDebugStringA
CloseHandle
LeaveCriticalSection
EnterCriticalSection
lstrcmpiA
HeapCreate
GetModuleFileNameA
CreateFileA
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
FindClose
FindFirstFileExW
FindNextFileW
GetCommandLineA
GetCommandLineW
GetDriveTypeW
GetCurrentDirectoryW
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
MultiByteToWideChar
SetEnvironmentVariableW
DisableThreadLibraryCalls

advapi32

CryptDestroyHash
CryptAcquireContextW
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
CryptGetHashParam
CryptCreateHash
CryptHashData
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
CryptReleaseContext

rpcrt4

UuidCreate

Exports

Exports

D3DAssemble
D3DCompile
D3DCompile2
D3DCompileFromFile
D3DCompressShaders
D3DCreateBlob
D3DCreateFunctionLinkingGraph
D3DCreateLinker
D3DDecompressShaders
D3DDisassemble
D3DDisassemble10Effect
D3DDisassemble11Trace
D3DDisassembleRegion
D3DGetBlobPart
D3DGetDebugInfo
D3DGetInputAndOutputSignatureBlob
D3DGetInputSignatureBlob
D3DGetOutputSignatureBlob
D3DGetTraceInstructionOffsets
D3DLoadModule
D3DPreprocess
D3DReadFileToBlob
D3DReflect
D3DReflectLibrary
D3DReturnFailure1
D3DSetBlobPart
D3DStripShader
D3DWriteBlobToFile
DebugSetMute

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Valorant Root TBR12.045/Resources/ffmpeg.dll
.dll windows:5 windows x86 arch:x86

c7497313062f9c96c83518b36f70731f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\projects\src\out\Default\ffmpeg.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive
CloseHandle
CompareStringW
CreateEventW
CreateFileW
CreateThread
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
ExitThread
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessAffinityMask
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapQueryInformation
HeapReAlloc
HeapSize
InitOnceBeginInitialize
InitOnceComplete
InitializeConditionVariable
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InitializeSRWLock
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
ResetEvent
RtlUnwind
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile

Exports

Exports

av_buffer_create
av_buffer_get_opaque
av_dict_count
av_dict_free
av_dict_get
av_dict_set
av_force_cpu_flags
av_frame_alloc
av_frame_clone
av_frame_free
av_frame_unref
av_free
av_get_bytes_per_sample
av_get_cpu_flags
av_image_check_size
av_init_packet
av_log_set_level
av_malloc
av_max_alloc
av_new_packet
av_packet_alloc
av_packet_copy_props
av_packet_free
av_packet_get_side_data
av_packet_unref
av_rdft_calc
av_rdft_end
av_rdft_init
av_read_frame
av_rescale_q
av_samples_get_buffer_size
av_seek_frame
av_stream_get_first_dts
av_stream_get_side_data
av_strerror
avcodec_align_dimensions
avcodec_alloc_context3
avcodec_descriptor_get
avcodec_descriptor_next
avcodec_find_decoder
avcodec_flush_buffers
avcodec_free_context
avcodec_get_name
avcodec_open2
avcodec_parameters_to_context
avcodec_receive_frame
avcodec_send_packet
avformat_alloc_context
avformat_close_input
avformat_find_stream_info
avformat_free_context
avformat_open_input
avio_alloc_context
avio_close

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.voltbl
Size: 512B - Virtual size: 132B

.reloc
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Valorant Root TBR12.045/Resources/icudtl.dat
Valorant Root TBR12.045/Resources/libEGL.dll
.dll windows:5 windows x86 arch:x86

14cd5ffd5d2a5e20eb8ffa21377b813a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\projects\src\out\Default\libEGL.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive
CloseHandle
CompareStringW
CreateEventW
CreateFileW
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
ResetEvent
RtlUnwind
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SleepConditionVariableSRW
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WaitForSingleObjectEx
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile

Exports

Exports

eglBindAPI
eglBindTexImage
eglChooseConfig
eglClientWaitSync
eglClientWaitSyncKHR
eglCopyBuffers
eglCopyMetalSharedEventANGLE
eglCreateContext
eglCreateDeviceANGLE
eglCreateImage
eglCreateImageKHR
eglCreateNativeClientBufferANDROID
eglCreatePbufferFromClientBuffer
eglCreatePbufferSurface
eglCreatePixmapSurface
eglCreatePlatformPixmapSurface
eglCreatePlatformPixmapSurfaceEXT
eglCreatePlatformWindowSurface
eglCreatePlatformWindowSurfaceEXT
eglCreateStreamKHR
eglCreateStreamProducerD3DTextureANGLE
eglCreateSync
eglCreateSyncKHR
eglCreateWindowSurface
eglDebugMessageControlKHR
eglDestroyContext
eglDestroyImage
eglDestroyImageKHR
eglDestroyStreamKHR
eglDestroySurface
eglDestroySync
eglDestroySyncKHR
eglDupNativeFenceFDANDROID
eglExportVkImageANGLE
eglForceGPUSwitchANGLE
eglGetCompositorTimingANDROID
eglGetCompositorTimingSupportedANDROID
eglGetConfigAttrib
eglGetConfigs
eglGetCurrentContext
eglGetCurrentDisplay
eglGetCurrentSurface
eglGetDisplay
eglGetError
eglGetFrameTimestampSupportedANDROID
eglGetFrameTimestampsANDROID
eglGetMscRateANGLE
eglGetNativeClientBufferANDROID
eglGetNextFrameIdANDROID
eglGetPlatformDisplay
eglGetPlatformDisplayEXT
eglGetProcAddress
eglGetSyncAttrib
eglGetSyncAttribKHR
eglGetSyncValuesCHROMIUM
eglHandleGPUSwitchANGLE
eglInitialize
eglLabelObjectKHR
eglLockSurfaceKHR
eglMakeCurrent
eglPostSubBufferNV
eglPrepareSwapBuffersANGLE
eglPresentationTimeANDROID
eglProgramCacheGetAttribANGLE
eglProgramCachePopulateANGLE
eglProgramCacheQueryANGLE
eglProgramCacheResizeANGLE
eglQueryAPI
eglQueryContext
eglQueryDebugKHR
eglQueryDeviceAttribEXT
eglQueryDeviceStringEXT
eglQueryDisplayAttribANGLE
eglQueryDisplayAttribEXT
eglQueryDmaBufFormatsEXT
eglQueryDmaBufModifiersEXT
eglQueryStreamKHR
eglQueryStreamu64KHR
eglQueryString
eglQueryStringiANGLE
eglQuerySurface
eglQuerySurface64KHR
eglQuerySurfacePointerANGLE
eglReacquireHighPowerGPUANGLE
eglReleaseDeviceANGLE
eglReleaseHighPowerGPUANGLE
eglReleaseTexImage
eglReleaseThread
eglSetBlobCacheFuncsANDROID
eglSetDamageRegionKHR
eglSignalSyncKHR
eglStreamAttribKHR
eglStreamConsumerAcquireKHR
eglStreamConsumerGLTextureExternalAttribsNV
eglStreamConsumerGLTextureExternalKHR
eglStreamConsumerReleaseKHR
eglStreamPostD3DTextureANGLE
eglSurfaceAttrib
eglSwapBuffers
eglSwapBuffersWithDamageKHR
eglSwapBuffersWithFrameTokenANGLE
eglSwapInterval
eglTerminate
eglUnlockSurfaceKHR
eglWaitClient
eglWaitGL
eglWaitNative
eglWaitSync
eglWaitSyncKHR

Sections

.text
Size: 285KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 145B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.voltbl
Size: 512B - Virtual size: 126B

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Valorant Root TBR12.045/Resources/libGLESv2.dll
.dll windows:5 windows x86 arch:x86

b30b9c8cc35fba1b1d1b357c770d7174

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\projects\src\out\Default\libGLESv2.dll.pdb

Imports

user32

CreateWindowExA
CreateWindowExW
DefWindowProcW
DestroyWindow
GetClassInfoW
GetClientRect
GetDC
GetWindowThreadProcessId
InvalidateRect
IsIconic
IsWindow
LoadCursorW
RegisterClassW
ReleaseDC
UnregisterClassA
WindowFromDC

kernel32

AcquireSRWLockExclusive
CloseHandle
CompareStringW
CreateEventW
CreateFileW
CreateThread
DecodePointer
DeleteCriticalSection
DuplicateHandle
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
ExitThread
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsGetValue
FlsSetValue
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitOnceExecuteOnce
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
ResetEvent
RtlUnwind
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VerSetConditionMask
VerifyVersionInfoW
VirtualProtect
VirtualQuery
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile

