ModEngine-2[.]1[.]0[.]0-win64[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

ModEngine-2.1.0.0-win64.zip
Size

6.0MB
MD5

bed07e44a5416838bedceec848f588ad
SHA1

e975ff575472313bf574af67c35a0537cab22773
SHA256

8a5952453a8e3851247ed6a9dd8926ca638cf6135aa96c90298b63f15d8900ef
SHA512

64a429d17ffbe37a6731f8471491ca199b94314baa47d6b114719052aac459f759b637ec6fc048a4e18315d7383e38e83eb25b3d1342830e0be9ef1117bd8423
SSDEEP

196608:opJNOa2X6n1oKDjb5HpMehiJ2S5EOQ2JoP31ar/FVS7Bc:o/M6n1FDEehiIAEmuPMzFqc

Score

3^/10

Malware Config

Signatures

Unsigned PE 7 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ModEngine-2.1.0.0-win64/modengine2/bin/lua.dll
unpack001/ModEngine-2.1.0.0-win64/modengine2/bin/modengine2.dll
unpack001/ModEngine-2.1.0.0-win64/modengine2/crashpad/crashpad_handler.exe
unpack001/ModEngine-2.1.0.0-win64/modengine2/crashpad/zlib1.dll
unpack001/ModEngine-2.1.0.0-win64/modengine2/tools/scyllahide/HookLibraryx64.dll
unpack001/ModEngine-2.1.0.0-win64/modengine2/tools/scyllahide/InjectorCLIx64.exe
unpack001/ModEngine-2.1.0.0-win64/modengine2_launcher.exe

Files

ModEngine-2.1.0.0-win64.zip
.zip
ModEngine-2.1.0.0-win64/README.txt
ModEngine-2.1.0.0-win64/config_armoredcore6.toml
ModEngine-2.1.0.0-win64/config_darksouls3.toml
ModEngine-2.1.0.0-win64/config_eldenring.toml
ModEngine-2.1.0.0-win64/launchmod_armoredcore6.bat
ModEngine-2.1.0.0-win64/launchmod_darksouls3.bat
ModEngine-2.1.0.0-win64/launchmod_eldenring.bat
ModEngine-2.1.0.0-win64/modengine2/assets/debug_menu/adhoc/FontShader/debugFont_ps.ppo
ModEngine-2.1.0.0-win64/modengine2/assets/debug_menu/adhoc/FontShader/debugFont_vs.vpo
ModEngine-2.1.0.0-win64/modengine2/assets/debug_menu/font/DSFont24.ccm
ModEngine-2.1.0.0-win64/modengine2/assets/debug_menu/font/DSFont24.tpf
ModEngine-2.1.0.0-win64/modengine2/assets/debug_menu/font/TalkFont24.ccm
ModEngine-2.1.0.0-win64/modengine2/assets/debug_menu/font/TalkFont24.tpf
ModEngine-2.1.0.0-win64/modengine2/assets/debug_menu/font/dbgfont14h.ccm
ModEngine-2.1.0.0-win64/modengine2/assets/debug_menu/font/dbgfont14h.tpf
ModEngine-2.1.0.0-win64/modengine2/assets/debug_menu/paramdef/paramdef.paramdefbnd.dcx
ModEngine-2.1.0.0-win64/modengine2/assets/debug_menu/stayparamdef/stayparamdef.parambnd.dcx
ModEngine-2.1.0.0-win64/modengine2/assets/debug_menu/testdata/debugBootMenu.textlist
ModEngine-2.1.0.0-win64/modengine2/assets/debug_menu/testdata/signboard/testsignboard.pwt
ModEngine-2.1.0.0-win64/modengine2/bin/lua.dll
.dll windows:6 windows x64 arch:x64

a3334a4c6ae84c95b970e89aa0e15a8f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\ModEngine2\ModEngine2\builddir\vcpkg_installed\vcpkg\blds\lua\x64-windows-rel\lua.pdb