dxgi

CreateDXGIFactory1
CreateDXGIFactory

gdi32

ChoosePixelFormat
DescribePixelFormat
GetPixelFormat
SetPixelFormat
SwapBuffers

Exports

Exports

??0PlatformMethods@angle@@QAE@XZ
??4PlatformMethods@angle@@QAEAAU01@$$QAU01@@Z
??4PlatformMethods@angle@@QAEAAU01@ABU01@@Z
Cr_z_adler32
Cr_z_adler32_combine
Cr_z_adler32_z
Cr_z_compress
Cr_z_compress2
Cr_z_compressBound
Cr_z_crc32
Cr_z_crc32_combine
Cr_z_crc32_combine_gen
Cr_z_crc32_combine_op
Cr_z_crc32_z
Cr_z_deflate
Cr_z_deflateBound
Cr_z_deflateCopy
Cr_z_deflateEnd
Cr_z_deflateGetDictionary
Cr_z_deflateInit2_
Cr_z_deflateInit_
Cr_z_deflateParams
Cr_z_deflatePending
Cr_z_deflatePrime
Cr_z_deflateReset
Cr_z_deflateResetKeep
Cr_z_deflateSetDictionary
Cr_z_deflateSetHeader
Cr_z_deflateTune
Cr_z_get_crc_table
Cr_z_zError
Cr_z_zlibCompileFlags
Cr_z_zlibVersion
EGL_BindAPI
EGL_BindTexImage
EGL_ChooseConfig
EGL_ClientWaitSync
EGL_ClientWaitSyncKHR
EGL_CopyBuffers
EGL_CopyMetalSharedEventANGLE
EGL_CreateContext
EGL_CreateDeviceANGLE
EGL_CreateImage
EGL_CreateImageKHR
EGL_CreateNativeClientBufferANDROID
EGL_CreatePbufferFromClientBuffer
EGL_CreatePbufferSurface
EGL_CreatePixmapSurface
EGL_CreatePlatformPixmapSurface
EGL_CreatePlatformPixmapSurfaceEXT
EGL_CreatePlatformWindowSurface
EGL_CreatePlatformWindowSurfaceEXT
EGL_CreateStreamKHR
EGL_CreateStreamProducerD3DTextureANGLE
EGL_CreateSync
EGL_CreateSyncKHR
EGL_CreateWindowSurface
EGL_DebugMessageControlKHR
EGL_DestroyContext
EGL_DestroyImage
EGL_DestroyImageKHR
EGL_DestroyStreamKHR
EGL_DestroySurface
EGL_DestroySync
EGL_DestroySyncKHR
EGL_DupNativeFenceFDANDROID
EGL_ExportVkImageANGLE
EGL_ForceGPUSwitchANGLE
EGL_GetCompositorTimingANDROID
EGL_GetCompositorTimingSupportedANDROID
EGL_GetConfigAttrib
EGL_GetConfigs
EGL_GetCurrentContext
EGL_GetCurrentDisplay
EGL_GetCurrentSurface
EGL_GetDisplay
EGL_GetError
EGL_GetFrameTimestampSupportedANDROID
EGL_GetFrameTimestampsANDROID
EGL_GetMscRateANGLE
EGL_GetNativeClientBufferANDROID
EGL_GetNextFrameIdANDROID
EGL_GetPlatformDisplay
EGL_GetPlatformDisplayEXT
EGL_GetProcAddress
EGL_GetSyncAttrib
EGL_GetSyncAttribKHR
EGL_GetSyncValuesCHROMIUM
EGL_HandleGPUSwitchANGLE
EGL_Initialize
EGL_LabelObjectKHR
EGL_LockSurfaceKHR
EGL_MakeCurrent
EGL_PostSubBufferNV
EGL_PrepareSwapBuffersANGLE
EGL_PresentationTimeANDROID
EGL_ProgramCacheGetAttribANGLE
EGL_ProgramCachePopulateANGLE
EGL_ProgramCacheQueryANGLE
EGL_ProgramCacheResizeANGLE
EGL_QueryAPI
EGL_QueryContext
EGL_QueryDebugKHR
EGL_QueryDeviceAttribEXT
EGL_QueryDeviceStringEXT
EGL_QueryDisplayAttribANGLE
EGL_QueryDisplayAttribEXT
EGL_QueryDmaBufFormatsEXT
EGL_QueryDmaBufModifiersEXT
EGL_QueryStreamKHR
EGL_QueryStreamu64KHR
EGL_QueryString
EGL_QueryStringiANGLE
EGL_QuerySurface
EGL_QuerySurface64KHR
EGL_QuerySurfacePointerANGLE
EGL_ReacquireHighPowerGPUANGLE
EGL_ReleaseDeviceANGLE
EGL_ReleaseHighPowerGPUANGLE
EGL_ReleaseTexImage
EGL_ReleaseThread
EGL_SetBlobCacheFuncsANDROID
EGL_SetDamageRegionKHR
EGL_SignalSyncKHR
EGL_StreamAttribKHR
EGL_StreamConsumerAcquireKHR
EGL_StreamConsumerGLTextureExternalAttribsNV
EGL_StreamConsumerGLTextureExternalKHR
EGL_StreamConsumerReleaseKHR
EGL_StreamPostD3DTextureANGLE
EGL_SurfaceAttrib
EGL_SwapBuffers
EGL_SwapBuffersWithDamageKHR
EGL_SwapBuffersWithFrameTokenANGLE
EGL_SwapInterval
EGL_Terminate
EGL_UnlockSurfaceKHR
EGL_WaitClient
EGL_WaitGL
EGL_WaitNative
EGL_WaitSync
EGL_WaitSyncKHR
_ANGLEGetDisplayPlatform@20
_ANGLEResetDisplayPlatform@4
_EGL_BindAPI@4
_EGL_BindTexImage@12
_EGL_ChooseConfig@20
_EGL_ClientWaitSync@20
_EGL_ClientWaitSyncKHR@20
_EGL_CopyBuffers@12
_EGL_CopyMetalSharedEventANGLE@8
_EGL_CreateContext@16
_EGL_CreateDeviceANGLE@12
_EGL_CreateImage@20
_EGL_CreateImageKHR@20
_EGL_CreateNativeClientBufferANDROID@4
_EGL_CreatePbufferFromClientBuffer@20
_EGL_CreatePbufferSurface@12
_EGL_CreatePixmapSurface@16
_EGL_CreatePlatformPixmapSurface@16
_EGL_CreatePlatformPixmapSurfaceEXT@16
_EGL_CreatePlatformWindowSurface@16
_EGL_CreatePlatformWindowSurfaceEXT@16
_EGL_CreateStreamKHR@8
_EGL_CreateStreamProducerD3DTextureANGLE@12
_EGL_CreateSync@12
_EGL_CreateSyncKHR@12
_EGL_CreateWindowSurface@16
_EGL_DebugMessageControlKHR@8
_EGL_DestroyContext@8
_EGL_DestroyImage@8
_EGL_DestroyImageKHR@8
_EGL_DestroyStreamKHR@8
_EGL_DestroySurface@8
_EGL_DestroySync@8
_EGL_DestroySyncKHR@8
_EGL_DupNativeFenceFDANDROID@8
_EGL_ExportVkImageANGLE@16
_EGL_ForceGPUSwitchANGLE@12
_EGL_GetCompositorTimingANDROID@20
_EGL_GetCompositorTimingSupportedANDROID@12
_EGL_GetConfigAttrib@16
_EGL_GetConfigs@16
_EGL_GetCurrentContext@0
_EGL_GetCurrentDisplay@0
_EGL_GetCurrentSurface@4
_EGL_GetDisplay@4
_EGL_GetError@0
_EGL_GetFrameTimestampSupportedANDROID@12
_EGL_GetFrameTimestampsANDROID@28
_EGL_GetMscRateANGLE@16
_EGL_GetNativeClientBufferANDROID@4
_EGL_GetNextFrameIdANDROID@12
_EGL_GetPlatformDisplay@12
_EGL_GetPlatformDisplayEXT@12
_EGL_GetProcAddress@4
_EGL_GetSyncAttrib@16
_EGL_GetSyncAttribKHR@16
_EGL_GetSyncValuesCHROMIUM@20
_EGL_HandleGPUSwitchANGLE@4
_EGL_Initialize@12
_EGL_LabelObjectKHR@16
_EGL_LockSurfaceKHR@12
_EGL_MakeCurrent@16
_EGL_PostSubBufferNV@24
_EGL_PrepareSwapBuffersANGLE@8
_EGL_PresentationTimeANDROID@16
_EGL_ProgramCacheGetAttribANGLE@8
_EGL_ProgramCachePopulateANGLE@20
_EGL_ProgramCacheQueryANGLE@24
_EGL_ProgramCacheResizeANGLE@12
_EGL_QueryAPI@0
_EGL_QueryContext@16
_EGL_QueryDebugKHR@8
_EGL_QueryDeviceAttribEXT@12
_EGL_QueryDeviceStringEXT@8
_EGL_QueryDisplayAttribANGLE@12
_EGL_QueryDisplayAttribEXT@12
_EGL_QueryDmaBufFormatsEXT@16
_EGL_QueryDmaBufModifiersEXT@24
_EGL_QueryStreamKHR@16
_EGL_QueryStreamu64KHR@16
_EGL_QueryString@8
_EGL_QueryStringiANGLE@12
_EGL_QuerySurface64KHR@16
_EGL_QuerySurface@16
_EGL_QuerySurfacePointerANGLE@16
_EGL_ReacquireHighPowerGPUANGLE@8
_EGL_ReleaseDeviceANGLE@4
_EGL_ReleaseHighPowerGPUANGLE@8
_EGL_ReleaseTexImage@12
_EGL_ReleaseThread@0
_EGL_SetBlobCacheFuncsANDROID@12
_EGL_SetDamageRegionKHR@16
_EGL_SignalSyncKHR@12
_EGL_StreamAttribKHR@16
_EGL_StreamConsumerAcquireKHR@8
_EGL_StreamConsumerGLTextureExternalAttribsNV@12
_EGL_StreamConsumerGLTextureExternalKHR@8
_EGL_StreamConsumerReleaseKHR@8
_EGL_StreamPostD3DTextureANGLE@16
_EGL_SurfaceAttrib@16
_EGL_SwapBuffers@8
_EGL_SwapBuffersWithDamageKHR@16
_EGL_SwapBuffersWithFrameTokenANGLE@16
_EGL_SwapInterval@8
_EGL_Terminate@4
_EGL_UnlockSurfaceKHR@8
_EGL_WaitClient@0
_EGL_WaitGL@0
_EGL_WaitNative@4
_EGL_WaitSync@12
_EGL_WaitSyncKHR@12
_GL_AcquireTexturesANGLE@12
_GL_ActiveShaderProgram@8
_GL_ActiveShaderProgramEXT@8
_GL_ActiveTexture@4
_GL_AlphaFunc@8
_GL_AlphaFuncx@8
_GL_AttachShader@8
_GL_BeginPerfMonitorAMD@4
_GL_BeginPixelLocalStorageANGLE@12
_GL_BeginQuery@8
_GL_BeginQueryEXT@8
_GL_BeginTransformFeedback@4
_GL_BindAttribLocation@12
_GL_BindBuffer@8
_GL_BindBufferBase@12
_GL_BindBufferRange@20
_GL_BindFragDataLocationEXT@12
_GL_BindFragDataLocationIndexedEXT@16
_GL_BindFramebuffer@8
_GL_BindFramebufferOES@8
_GL_BindImageTexture@28
_GL_BindProgramPipeline@4
_GL_BindProgramPipelineEXT@4
_GL_BindRenderbuffer@8
_GL_BindRenderbufferOES@8
_GL_BindSampler@8
_GL_BindTexture@8
_GL_BindTransformFeedback@8
_GL_BindUniformLocationCHROMIUM@12
_GL_BindVertexArray@4
_GL_BindVertexArrayOES@4
_GL_BindVertexBuffer@16
_GL_BlendBarrier@0
_GL_BlendBarrierKHR@0
_GL_BlendColor@16
_GL_BlendEquation@4
_GL_BlendEquationSeparate@8
_GL_BlendEquationSeparatei@12
_GL_BlendEquationSeparateiEXT@12
_GL_BlendEquationSeparateiOES@12
_GL_BlendEquationi@8
_GL_BlendEquationiEXT@8
_GL_BlendEquationiOES@8
_GL_BlendFunc@8
_GL_BlendFuncSeparate@16
_GL_BlendFuncSeparatei@20
_GL_BlendFuncSeparateiEXT@20
_GL_BlendFuncSeparateiOES@20
_GL_BlendFunci@12
_GL_BlendFunciEXT@12
_GL_BlendFunciOES@12
_GL_BlitFramebuffer@40
_GL_BlitFramebufferANGLE@40
_GL_BlitFramebufferNV@40
_GL_BufferData@16
_GL_BufferStorageEXT@16
_GL_BufferStorageExternalEXT@20
_GL_BufferStorageMemEXT@20
_GL_BufferSubData@16
_GL_CheckFramebufferStatus@4
_GL_CheckFramebufferStatusOES@4
_GL_Clear@4
_GL_ClearBufferfi@16
_GL_ClearBufferfv@12
_GL_ClearBufferiv@12
_GL_ClearBufferuiv@12
_GL_ClearColor@16
_GL_ClearColorx@16
_GL_ClearDepthf@4
_GL_ClearDepthx@4
_GL_ClearStencil@4
_GL_ClientActiveTexture@4
_GL_ClientWaitSync@16
_GL_ClipControlEXT@8
_GL_ClipPlanef@8
_GL_ClipPlanex@8
_GL_Color4f@16
_GL_Color4ub@16
_GL_Color4x@16
_GL_ColorMask@16
_GL_ColorMaski@20
_GL_ColorMaskiEXT@20
_GL_ColorMaskiOES@20
_GL_ColorPointer@16
_GL_CompileShader@4
_GL_CompressedCopyTextureCHROMIUM@8
_GL_CompressedTexImage2D@32
_GL_CompressedTexImage2DRobustANGLE@36
_GL_CompressedTexImage3D@36
_GL_CompressedTexImage3DOES@36
_GL_CompressedTexImage3DRobustANGLE@40
_GL_CompressedTexSubImage2D@36
_GL_CompressedTexSubImage2DRobustANGLE@40
_GL_CompressedTexSubImage3D@44
_GL_CompressedTexSubImage3DOES@44
_GL_CompressedTexSubImage3DRobustANGLE@48
_GL_CopyBufferSubData@20
_GL_CopyImageSubData@60
_GL_CopyImageSubDataEXT@60
_GL_CopyImageSubDataOES@60
_GL_CopySubTexture3DANGLE@68
_GL_CopySubTextureCHROMIUM@56
_GL_CopyTexImage2D@32
_GL_CopyTexSubImage2D@32
_GL_CopyTexSubImage3D@36
_GL_CopyTexSubImage3DOES@36
_GL_CopyTexture3DANGLE@40
_GL_CopyTextureCHROMIUM@40
_GL_CoverageModulationCHROMIUM@4
_GL_CreateMemoryObjectsEXT@8
_GL_CreateProgram@0
_GL_CreateShader@4
_GL_CreateShaderProgramv@12
_GL_CreateShaderProgramvEXT@12
_GL_CullFace@4
_GL_CurrentPaletteMatrixOES@4
_GL_DebugMessageCallback@8
_GL_DebugMessageCallbackKHR@8
_GL_DebugMessageControl@24
_GL_DebugMessageControlKHR@24
_GL_DebugMessageInsert@24
_GL_DebugMessageInsertKHR@24
_GL_DeleteBuffers@8
_GL_DeleteFencesNV@8
_GL_DeleteFramebuffers@8
_GL_DeleteFramebuffersOES@8
_GL_DeleteMemoryObjectsEXT@8
_GL_DeletePerfMonitorsAMD@8
_GL_DeleteProgram@4
_GL_DeleteProgramPipelines@8
_GL_DeleteProgramPipelinesEXT@8
_GL_DeleteQueries@8
_GL_DeleteQueriesEXT@8
_GL_DeleteRenderbuffers@8
_GL_DeleteRenderbuffersOES@8
_GL_DeleteSamplers@8
_GL_DeleteSemaphoresEXT@8
_GL_DeleteShader@4
_GL_DeleteSync@4
_GL_DeleteTextures@8
_GL_DeleteTransformFeedbacks@8
_GL_DeleteVertexArrays@8
_GL_DeleteVertexArraysOES@8
_GL_DepthFunc@4
_GL_DepthMask@4
_GL_DepthRangef@8
_GL_DepthRangex@8
_GL_DetachShader@8
_GL_Disable@4
_GL_DisableClientState@4
_GL_DisableExtensionANGLE@4
_GL_DisableVertexAttribArray@4
_GL_Disablei@8
_GL_DisableiEXT@8
_GL_DisableiOES@8
_GL_DiscardFramebufferEXT@12
_GL_DispatchCompute@12
_GL_DispatchComputeIndirect@4
_GL_DrawArrays@12
_GL_DrawArraysIndirect@8
_GL_DrawArraysInstanced@16
_GL_DrawArraysInstancedANGLE@16
_GL_DrawArraysInstancedBaseInstanceANGLE@20
_GL_DrawArraysInstancedBaseInstanceEXT@20
_GL_DrawArraysInstancedEXT@16
_GL_DrawBuffers@8
_GL_DrawBuffersEXT@8
_GL_DrawElements@16
_GL_DrawElementsBaseVertex@20
_GL_DrawElementsBaseVertexEXT@20
_GL_DrawElementsBaseVertexOES@20
_GL_DrawElementsIndirect@12
_GL_DrawElementsInstanced@20
_GL_DrawElementsInstancedANGLE@20
_GL_DrawElementsInstancedBaseInstanceEXT@24
_GL_DrawElementsInstancedBaseVertex@24
_GL_DrawElementsInstancedBaseVertexBaseInstanceANGLE@28
_GL_DrawElementsInstancedBaseVertexBaseInstanceEXT@28
_GL_DrawElementsInstancedBaseVertexEXT@24
_GL_DrawElementsInstancedBaseVertexOES@24
_GL_DrawElementsInstancedEXT@20
_GL_DrawRangeElements@24
_GL_DrawRangeElementsBaseVertex@28
_GL_DrawRangeElementsBaseVertexEXT@28
_GL_DrawRangeElementsBaseVertexOES@28
_GL_DrawTexfOES@20
_GL_DrawTexfvOES@4
_GL_DrawTexiOES@20
_GL_DrawTexivOES@4
_GL_DrawTexsOES@20
_GL_DrawTexsvOES@4
_GL_DrawTexxOES@20
_GL_DrawTexxvOES@4
_GL_EGLImageTargetRenderbufferStorageOES@8
_GL_EGLImageTargetTexStorageEXT@12
_GL_EGLImageTargetTexture2DOES@8
_GL_EGLImageTargetTextureStorageEXT@12
_GL_Enable@4
_GL_EnableClientState@4
_GL_EnableVertexAttribArray@4
_GL_Enablei@8
_GL_EnableiEXT@8
_GL_EnableiOES@8
_GL_EndPerfMonitorAMD@4
_GL_EndPixelLocalStorageANGLE@0
_GL_EndQuery@4
_GL_EndQueryEXT@4
_GL_EndTransformFeedback@0
_GL_FenceSync@8
_GL_Finish@0
_GL_FinishFenceNV@4
_GL_Flush@0
_GL_FlushMappedBufferRange@12
_GL_FlushMappedBufferRangeEXT@12
_GL_Fogf@8
_GL_Fogfv@8
_GL_Fogx@8
_GL_Fogxv@8
_GL_FramebufferFetchBarrierEXT@0
_GL_FramebufferMemorylessPixelLocalStorageANGLE@8
_GL_FramebufferParameteri@12
_GL_FramebufferParameteriMESA@12
_GL_FramebufferRenderbuffer@16
_GL_FramebufferRenderbufferOES@16
_GL_FramebufferTexture2D@20
_GL_FramebufferTexture2DMultisampleEXT@24
_GL_FramebufferTexture2DOES@20
_GL_FramebufferTexture3DOES@24
_GL_FramebufferTexture@16
_GL_FramebufferTextureEXT@16
_GL_FramebufferTextureLayer@20
_GL_FramebufferTextureMultiviewOVR@24
_GL_FramebufferTextureOES@16
_GL_FramebufferTexturePixelLocalStorageANGLE@16
_GL_FrontFace@4
_GL_Frustumf@24
_GL_Frustumx@24
_GL_GenBuffers@8
_GL_GenFencesNV@8
_GL_GenFramebuffers@8
_GL_GenFramebuffersOES@8
_GL_GenPerfMonitorsAMD@8
_GL_GenProgramPipelines@8
_GL_GenProgramPipelinesEXT@8
_GL_GenQueries@8
_GL_GenQueriesEXT@8
_GL_GenRenderbuffers@8