Imports

kernel32

GetLastError
FreeLibrary
GetModuleFileNameA
GetProcAddress
LoadLibraryExA
FormatMessageA
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

vcruntime140

memchr
__intrinsic_setjmp
__C_specific_handler
memcmp
strrchr
__std_type_info_destroy_list
longjmp
memset
strchr
memcpy
strstr

api-ms-win-crt-runtime-l1-1-0

_cexit
_execute_onexit_table
_initialize_onexit_table
exit
system
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
abort
_initterm_e
_initterm
strerror
_errno

api-ms-win-crt-stdio-l1-1-0

getc
tmpnam
freopen
fread
fopen
fflush
__stdio_common_vfprintf
ferror
feof
fwrite
fgets
clearerr
fclose
_fseeki64
_ftelli64
_pclose
_popen
setvbuf
__stdio_common_vsprintf
tmpfile
ungetc
__acrt_iob_func

api-ms-win-crt-heap-l1-1-0

realloc
free

api-ms-win-crt-string-l1-1-0

strcoll
isalnum
tolower
iscntrl
strncmp
isgraph
ispunct
islower
isupper
isalpha
toupper
isdigit
strspn
isxdigit
isspace
strpbrk

api-ms-win-crt-math-l1-1-0

frexp
ldexp
tan
sin
pow
acos
asin
atan2
ceil
cos
exp
floor
fmod
log
log10
log2
sqrt

api-ms-win-crt-locale-l1-1-0

localeconv
setlocale

api-ms-win-crt-time-l1-1-0

_gmtime64
_localtime64
strftime
clock
_mktime64
_time64
_difftime64

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-convert-l1-1-0

strtod

api-ms-win-crt-filesystem-l1-1-0

rename
remove

Exports

Exports

luaL_addgsub
luaL_addlstring
luaL_addstring
luaL_addvalue
luaL_argerror
luaL_buffinit
luaL_buffinitsize
luaL_callmeta
luaL_checkany
luaL_checkinteger
luaL_checklstring
luaL_checknumber
luaL_checkoption
luaL_checkstack
luaL_checktype
luaL_checkudata
luaL_checkversion_
luaL_error
luaL_execresult
luaL_fileresult
luaL_getmetafield
luaL_getsubtable
luaL_gsub
luaL_len
luaL_loadbufferx
luaL_loadfilex
luaL_loadstring
luaL_newmetatable
luaL_newstate
luaL_openlibs
luaL_optinteger
luaL_optlstring
luaL_optnumber
luaL_prepbuffsize
luaL_pushresult
luaL_pushresultsize
luaL_ref
luaL_requiref
luaL_setfuncs
luaL_setmetatable
luaL_testudata
luaL_tolstring
luaL_traceback
luaL_typeerror
luaL_unref
luaL_where
lua_absindex
lua_arith
lua_atpanic
lua_callk
lua_checkstack
lua_close
lua_closeslot
lua_compare
lua_concat
lua_copy
lua_createtable
lua_dump
lua_error
lua_gc
lua_getallocf
lua_getfield
lua_getglobal
lua_gethook
lua_gethookcount
lua_gethookmask
lua_geti
lua_getinfo
lua_getiuservalue
lua_getlocal
lua_getmetatable
lua_getstack
lua_gettable
lua_gettop
lua_getupvalue
lua_iscfunction
lua_isinteger
lua_isnumber
lua_isstring
lua_isuserdata
lua_isyieldable
lua_len
lua_load
lua_newstate
lua_newthread
lua_newuserdatauv
lua_next
lua_pcallk
lua_pushboolean
lua_pushcclosure
lua_pushfstring
lua_pushinteger
lua_pushlightuserdata
lua_pushlstring
lua_pushnil
lua_pushnumber
lua_pushstring
lua_pushthread
lua_pushvalue
lua_pushvfstring
lua_rawequal
lua_rawget
lua_rawgeti
lua_rawgetp
lua_rawlen
lua_rawset
lua_rawseti
lua_rawsetp
lua_resetthread
lua_resume
lua_rotate
lua_setallocf
lua_setcstacklimit
lua_setfield
lua_setglobal
lua_sethook
lua_seti
lua_setiuservalue
lua_setlocal
lua_setmetatable
lua_settable
lua_settop
lua_setupvalue
lua_setwarnf
lua_status
lua_stringtonumber
lua_toboolean
lua_tocfunction
lua_toclose
lua_tointegerx
lua_tolstring
lua_tonumberx
lua_topointer
lua_tothread
lua_touserdata
lua_type
lua_typename
lua_upvalueid
lua_upvaluejoin
lua_version
lua_warning
lua_xmove
lua_yieldk
luaopen_base
luaopen_coroutine
luaopen_debug
luaopen_io
luaopen_math
luaopen_os
luaopen_package
luaopen_string
luaopen_table
luaopen_utf8