Sections

.text
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 138KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 162B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.voltbl
Size: 512B - Virtual size: 132B

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 242KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Valorant Root TBR12.045/Resources/resources.pak
Valorant Root TBR12.045/Resources/vulkan-1.dll
.dll windows:5 windows x86 arch:x86

0c3e803dd8e326c1278d7872e609b579

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\projects\src\out\Default\vulkan-1.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive
CloseHandle
CompareStringW
CreateEventW
CreateFileW
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FileTimeToSystemTime
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesExW
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
IsWow64Process
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
ResetEvent
RtlUnwind
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SleepConditionVariableSRW
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WaitForSingleObjectEx
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile

advapi32

GetSidSubAuthority
GetSidSubAuthorityCount
GetTokenInformation
OpenProcessToken
RegCloseKey
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA

cfgmgr32

CM_Get_Child
CM_Get_DevNode_Registry_PropertyW
CM_Get_DevNode_Status
CM_Get_Device_IDW
CM_Get_Device_ID_ListW
CM_Get_Device_ID_List_SizeW
CM_Get_Sibling
CM_Locate_DevNodeW
CM_Open_DevNode_Key

Exports

Exports

vkAcquireNextImage2KHR
vkAcquireNextImageKHR
vkAllocateCommandBuffers
vkAllocateDescriptorSets
vkAllocateMemory
vkBeginCommandBuffer
vkBindBufferMemory
vkBindBufferMemory2
vkBindImageMemory
vkBindImageMemory2
vkCmdBeginQuery
vkCmdBeginRenderPass
vkCmdBeginRenderPass2
vkCmdBeginRendering
vkCmdBindDescriptorSets
vkCmdBindIndexBuffer
vkCmdBindPipeline
vkCmdBindVertexBuffers
vkCmdBindVertexBuffers2
vkCmdBlitImage
vkCmdBlitImage2
vkCmdClearAttachments
vkCmdClearColorImage
vkCmdClearDepthStencilImage
vkCmdCopyBuffer
vkCmdCopyBuffer2
vkCmdCopyBufferToImage
vkCmdCopyBufferToImage2
vkCmdCopyImage
vkCmdCopyImage2
vkCmdCopyImageToBuffer
vkCmdCopyImageToBuffer2
vkCmdCopyQueryPoolResults
vkCmdDispatch
vkCmdDispatchBase
vkCmdDispatchIndirect
vkCmdDraw
vkCmdDrawIndexed
vkCmdDrawIndexedIndirect
vkCmdDrawIndexedIndirectCount
vkCmdDrawIndirect
vkCmdDrawIndirectCount
vkCmdEndQuery
vkCmdEndRenderPass
vkCmdEndRenderPass2
vkCmdEndRendering
vkCmdExecuteCommands
vkCmdFillBuffer
vkCmdNextSubpass
vkCmdNextSubpass2
vkCmdPipelineBarrier
vkCmdPipelineBarrier2
vkCmdPushConstants
vkCmdResetEvent
vkCmdResetEvent2
vkCmdResetQueryPool
vkCmdResolveImage
vkCmdResolveImage2
vkCmdSetBlendConstants
vkCmdSetCullMode
vkCmdSetDepthBias
vkCmdSetDepthBiasEnable
vkCmdSetDepthBounds
vkCmdSetDepthBoundsTestEnable
vkCmdSetDepthCompareOp
vkCmdSetDepthTestEnable
vkCmdSetDepthWriteEnable
vkCmdSetDeviceMask
vkCmdSetEvent
vkCmdSetEvent2
vkCmdSetFrontFace
vkCmdSetLineWidth
vkCmdSetPrimitiveRestartEnable
vkCmdSetPrimitiveTopology
vkCmdSetRasterizerDiscardEnable
vkCmdSetScissor
vkCmdSetScissorWithCount
vkCmdSetStencilCompareMask
vkCmdSetStencilOp
vkCmdSetStencilReference
vkCmdSetStencilTestEnable
vkCmdSetStencilWriteMask
vkCmdSetViewport
vkCmdSetViewportWithCount
vkCmdUpdateBuffer
vkCmdWaitEvents
vkCmdWaitEvents2
vkCmdWriteTimestamp
vkCmdWriteTimestamp2
vkCreateBuffer
vkCreateBufferView
vkCreateCommandPool
vkCreateComputePipelines
vkCreateDescriptorPool
vkCreateDescriptorSetLayout
vkCreateDescriptorUpdateTemplate
vkCreateDevice
vkCreateDisplayModeKHR
vkCreateDisplayPlaneSurfaceKHR
vkCreateEvent
vkCreateFence
vkCreateFramebuffer
vkCreateGraphicsPipelines
vkCreateHeadlessSurfaceEXT
vkCreateImage
vkCreateImageView
vkCreateInstance
vkCreatePipelineCache
vkCreatePipelineLayout
vkCreatePrivateDataSlot
vkCreateQueryPool
vkCreateRenderPass
vkCreateRenderPass2
vkCreateSampler
vkCreateSamplerYcbcrConversion
vkCreateSemaphore
vkCreateShaderModule
vkCreateSharedSwapchainsKHR
vkCreateSwapchainKHR
vkCreateWin32SurfaceKHR
vkDestroyBuffer
vkDestroyBufferView
vkDestroyCommandPool
vkDestroyDescriptorPool
vkDestroyDescriptorSetLayout
vkDestroyDescriptorUpdateTemplate
vkDestroyDevice
vkDestroyEvent
vkDestroyFence
vkDestroyFramebuffer
vkDestroyImage
vkDestroyImageView
vkDestroyInstance
vkDestroyPipeline
vkDestroyPipelineCache
vkDestroyPipelineLayout
vkDestroyPrivateDataSlot
vkDestroyQueryPool
vkDestroyRenderPass
vkDestroySampler
vkDestroySamplerYcbcrConversion
vkDestroySemaphore
vkDestroyShaderModule
vkDestroySurfaceKHR
vkDestroySwapchainKHR
vkDeviceWaitIdle
vkEndCommandBuffer
vkEnumerateDeviceExtensionProperties
vkEnumerateDeviceLayerProperties
vkEnumerateInstanceExtensionProperties
vkEnumerateInstanceLayerProperties
vkEnumerateInstanceVersion
vkEnumeratePhysicalDeviceGroups
vkEnumeratePhysicalDevices
vkFlushMappedMemoryRanges
vkFreeCommandBuffers
vkFreeDescriptorSets
vkFreeMemory
vkGetBufferDeviceAddress
vkGetBufferMemoryRequirements
vkGetBufferMemoryRequirements2
vkGetBufferOpaqueCaptureAddress
vkGetDescriptorSetLayoutSupport
vkGetDeviceBufferMemoryRequirements
vkGetDeviceGroupPeerMemoryFeatures
vkGetDeviceGroupPresentCapabilitiesKHR
vkGetDeviceGroupSurfacePresentModesKHR
vkGetDeviceImageMemoryRequirements
vkGetDeviceImageSparseMemoryRequirements
vkGetDeviceMemoryCommitment
vkGetDeviceMemoryOpaqueCaptureAddress
vkGetDeviceProcAddr
vkGetDeviceQueue
vkGetDeviceQueue2
vkGetDisplayModeProperties2KHR
vkGetDisplayModePropertiesKHR
vkGetDisplayPlaneCapabilities2KHR
vkGetDisplayPlaneCapabilitiesKHR
vkGetDisplayPlaneSupportedDisplaysKHR
vkGetEventStatus
vkGetFenceStatus
vkGetImageMemoryRequirements
vkGetImageMemoryRequirements2
vkGetImageSparseMemoryRequirements
vkGetImageSparseMemoryRequirements2
vkGetImageSubresourceLayout
vkGetInstanceProcAddr
vkGetPhysicalDeviceDisplayPlaneProperties2KHR
vkGetPhysicalDeviceDisplayPlanePropertiesKHR
vkGetPhysicalDeviceDisplayProperties2KHR
vkGetPhysicalDeviceDisplayPropertiesKHR
vkGetPhysicalDeviceExternalBufferProperties
vkGetPhysicalDeviceExternalFenceProperties
vkGetPhysicalDeviceExternalSemaphoreProperties
vkGetPhysicalDeviceFeatures
vkGetPhysicalDeviceFeatures2
vkGetPhysicalDeviceFormatProperties
vkGetPhysicalDeviceFormatProperties2
vkGetPhysicalDeviceImageFormatProperties
vkGetPhysicalDeviceImageFormatProperties2
vkGetPhysicalDeviceMemoryProperties
vkGetPhysicalDeviceMemoryProperties2
vkGetPhysicalDevicePresentRectanglesKHR
vkGetPhysicalDeviceProperties
vkGetPhysicalDeviceProperties2
vkGetPhysicalDeviceQueueFamilyProperties
vkGetPhysicalDeviceQueueFamilyProperties2
vkGetPhysicalDeviceSparseImageFormatProperties
vkGetPhysicalDeviceSparseImageFormatProperties2
vkGetPhysicalDeviceSurfaceCapabilities2KHR
vkGetPhysicalDeviceSurfaceCapabilitiesKHR
vkGetPhysicalDeviceSurfaceFormats2KHR
vkGetPhysicalDeviceSurfaceFormatsKHR
vkGetPhysicalDeviceSurfacePresentModesKHR
vkGetPhysicalDeviceSurfaceSupportKHR
vkGetPhysicalDeviceToolProperties
vkGetPhysicalDeviceWin32PresentationSupportKHR
vkGetPipelineCacheData
vkGetPrivateData
vkGetQueryPoolResults
vkGetRenderAreaGranularity
vkGetSemaphoreCounterValue
vkGetSwapchainImagesKHR
vkInvalidateMappedMemoryRanges
vkMapMemory
vkMergePipelineCaches
vkQueueBindSparse
vkQueuePresentKHR
vkQueueSubmit
vkQueueSubmit2
vkQueueWaitIdle
vkResetCommandBuffer
vkResetCommandPool
vkResetDescriptorPool
vkResetEvent
vkResetFences
vkResetQueryPool
vkSetEvent
vkSetPrivateData
vkSignalSemaphore
vkTrimCommandPool
vkUnmapMemory
vkUpdateDescriptorSetWithTemplate
vkUpdateDescriptorSets
vkWaitForFences
vkWaitSemaphores

Sections

.text
Size: 526KB - Virtual size: 526KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 205KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.voltbl
Size: 512B - Virtual size: 184B

.rsrc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Valorant Root TBR12.045/RiotGamesApi.dll
.dll windows:6 windows x64 arch:x64

4b6c759734b027b00ede1d79d7fdc6e9

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:d1:d0:38:01:51:29:a4:3d:a0:ae:e2:11:85:9c:8e
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

02-12-2022 00:00

Not After

03-12-2024 23:59

Subject

SERIALNUMBER=4155843,CN=Riot Games\, Inc.,O=Riot Games\, Inc.,L=Los Angeles,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fa:95:79:35:2a:2e:31:15:e0:e1:12:2d:a2:64:19:8c:e3:74:a8:e4:9a:7d:31:41:30:67:49:ba:4d:b3:b1:23
Signer

Actual PE Digest

fa:95:79:35:2a:2e:31:15:e0:e1:12:2d:a2:64:19:8c:e3:74:a8:e4:9a:7d:31:41:30:67:49:ba:4d:b3:b1:23