Sections

.text
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ModEngine-2.1.0.0-win64/modengine2/bin/modengine2.dll
.dll windows:6 windows x64 arch:x64

3b1e23108c22f33810874028c817da87

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

lua

lua_close
lua_absindex
lua_gettop
lua_setglobal
lua_pushlightuserdata
lua_pushboolean
lua_tointegerx
lua_tonumberx
lua_isinteger
luaL_newstate
luaL_loadbufferx
luaL_ref
luaL_error
luaL_newmetatable
luaL_openlibs
lua_setupvalue
lua_getupvalue
lua_error
lua_pcallk
lua_callk
lua_setmetatable
lua_setfield
lua_settable
lua_newuserdatauv
lua_createtable
lua_rawgeti
lua_getglobal
lua_pushcclosure
lua_pushlstring
lua_pushnil
lua_touserdata
lua_tolstring
lua_type
lua_iscfunction
lua_xmove
lua_copy
lua_rotate
lua_pushvalue
lua_settop
luaL_unref

kernel32

GetFileInformationByHandleEx
AreFileApisANSI
GetFileAttributesExW
FindNextFileW
FindFirstFileExW
FindFirstFileW
GetCurrentDirectoryW
GetStdHandle
WriteFile
IsDebuggerPresent
DebugBreak
Sleep
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
VirtualQueryEx
GetModuleFileNameW
GetDynamicTimeZoneInformation
AllocConsole
GetConsoleMode
WriteConsoleA
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
GetLastError
GetModuleHandleW
GetProcAddress
LoadLibraryW
WideCharToMultiByte
K32EnumProcessModules
MultiByteToWideChar
VirtualProtect
CreateThread
TlsAlloc
TlsGetValue
TlsSetValue
GlobalAlloc
CloseHandle
WaitForSingleObject
CreateProcessW
GetSystemDirectoryA
GetModuleHandleA
GlobalUnlock
GlobalLock
GlobalFree
VerSetConditionMask
QueryPerformanceCounter
QueryPerformanceFrequency
LoadLibraryA
VerifyVersionInfoW
InitOnceBeginInitialize
SetLastError
VirtualQuery
TerminateProcess
ResumeThread
OpenProcess
VirtualProtectEx
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualFree
GetFileType
SetUnhandledExceptionFilter
SetEvent
SleepEx
CreateEventW
GetVersion
FindClose
InitializeCriticalSection
FormatMessageA
CreateFileW
SetNamedPipeHandleState
TransactNamedPipe
CreateNamedPipeW
WaitNamedPipeW
LocalFree
LockFileEx
ReadFile
SetEndOfFile
SetFilePointerEx
UnlockFileEx
OutputDebugStringW
GetLocalTime
FormatMessageW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
CreateDirectoryW
DeleteFileW
GetFileAttributesW
InitOnceComplete
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
AcquireSRWLockShared
ResetEvent
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
ReleaseSRWLockShared
GetFileTime
RemoveDirectoryW
GetFileAttributesA
GetLocaleInfoEx

user32

EnumDisplayMonitors
GetMonitorInfoA
MonitorFromWindow
LoadCursorA
SetWindowLongW
SetWindowLongA
GetWindowLongW
WindowFromPoint
ScreenToClient
ClientToScreen
GetCursorPos
CallWindowProcA
SetCursorPos
AdjustWindowRectEx
GetClientRect
SetWindowTextW
ReleaseDC
GetDC
SetForegroundWindow
GetForegroundWindow
ReleaseCapture
SetCapture
GetCapture
GetKeyState
SetFocus
BringWindowToTop
IsIconic
SetWindowPos
SetLayeredWindowAttributes
ShowWindow
SetCursor
CreateWindowExA
DestroyWindow
IsChild
SetWindowLongPtrA
RegisterClassExA
DefWindowProcA
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard

gdi32

GetDeviceCaps

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW
SystemFunction036
BuildSecurityDescriptorW
BuildExplicitAccessWithNameW