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

T:\tmp\Products\RiotGamesApi\Lib\X64-Public\bin\RiotGamesApi.pdb

Imports

advapi32

OpenProcessToken
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
GetFileSecurityW
GetSidSubAuthority
GetSidSubAuthorityCount
GetTokenInformation
ConvertSidToStringSidA
ConvertSecurityDescriptorToStringSecurityDescriptorA
CreateWellKnownSid
EqualSid
GetAce
GetNamedSecurityInfoW
SystemFunction036

bcrypt

BCryptGenRandom

crypt32

CertFreeCertificateContext
CertEnumCertificatesInStore
CertOpenStore
CertCloseStore

dnsapi

DnsFree
DnsQuery_W

dwrite

DWriteCreateFactory

gdi32

DescribePixelFormat
SetPixelFormat
SwapBuffers
ChoosePixelFormat

iphlpapi

GetAdaptersAddresses

kernel32

GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesW
IsValidCodePage
GetOEMCP
GetACP
CloseHandle
WaitForSingleObject
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetProcessId
OpenProcess
IsProcessInJob
CreateJobObjectW
AssignProcessToJobObject
TerminateJobObject
SetInformationJobObject
GetCurrentProcess
CreateThread
ReadFile
ConnectNamedPipe
GetOverlappedResult
SetEvent
CreateEventW
CreateNamedPipeA
RaiseException
GetCurrentThread
GetCurrentThreadId
GetModuleHandleW
GetProcAddress
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
DeleteFileW
FindClose
FindFirstFileA
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
FlushFileBuffers
GetFileAttributesW
GetFileAttributesExA
GetFileAttributesExW
GetFileSizeEx
GetFinalPathNameByHandleW
GetTempFileNameW
LockFileEx
RemoveDirectoryW
SetEndOfFile
SetFileAttributesW
SetFileInformationByHandle
SetFilePointer
SetFilePointerEx
UnlockFileEx
WriteFile
GetTempPathW
GetLastError
SetLastError
DeviceIoControl
GetProcessTimes
GetCurrentProcessId
GetSystemTime
FreeLibrary
GetModuleFileNameW
LoadLibraryW
LocalFree
FormatMessageW
MoveFileExW
SystemTimeToFileTime
GetFileInformationByHandleEx
GetSystemInfo
GetVersionExW
GetPhysicallyInstalledSystemMemory
SetHandleInformation
GetComputerNameExA
LoadLibraryExA
VerSetConditionMask
GetCommandLineW
GetCurrentDirectoryA
DeleteFileA
GetFileAttributesA
IsDebuggerPresent
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
GetLocalTime
GetModuleFileNameA
LoadLibraryA
VerifyVersionInfoW
WideCharToMultiByte
MultiByteToWideChar
GlobalFree
LocalAlloc
CreateEventA
GetModuleHandleA
InitializeSRWLock
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
SetWaitableTimer
CancelWaitableTimer
CreateWaitableTimerW
ReadDirectoryChangesW
GlobalAlloc
GlobalUnlock
GlobalLock
SleepEx
GetTickCount64
HeapAlloc
HeapReAlloc
HeapFree
GetProcessHeap
InitOnceExecuteOnce
GetLocaleInfoEx
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
TryAcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
TlsAlloc
TlsGetValue
TlsSetValue
RtlVirtualUnwind
WaitForSingleObjectEx
LoadLibraryExW
IsProcessorFeaturePresent
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SleepConditionVariableCS
LCMapStringEx
CompareStringEx
GetCPInfo
EncodePointer
DecodePointer
GetStringTypeW
InitializeCriticalSectionEx
GetTickCount
GetSystemTimeAsFileTime
GetFileSize
UnlockFile
HeapDestroy
HeapCompact
OutputDebugStringW
HeapSize
HeapValidate
CreateMutexW
LockFile
GetDiskFreeSpaceW
GetFullPathNameW
HeapCreate
AreFileApisANSI
TryEnterCriticalSection
SwitchToThread
GetExitCodeThread
GetNativeSystemInfo
GetFileInformationByHandle
SetFileTime
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
RtlCaptureContext
RtlLookupFunctionEntry
ReleaseMutex
GetEnvironmentStringsW
GetEnvironmentVariableW
SetEnvironmentVariableW
GetStdHandle
CreateMutexA
FreeEnvironmentStringsW
ExitProcess
GetConsoleMode
WriteConsoleW
ReadConsoleW
SetThreadStackGuarantee
TryAcquireSRWLockShared
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
CreateIoCompletionPort
GetQueuedCompletionStatusEx
PostQueuedCompletionStatus
GetCommandLineA
GetDynamicTimeZoneInformation
GetGeoInfoW
GetUserGeoID
LocaleNameToLCID
LCIDToLocaleName
GetTimeFormatEx
GetDateFormatEx
ResolveLocaleName
GetNumberFormatEx
GetCurrencyFormatEx
VirtualQuery
GetFileType
SetUnhandledExceptionFilter
GetUserDefaultLCID
InitializeCriticalSectionAndSpinCount
TlsFree
RtlPcToFileHeader
InitOnceBeginInitialize
InitOnceComplete
VirtualProtect
GetDateFormatW
SetStdHandle
GetConsoleOutputCP
PeekNamedPipe
GetDriveTypeW
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwindEx
GetStartupInfoW
InitializeSListHead
UnhandledExceptionFilter
RtlUnwind

ntdll

RtlNtStatusToDosError
NtDeviceIoControlFile
NtCancelIoFileEx

ole32

CoTaskMemFree
CoUninitialize
CoInitializeEx
CoCreateInstance

oleaut32

VariantClear
VariantInit

psapi

GetModuleFileNameExW

rpcrt4

UuidCreate

shell32

DragFinish
ShellExecuteA
SHGetFolderPathW
DragQueryFileW

shlwapi

PathRemoveFileSpecW

user32

TranslateMessage
DispatchMessageA
RegisterDeviceNotificationA
UnregisterDeviceNotification
PostMessageA
DefWindowProcA
RegisterClassA
CreateWindowExA
GetWindowLongPtrW
SetWindowLongPtrW
GetRawInputData
RegisterRawInputDevices
SystemParametersInfoA
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
GetDesktopWindow
TrackMouseEvent
DispatchMessageW
PeekMessageW
SendMessageW
DefWindowProcW
PostQuitMessage
RegisterClassExW
GetClassInfoExW
ShowWindow
IsWindowVisible
IsIconic
SetFocus
GetAsyncKeyState
PostMessageW
SetCapture
ReleaseCapture
MsgWaitForMultipleObjectsEx
GetForegroundWindow
SetForegroundWindow
SetWindowTextW
GetClientRect
GetWindowRect
AdjustWindowRectEx
SetCursor
GetCursorPos
ClientToScreen
ScreenToClient
GetWindowLongW
LoadCursorW
LoadIconW
MonitorFromWindow
GetMonitorInfoW
DestroyWindow
WindowFromDC
GetDC
ReleaseDC
GetMessageA
SetWindowPos
CreateWindowExW
GetCapture

winhttp

WinHttpGetIEProxyConfigForCurrentUser

ws2_32

socket
__WSAFDIsSet
accept
connect
ioctlsocket
getsockopt
htons
listen
ntohl
recv
select
send
setsockopt
shutdown
WSAGetLastError
inet_addr
gethostname
getaddrinfo
freeaddrinfo
WSAStartup
WSACleanup
ntohs
WSAAddressToStringW
WSAStringToAddressW
recvfrom
sendto
WSAPoll
inet_pton
inet_ntop
WSAStringToAddressA
getpeername
WSASetLastError
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAIoctl
WSAResetEvent
WSASetEvent
WSAWaitForMultipleEvents
WSAAddressToStringA
getsockname
closesocket
bind
htonl

Exports

Exports

ConnectRiotClient
ConnectToProxyServer
CreateFoundation
CreateRiotGamesApi
DestroyFoundation
LaunchDevRiotClient
LaunchDevRiotClientV2
LaunchRiotClient
Noesis_RenderDeviceD3D11_Create
Noesis_RenderDeviceD3D11_DisableScissorRect
Noesis_RenderDeviceD3D11_EnableScissorRect
Noesis_RenderDeviceD3D11_GetTextureNativePointer
Noesis_RenderDeviceD3D11_WrapTexture
Noesis_RenderDeviceGL_Create
Noesis_RenderDeviceGL_WrapTexture
RiotClientApiSettingsClear
RiotClientApiSettingsInit
RiotGamesApiCBindingPropertyToJson
RiotGamesApiErrorFree
RiotGamesApiErrorInit
RiotGamesApiFreeCBindingProperty
RiotGamesApiFreeString
RiotGamesApi_PlatformUI_BaseComponent_AddReference
RiotGamesApi_PlatformUI_BaseComponent_Release
RiotGamesApi_PlatformUI_ClearAssetProvider
RiotGamesApi_PlatformUI_DisableGamepadConnectionCheck
RiotGamesApi_PlatformUI_DisableNetworkConnectionCheck
RiotGamesApi_PlatformUI_DisableThreadFromLogging
RiotGamesApi_PlatformUI_FindElement
RiotGamesApi_PlatformUI_GetActiveElement
RiotGamesApi_PlatformUI_GetContent
RiotGamesApi_PlatformUI_GetElementProperty
RiotGamesApi_PlatformUI_GetElementRect
RiotGamesApi_PlatformUI_GetElementSource
RiotGamesApi_PlatformUI_GetElementText
RiotGamesApi_PlatformUI_GetInstanceId
RiotGamesApi_PlatformUI_GetInstanceName
RiotGamesApi_PlatformUI_GetSerializedTree
RiotGamesApi_PlatformUI_GetWavHeader
RiotGamesApi_PlatformUI_HashBytes
RiotGamesApi_PlatformUI_Init
RiotGamesApi_PlatformUI_IsInitialized
RiotGamesApi_PlatformUI_IsValid
RiotGamesApi_PlatformUI_Patching_SetStatus
RiotGamesApi_PlatformUI_PlayAudio
RiotGamesApi_PlatformUI_ReadFile
RiotGamesApi_PlatformUI_RegisterUpdateHook
RiotGamesApi_PlatformUI_Render
RiotGamesApi_PlatformUI_RenderOffscreen
RiotGamesApi_PlatformUI_RenderOnscreen
RiotGamesApi_PlatformUI_Renderer_Init
RiotGamesApi_PlatformUI_Renderer_Shutdown
RiotGamesApi_PlatformUI_SetAssetProvider
RiotGamesApi_PlatformUI_SetBackgroundTexture
RiotGamesApi_PlatformUI_SetNoesisMemoryCallbacks
RiotGamesApi_PlatformUI_SetPlayAudioCallback
RiotGamesApi_PlatformUI_SetState
RiotGamesApi_PlatformUI_Shutdown
RiotGamesApi_PlatformUI_Style_ClearOverrides
RiotGamesApi_PlatformUI_Style_SetOverrides
RiotGamesApi_PlatformUI_Test_PersistNoesisBetweenInstances
RiotGamesApi_PlatformUI_Test_ShutdownNoesis
RiotGamesApi_PlatformUI_Unity_EnableLinearColorSpaceRendering
RiotGamesApi_PlatformUI_Unity_GetRenderOffscreenCallback
RiotGamesApi_PlatformUI_Unity_GetRenderOnscreenCallback
RiotGamesApi_PlatformUI_Unity_GetShutdownRendererCallback
RiotGamesApi_PlatformUI_Unity_WrapTexture
RiotGamesApi_PlatformUI_Unreal_CreateRenderDevice
RiotGamesApi_PlatformUI_Unreal_CreateTexture
RiotGamesApi_PlatformUI_Unreal_GetTextureShaderResource
RiotGamesApi_PlatformUI_Update
RiotGamesApi_PlatformUI_UpdateWithTime
RiotGamesApi_PlatformUI_View_Activate
RiotGamesApi_PlatformUI_View_Char
RiotGamesApi_PlatformUI_View_Create
RiotGamesApi_PlatformUI_View_CreateInstance
RiotGamesApi_PlatformUI_View_Deactivate
RiotGamesApi_PlatformUI_View_Destroy
RiotGamesApi_PlatformUI_View_Get
RiotGamesApi_PlatformUI_View_GetRenderer
RiotGamesApi_PlatformUI_View_HScroll
RiotGamesApi_PlatformUI_View_KeyDown
RiotGamesApi_PlatformUI_View_KeyUp
RiotGamesApi_PlatformUI_View_MouseButtonDown
RiotGamesApi_PlatformUI_View_MouseButtonUp
RiotGamesApi_PlatformUI_View_MouseDoubleClick
RiotGamesApi_PlatformUI_View_MouseMove
RiotGamesApi_PlatformUI_View_MouseWheel
RiotGamesApi_PlatformUI_View_Scroll
RiotGamesApi_PlatformUI_View_SetSize
RiotGamesApi_PlatformUI_View_TouchDown
RiotGamesApi_PlatformUI_View_TouchMove
RiotGamesApi_PlatformUI_View_TouchUp
UnityPluginLoad
UnityPluginUnload

Sections

.text
Size: 21.5MB - Virtual size: 21.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 969KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

CPADinfo
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Valorant Root TBR12.045/VR_TBR12.045.exe
.exe windows:6 windows x64 arch:x64

456e8615ad4320c9f54e50319a19df9c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

CreateWindowExW
PostMessageW
GetMessageW
MessageBoxW
MessageBoxA
SystemParametersInfoW
DestroyIcon
SetWindowLongPtrW
GetWindowLongPtrW
GetClientRect
InvalidateRect
ReleaseDC
GetDC
DrawTextW
GetDialogBaseUnits
EndDialog
DialogBoxIndirectParamW
MoveWindow
SendMessageW

comctl32

ord380

kernel32

GetACP
IsValidCodePage
GetStringTypeW
GetFileAttributesExW
SetEnvironmentVariableW
FlushFileBuffers
GetCurrentDirectoryW
GetOEMCP
GetCPInfo
GetModuleHandleW
MulDiv
GetLastError
FormatMessageW
GetModuleFileNameW
SetDllDirectoryW
CreateSymbolicLinkW
GetProcAddress
CreateDirectoryW
GetCommandLineW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
GetEnvironmentStringsW
FindClose
FindFirstFileW
FindNextFileW
GetDriveTypeW
RemoveDirectoryW
GetTempPathW
CloseHandle
WaitForSingleObject
Sleep
GetCurrentProcess
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
FreeLibrary
LoadLibraryExW
LocalFree
SetConsoleCtrlHandler
K32EnumProcessModules
K32GetModuleFileNameExW
CreateFileW
FindFirstFileExW
GetFinalPathNameByHandleW
MultiByteToWideChar
WideCharToMultiByte
FreeEnvironmentStringsW
GetProcessHeap
GetTimeZoneInformation
HeapSize
HeapReAlloc
WriteConsoleW
SetEndOfFile
DeleteFileW
IsProcessorFeaturePresent
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
GetCommandLineA
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadFile
GetFullPathNameW
SetStdHandle
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW

advapi32

OpenProcessToken
GetTokenInformation
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW

gdi32

SelectObject
DeleteObject
CreateFontIndirectW

Sections

.text
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VR_TBR12.045.pyc
.ps1
Valorant Root TBR12.045/debug.log
Valorant Root TBR12.045/rpatch.dll
.dll windows:6 windows x64 arch:x64

f42e6056e7fa80c9281cf2ea22768193

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:d1:d0:38:01:51:29:a4:3d:a0:ae:e2:11:85:9c:8e
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

02-12-2022 00:00

Not After

03-12-2024 23:59

Subject

SERIALNUMBER=4155843,CN=Riot Games\, Inc.,O=Riot Games\, Inc.,L=Los Angeles,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

db:51:78:ef:75:ab:66:5b:f0:c2:7f:3f:66:b0:bb:cc:d2:52:f8:41:b2:72:0e:b5:c5:22:bd:ac:68:1a:2d:3e
Signer

Actual PE Digest

db:51:78:ef:75:ab:66:5b:f0:c2:7f:3f:66:b0:bb:cc:d2:52:f8:41:b2:72:0e:b5:c5:22:bd:ac:68:1a:2d:3e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\jenkins\workspace\Keystone\patcher-ci\tmp\Products\rpatch\Lib\Windows-X64-Public\bin\dll\rpatch.pdb

Imports

advapi32

OpenProcessToken
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
GetFileSecurityW
GetSidSubAuthority
GetSidSubAuthorityCount
GetTokenInformation
ConvertSidToStringSidA
ConvertSecurityDescriptorToStringSecurityDescriptorA
SystemFunction036

bcrypt

BCryptGenRandom

crypt32

CertEnumCertificatesInStore
CertOpenStore
CertCloseStore
CertFreeCertificateContext

dnsapi

DnsFree
DnsQuery_W

kernel32

SetEnvironmentVariableW
FreeEnvironmentStringsW
CloseHandle
WaitForSingleObjectEx
CreateEventW
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryExW
FormatMessageW
CreateFileW
DeleteFileW
GetFileSizeEx
GetTempFileNameW
SetEndOfFile
SetFilePointerEx
VerSetConditionMask
GetCurrentDirectoryW
CreateDirectoryW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesW
GetFileAttributesExW
GetFileInformationByHandle
ReadFile
RemoveDirectoryW
SetFileAttributesW
SetFileInformationByHandle
SetFileTime
WriteFile
GetTempPathW
GetLastError
DeviceIoControl
GetCurrentProcess
OpenProcess
GetSystemTime
VirtualAlloc
VirtualFree
GetModuleFileNameW
LoadLibraryW
LocalFree
MoveFileExW
VerifyVersionInfoW
SystemTimeToFileTime
GetFileInformationByHandleEx
GetCurrentProcessId
WideCharToMultiByte
GetSystemInfo
RaiseException
GetCurrentThread
GetCurrentThreadId
MultiByteToWideChar
SetLastError
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
InitOnceExecuteOnce
TlsAlloc
TlsGetValue
TlsSetValue
RtlVirtualUnwind
IsProcessorFeaturePresent
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
FlushFileBuffers
GetTickCount
GetSystemTimeAsFileTime
GetProcessHeap
GetFileSize
LockFileEx
UnlockFile
HeapDestroy
HeapCompact
HeapAlloc
HeapReAlloc
OutputDebugStringW
HeapSize
HeapValidate
GetVersionExW
WaitForSingleObject
CreateMutexW
UnlockFileEx
SetFilePointer
LockFile
GetDiskFreeSpaceW
GetFullPathNameW
HeapFree
HeapCreate
AreFileApisANSI
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
InitializeCriticalSectionEx
SleepEx
TryAcquireSRWLockExclusive
GetExitCodeThread
GetNativeSystemInfo
SleepConditionVariableSRW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EncodePointer
DecodePointer
GetCPInfo
GetStringTypeW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetStdHandle
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
ExitProcess
GetTimeZoneInformation
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetDriveTypeW
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
GetFileType
SetStdHandle
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlUnwind
TlsFree
InterlockedFlushSList
RtlPcToFileHeader
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
WriteConsoleW

ws2_32

WSAWaitForMultipleEvents
WSASetEvent
WSAResetEvent
WSAIoctl
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
WSASetLastError
htonl
getpeername
getsockopt
WSAGetLastError
socket
setsockopt
inet_pton
select
recv
ntohs
listen
htons
getsockname
ioctlsocket
connect
closesocket
bind
accept
__WSAFDIsSet
WSACleanup
WSAStartup
freeaddrinfo
getaddrinfo
WSAAddressToStringA
WSAStringToAddressA
send

Exports

Exports

rp_add_http_header
rp_cancel
rp_cancel_after
rp_cancel_at
rp_canceled
rp_check
rp_create_canceler
rp_create_patcher_settings
rp_create_session
rp_destroy_canceler
rp_destroy_patcher_settings
rp_destroy_session
rp_last_error
rp_last_error_data
rp_last_error_message
rp_patch
rp_set_http_request_settings
rp_set_last_error
rp_version

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 767KB - Virtual size: 767KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Valorant Root TBR12.045/snapshot_blob.bin
Valorant Root TBR12.045/system.yaml
Valorant Root TBR12.045/ucrtbase.dll
.dll windows:10 windows x64 arch:x64

405cde0fc80c30dcc3d783173dbd4143

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e2:09:1a:39:a5:c3:fd:37:30:89:d0:08:0c:5b:0e:eb:cd:6b:70:a1:0d:10:93:83:62:ff:4e:94:0a:b2:4f:61
Signer

Actual PE Digest

e2:09:1a:39:a5:c3:fd:37:30:89:d0:08:0c:5b:0e:eb:cd:6b:70:a1:0d:10:93:83:62:ff:4e:94:0a:b2:4f:61

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

ucrtbase.pdb

Imports

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
SetLastError
SetErrorMode
GetLastError

api-ms-win-core-heap-l1-1-0

HeapWalk
HeapValidate
HeapFree
HeapCompact
HeapReAlloc
HeapQueryInformation
GetProcessHeap
HeapAlloc
HeapSize

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
GetStartupInfoW
GetCurrentProcess
TlsAlloc
GetCurrentThread
TlsGetValue
GetCurrentThreadId
CreateProcessW
TlsSetValue
ExitProcess
ExitThread
CreateThread
TlsFree
GetExitCodeProcess
ResumeThread
TerminateProcess

api-ms-win-core-libraryloader-l1-1-0

FreeLibrary
LoadLibraryExW
GetModuleHandleExW
FreeLibraryAndExitThread
GetModuleHandleW
GetProcAddress
GetModuleFileNameW

api-ms-win-core-synch-l1-1-0

DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
WaitForSingleObject

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
IsDebuggerPresent

api-ms-win-core-processenvironment-l1-1-0

GetCommandLineW
SetStdHandle
GetCommandLineA
GetCurrentDirectoryW
GetStdHandle
SetEnvironmentVariableW
GetEnvironmentStringsW
SetCurrentDirectoryW
FreeEnvironmentStringsW

api-ms-win-core-file-l1-1-0

ReadFile
GetFileSizeEx
GetFileType
SetFilePointerEx
CreateFileW
FindClose
FindNextFileW
FindFirstFileExW
GetFileInformationByHandle
GetFullPathNameW
GetDriveTypeW
GetFileAttributesExW
GetDiskFreeSpaceW
GetLogicalDrives
SetFileAttributesW
SetFileTime
CreateDirectoryW
LockFileEx
UnlockFileEx
FlushFileBuffers
SetEndOfFile
DeleteFileW
WriteFile
RemoveDirectoryW

api-ms-win-core-string-l1-1-0

CompareStringW
MultiByteToWideChar
WideCharToMultiByte
GetStringTypeW

api-ms-win-core-localization-l1-2-0

GetOEMCP
EnumSystemLocalesW
IsValidCodePage
GetACP
GetCPInfo
IsValidLocale
GetUserDefaultLCID
GetLocaleInfoW
LCMapStringW

api-ms-win-core-datetime-l1-1-0

GetTimeFormatW
GetDateFormatW

api-ms-win-core-sysinfo-l1-1-0

SetLocalTime
GetSystemTimeAsFileTime
GetLocalTime
GetSystemInfo

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlUnwindEx
RtlPcToFileHeader
RtlUnwind

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-console-l1-1-0

PeekConsoleInputA
GetConsoleMode
GetConsoleCP
SetConsoleCtrlHandler
WriteConsoleW
GetConsoleOutputCP
GetNumberOfConsoleInputEvents
ReadConsoleW
ReadConsoleInputW
SetConsoleMode

api-ms-win-core-handle-l1-1-0

CloseHandle
DuplicateHandle

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-core-namedpipe-l1-1-0

PeekNamedPipe
CreatePipe

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime
TzSpecificLocalTimeToSystemTime
GetTimeZoneInformation
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime

api-ms-win-core-file-l2-1-0

MoveFileExW

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter
QueryPerformanceFrequency

api-ms-win-core-memory-l1-1-0

VirtualQuery
VirtualAlloc
VirtualProtect

api-ms-win-core-util-l1-1-0

Beep
EncodePointer

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList
InterlockedPushEntrySList

Exports

Exports

_Cbuild
_Cmulcc
_Cmulcr
_CreateFrameInfo
_CxxThrowException
_Exit
_FCbuild
_FCmulcc
_FCmulcr
_FindAndUnlinkFrame
_GetImageBase
_GetThrowImageBase
_Getdays
_Getmonths
_Gettnames
_IsExceptionObjectToBeDestroyed
_LCbuild
_LCmulcc
_LCmulcr
_SetImageBase
_SetThrowImageBase
_SetWinRTOutOfMemoryExceptionCallback
_Strftime
_W_Getdays
_W_Getmonths
_W_Gettnames
_Wcsftime
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__C_specific_handler
__C_specific_handler_noexcept
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxFrameHandler4
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__GetPlatformExceptionInfo
__NLG_Dispatch2
__NLG_Return2
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__TypeMatch
___lc_codepage_func
___lc_collate_cp_func
___lc_locale_name_func
___mb_cur_max_func
___mb_cur_max_l_func
__acrt_iob_func
__conio_common_vcprintf
__conio_common_vcprintf_p
__conio_common_vcprintf_s
__conio_common_vcscanf
__conio_common_vcwprintf
__conio_common_vcwprintf_p
__conio_common_vcwprintf_s
__conio_common_vcwscanf
__current_exception
__current_exception_context
__daylight
__dcrt_get_wide_environment_from_os
__dcrt_initial_narrow_environment
__doserrno
__dstbias
__fpe_flt_rounds
__fpecode
__initialize_lconv_for_unsigned_char
__intrinsic_setjmp
__intrinsic_setjmpex
__isascii
__iscsym
__iscsymf
__iswcsym
__iswcsymf
__p___argc
__p___argv
__p___wargv
__p__acmdln
__p__commode
__p__environ
__p__fmode
__p__mbcasemap
__p__mbctype
__p__pgmptr
__p__wcmdln
__p__wenviron
__p__wpgmptr
__pctype_func
__processing_throw
__pwctype_func
__pxcptinfoptrs
__report_gsfailure
__setusermatherr
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_compare
__std_type_info_destroy_list
__std_type_info_hash
__std_type_info_name
__stdio_common_vfprintf
__stdio_common_vfprintf_p
__stdio_common_vfprintf_s
__stdio_common_vfscanf
__stdio_common_vfwprintf
__stdio_common_vfwprintf_p
__stdio_common_vfwprintf_s
__stdio_common_vfwscanf
__stdio_common_vsnprintf_s
__stdio_common_vsnwprintf_s
__stdio_common_vsprintf
__stdio_common_vsprintf_p
__stdio_common_vsprintf_s
__stdio_common_vsscanf
__stdio_common_vswprintf
__stdio_common_vswprintf_p
__stdio_common_vswprintf_s
__stdio_common_vswscanf
__strncnt
__sys_errlist
__sys_nerr
__threadhandle
__threadid
__timezone
__toascii
__tzname
__unDName
__unDNameEx
__uncaught_exception
__uncaught_exceptions
__wcserror
__wcserror_s
__wcsncnt
_abs64
_access
_access_s
_aligned_free
_aligned_malloc
_aligned_msize
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_offset_recalloc
_aligned_realloc
_aligned_recalloc
_assert
_atodbl
_atodbl_l
_atof_l
_atoflt
_atoflt_l
_atoi64
_atoi64_l
_atoi_l
_atol_l
_atoldbl
_atoldbl_l
_atoll_l
_beep
_beginthread
_beginthreadex
_byteswap_uint64
_byteswap_ulong
_byteswap_ushort
_c_exit
_cabs
_callnewh
_calloc_base
_cexit
_cgets
_cgets_s
_cgetws
_cgetws_s
_chdir
_chdrive
_chgsign
_chgsignf
_chmod
_chsize
_chsize_s
_clearfp
_close
_commit
_configthreadlocale
_configure_narrow_argv
_configure_wide_argv
_control87
_controlfp
_controlfp_s
_copysign
_copysignf
_cputs
_cputws
_creat
_create_locale
_crt_at_quick_exit
_crt_atexit
_ctime32
_ctime32_s
_ctime64
_ctime64_s
_cwait
_d_int
_dclass
_dexp
_difftime32
_difftime64
_dlog
_dnorm
_dpcomp
_dpoly
_dscale
_dsign
_dsin
_dtest
_dunscale
_dup
_dup2
_dupenv_s
_ecvt
_ecvt_s
_endthread
_endthreadex
_eof
_errno
_except1
_execl
_execle
_execlp
_execlpe
_execute_onexit_table
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fclose_nolock
_fcloseall
_fcvt
_fcvt_s
_fd_int
_fdclass
_fdexp
_fdlog
_fdnorm
_fdopen
_fdpcomp
_fdpoly
_fdscale
_fdsign
_fdsin
_fdtest
_fdunscale
_fflush_nolock
_fgetc_nolock
_fgetchar
_fgetwc_nolock
_fgetwchar
_filelength
_filelengthi64
_fileno
_findclose
_findfirst32
_findfirst32i64
_findfirst64
_findfirst64i32
_findnext32
_findnext32i64
_findnext64
_findnext64i32
_finite
_finitef
_flushall
_fpclass
_fpclassf
_fpieee_flt
_fpreset
_fputc_nolock
_fputchar
_fputwc_nolock
_fputwchar
_fread_nolock
_fread_nolock_s
_free_base
_free_locale
_fseek_nolock
_fseeki64
_fseeki64_nolock
_fsopen
_fstat32
_fstat32i64
_fstat64
_fstat64i32
_ftell_nolock
_ftelli64
_ftelli64_nolock
_ftime32
_ftime32_s
_ftime64
_ftime64_s
_fullpath
_futime32
_futime64
_fwrite_nolock
_gcvt
_gcvt_s
_get_FMA3_enable
_get_current_locale
_get_daylight
_get_doserrno
_get_dstbias
_get_errno
_get_fmode
_get_heap_handle
_get_initial_narrow_environment
_get_initial_wide_environment
_get_invalid_parameter_handler
_get_narrow_winmain_command_line
_get_osfhandle
_get_pgmptr
_get_printf_count_output
_get_purecall_handler
_get_stream_buffer_pointers
_get_terminate
_get_thread_local_invalid_parameter_handler
_get_timezone
_get_tzname
_get_unexpected
_get_wide_winmain_command_line
_get_wpgmptr
_getc_nolock
_getch
_getch_nolock
_getche
_getche_nolock
_getcwd
_getdcwd
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getsystime
_getw
_getwc_nolock
_getwch
_getwch_nolock
_getwche
_getwche_nolock
_getws
_getws_s
_gmtime32
_gmtime32_s
_gmtime64
_gmtime64_s
_heapchk
_heapmin
_heapwalk
_hypot
_hypotf
_i64toa
_i64toa_s
_i64tow
_i64tow_s
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_initterm_e
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
_invoke_watson
_is_exception_typeof
_isalnum_l
_isalpha_l
_isatty
_isblank_l
_iscntrl_l
_isctype
_isctype_l
_isdigit_l
_isgraph_l
_isleadbyte_l
_islower_l
_ismbbalnum
_ismbbalnum_l
_ismbbalpha
_ismbbalpha_l
_ismbbblank
_ismbbblank_l
_ismbbgraph
_ismbbgraph_l
_ismbbkalnum
_ismbbkalnum_l
_ismbbkana
_ismbbkana_l
_ismbbkprint
_ismbbkprint_l
_ismbbkpunct
_ismbbkpunct_l
_ismbblead
_ismbblead_l
_ismbbprint
_ismbbprint_l
_ismbbpunct
_ismbbpunct_l
_ismbbtrail
_ismbbtrail_l
_ismbcalnum
_ismbcalnum_l
_ismbcalpha
_ismbcalpha_l
_ismbcblank
_ismbcblank_l
_ismbcdigit
_ismbcdigit_l
_ismbcgraph
_ismbcgraph_l
_ismbchira
_ismbchira_l
_ismbckata
_ismbckata_l
_ismbcl0
_ismbcl0_l
_ismbcl1
_ismbcl1_l
_ismbcl2
_ismbcl2_l
_ismbclegal
_ismbclegal_l
_ismbclower
_ismbclower_l
_ismbcprint
_ismbcprint_l
_ismbcpunct
_ismbcpunct_l
_ismbcspace
_ismbcspace_l
_ismbcsymbol
_ismbcsymbol_l
_ismbcupper
_ismbcupper_l
_ismbslead
_ismbslead_l
_ismbstrail
_ismbstrail_l
_isnan
_isnanf
_isprint_l
_ispunct_l
_isspace_l
_isupper_l
_iswalnum_l
_iswalpha_l
_iswblank_l
_iswcntrl_l
_iswcsym_l
_iswcsymf_l
_iswctype_l
_iswdigit_l
_iswgraph_l
_iswlower_l
_iswprint_l
_iswpunct_l
_iswspace_l
_iswupper_l
_iswxdigit_l
_isxdigit_l
_itoa
_itoa_s
_itow
_itow_s
_j0
_j1
_jn
_kbhit
_ld_int
_ldclass
_ldexp
_ldlog
_ldpcomp
_ldpoly
_ldscale
_ldsign
_ldsin
_ldtest
_ldunscale
_lfind
_lfind_s
_loaddll
_local_unwind

Sections

.text
Size: 718KB - Virtual size: 718KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 228KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Valorant Root TBR12.045/v8_context_snapshot.bin
Valorant Root TBR12.045/vcruntime140.dll
.dll windows:6 windows x64 arch:x64

7f91c705cf579114968b3edc12e1175e

Code Sign

33:00:00:00:f8:ae:a0:bd:67:8b:63:ac:eb:00:00:00:00:00:f8
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2023 19:43

Not After

16-10-2024 19:43

Subject

CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:14:9d:fb:c3:1f:1f:63:c3:10:00:00:00:00:00:14
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01-05-2013 20:44

Not After

01-05-2028 20:54

Subject

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2023 19:51

Not After

16-10-2024 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7c:b2:f9:9b:d8:d7:e7:a4:7c:9a:5b:62:f1:32:a8:a7:cd:79:2c:ce:93:3f:69:2d:49:f9:54:55:eb:1c:7a:43
Signer

Actual PE Digest

7c:b2:f9:9b:d8:d7:e7:a4:7c:9a:5b:62:f1:32:a8:a7:cd:79:2c:ce:93:3f:69:2d:49:f9:54:55:eb:1c:7a:43

Digest Algorithm

sha256

PE Digest Matches

true

7c:b2:f9:9b:d8:d7:e7:a4:7c:9a:5b:62:f1:32:a8:a7:cd:79:2c:ce:93:3f:69:2d:49:f9:54:55:eb:1c:7a:43
Signer

Actual PE Digest

7c:b2:f9:9b:d8:d7:e7:a4:7c:9a:5b:62:f1:32:a8:a7:cd:79:2c:ce:93:3f:69:2d:49:f9:54:55:eb:1c:7a:43

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

terminate
abort

api-ms-win-crt-heap-l1-1-0

calloc
malloc
free

api-ms-win-crt-string-l1-1-0

strcpy_s
strncmp
wcsncmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
__stdio_common_vsprintf_s

api-ms-win-crt-convert-l1-1-0

atol

kernel32

SetLastError
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
RtlLookupFunctionEntry
RtlUnwindEx
RtlUnwind
GetModuleHandleW
EncodePointer
RaiseException
RtlPcToFileHeader
InterlockedPushEntrySList
InterlockedFlushSList
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetLastError
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
GetModuleFileNameW

Exports

Exports

_CreateFrameInfo
_CxxThrowException
_FindAndUnlinkFrame
_IsExceptionObjectToBeDestroyed
_SetWinRTOutOfMemoryExceptionCallback
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__C_specific_handler
__C_specific_handler_noexcept
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__GetPlatformExceptionInfo
__NLG_Dispatch2
__NLG_Return2
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__TypeMatch
__current_exception
__current_exception_context
__intrinsic_setjmp
__intrinsic_setjmpex
__processing_throw
__report_gsfailure
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_compare
__std_type_info_destroy_list
__std_type_info_hash
__std_type_info_name
__telemetry_main_invoke_trigger
__telemetry_main_return_trigger
__unDName
__unDNameEx
__uncaught_exception
__uncaught_exceptions
__vcrt_GetModuleFileNameW
__vcrt_GetModuleHandleW
__vcrt_InitializeCriticalSectionEx
__vcrt_LoadLibraryExW
_get_purecall_handler
_get_unexpected
_is_exception_typeof
_local_unwind
_purecall
_set_purecall_handler
_set_se_translator
longjmp
memchr
memcmp
memcpy
memmove
memset
set_unexpected
strchr
strrchr
strstr
unexpected
wcschr
wcsrchr
wcsstr

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

fothk
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Valorant Root TBR12.045/vcruntime140_1.dll
.dll windows:6 windows x64 arch:x64

72707e942878aac770fcc118ce3ec1c9

Code Sign

33:00:00:00:f8:ae:a0:bd:67:8b:63:ac:eb:00:00:00:00:00:f8
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2023 19:43

Not After

16-10-2024 19:43

Subject

CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:14:9d:fb:c3:1f:1f:63:c3:10:00:00:00:00:00:14
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01-05-2013 20:44

Not After

01-05-2028 20:54

Subject

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2023 19:51

Not After

16-10-2024 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5b:2a:76:e2:02:bc:48:a3:52:00:8e:5c:37:fd:f9:45:46:52:3f:65:31:9b:2a:4a:cd:5f:f3:35:71:05:ae:42
Signer

Actual PE Digest

5b:2a:76:e2:02:bc:48:a3:52:00:8e:5c:37:fd:f9:45:46:52:3f:65:31:9b:2a:4a:cd:5f:f3:35:71:05:ae:42

Digest Algorithm

sha256

PE Digest Matches

true

5b:2a:76:e2:02:bc:48:a3:52:00:8e:5c:37:fd:f9:45:46:52:3f:65:31:9b:2a:4a:cd:5f:f3:35:71:05:ae:42
Signer

Actual PE Digest

5b:2a:76:e2:02:bc:48:a3:52:00:8e:5c:37:fd:f9:45:46:52:3f:65:31:9b:2a:4a:cd:5f:f3:35:71:05:ae:42

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140_1.amd64.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

terminate
abort

api-ms-win-crt-heap-l1-1-0

malloc
calloc
free

api-ms-win-crt-string-l1-1-0

strcpy_s
wcsncmp

vcruntime140

memcpy
__processing_throw
__C_specific_handler
memmove
__current_exception

kernel32

IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
RtlUnwindEx
RtlLookupFunctionEntry
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
RaiseException
RtlPcToFileHeader
GetLastError
DeleteCriticalSection
SetLastError

Exports

Exports

__CxxFrameHandler4
__NLG_Dispatch2
__NLG_Return2

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

b368e03a1fa9cbdc76715c9af16e670e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-interlocked-l1-1-0

api-ms-win-core-rtlsupport-l1-1-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-processthreads-l1-1-1

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 6KB

.rdata Size: 212KB - Virtual size: 211KB

.data Size: 4KB - Virtual size: 1KB

.pdata Size: 4KB - Virtual size: 516B

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 44B

d6473f4ac063d67707c023470b0b9504

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-string-l1-1-0

ntdll

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-interlocked-l1-1-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-processthreads-l1-1-1

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 8KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 1KB

.pdata Size: 4KB - Virtual size: 528B

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 44B

4dcee0bb1fe57861802bbd0465c0bf09

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ntdll

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 2KB

.text
Size: 8KB - Virtual size: 6KB

.rdata
Size: 212KB - Virtual size: 211KB

.data
Size: 4KB - Virtual size: 1KB

.pdata
Size: 4KB - Virtual size: 516B

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 44B

.text
Size: 12KB - Virtual size: 8KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 1KB

.pdata
Size: 4KB - Virtual size: 528B

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 44B

.text
Size: 4KB - Virtual size: 2KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 4KB

.pdata
Size: 4KB - Virtual size: 108B

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 80B

.text
Size: 8KB - Virtual size: 5KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 4KB

.pdata
Size: 4KB - Virtual size: 312B

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 404B

.text
Size: 72KB - Virtual size: 69KB

.rdata
Size: 28KB - Virtual size: 25KB

.data
Size: 4KB - Virtual size: 11KB

.pdata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 1016B

.reloc
Size: 4KB - Virtual size: 140B

33:00:00:04:13:31:bc:19:88:07:a9:07:74:00:00:00:00:04:13
Certificate