ntdll

RtlImageNtHeader

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?pubsetbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAPEAV12@PEAD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?rdstate@ios_base@std@@QEBAHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?bad@ios_base@std@@QEBA_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?_Xbad_alloc@std@@YAXXZ
_Mbrtowc
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
_Xtime_get_ticks
_Thrd_join
_Thrd_id
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
_Cnd_destroy_in_situ
_Cnd_signal
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Xbad_function_call@std@@YAXXZ
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAHH@Z
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??Bid@locale@std@@QEAA_KXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?id@?$numpunct@D@std@@2V0locale@2@A
?id@?$numpunct@_W@std@@2V0locale@2@A
_Query_perf_counter
_Query_perf_frequency
_Thrd_sleep
_Thrd_yield
_Cnd_do_broadcast_at_thread_exit
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?width@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?flags@ios_base@std@@QEBAHXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
_Wcscoll
_Wcsxfrm
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?is@?$ctype@_W@std@@QEBA_NF_W@Z
?tolower@?$ctype@_W@std@@QEBA_W_W@Z
?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?id@?$collate@_W@std@@2V0locale@2@A
?uncaught_exceptions@std@@YAHXZ
?good@ios_base@std@@QEBA_NXZ
?eof@ios_base@std@@QEBA_NXZ

msvcp140_atomic_wait

__std_close_threadpool_work
__std_bulk_submit_threadpool_work
__std_create_threadpool_work
__std_parallel_algorithms_hw_threads
__std_wait_for_threadpool_work_callbacks

concrt140

?_Internal_push_back@_Concurrent_vector_base_v4@details@Concurrency@@IEAAPEAX_KAEA_K@Z
?_Byte_reverse_table@details@Concurrency@@3QBEB
??1_Concurrent_vector_base_v4@details@Concurrency@@IEAA@XZ
?_Internal_clear@_Concurrent_vector_base_v4@details@Concurrency@@IEAA_KP6AXPEAX_K@Z@Z
?_Segment_index_of@_Concurrent_vector_base_v4@details@Concurrency@@KA_K_K@Z
?_Internal_capacity@_Concurrent_vector_base_v4@details@Concurrency@@IEBA_KXZ

d3dcompiler_47

D3DCompile

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext

vcruntime140

__std_exception_copy
__std_type_info_destroy_list
__current_exception_context
__current_exception
__C_specific_handler
memcpy
_purecall
__std_terminate
memchr
memcmp
memmove
memset
strstr
__std_exception_destroy
_CxxThrowException
strchr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

wcslen
_wcsicmp
isblank
strlen
strcmp
strncmp
strncpy
isdigit
tolower

api-ms-win-crt-heap-l1-1-0

realloc
_aligned_free
_callnewh
free
calloc
malloc

api-ms-win-crt-runtime-l1-1-0

signal
_invalid_parameter_noinfo_noreturn
_initterm
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
abort
_errno
_beginthreadex
_initialize_onexit_table
terminate
_cexit
_register_onexit_function
_execute_onexit_table
_crt_atexit
_initterm_e

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-math-l1-1-0

sinf
floorf
acosf
fabs
ceilf
_fdtest
cosf
sqrtf
_ldtest
_dtest
_dsign
llround

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
ftell
__acrt_iob_func
_wfopen
freopen_s
__stdio_common_vfprintf
__stdio_common_vsnprintf_s
_get_stream_buffer_pointers
_fsopen
__stdio_common_vswprintf_s
__stdio_common_vsscanf
fclose
ungetc
setvbuf
fflush
fgetc
fwrite
_fseeki64
fgetpos
fsetpos
fread
__stdio_common_vsprintf_p
fputc
fseek

api-ms-win-crt-time-l1-1-0

_gmtime64_s
_localtime64_s
_mktime64
strftime
_time64

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func
localeconv

api-ms-win-crt-filesystem-l1-1-0

remove
_unlock_file
_lock_file
_wstat64
_mkdir

api-ms-win-crt-utility-l1-1-0

qsort

Exports

Exports

DirectInput8Create

Sections

.text
Size: 715KB - Virtual size: 715KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourd
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ModEngine-2.1.0.0-win64/modengine2/crashpad/crashpad_handler.exe
.exe windows:6 windows x64 arch:x64

6e1b56f9970c3b6eec05cc58fcbe20c5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\ModEngine2\ModEngine2\builddir\vcpkg_installed\vcpkg\blds\crashpad\x64-windows-rel\crashpad_handler.pdb

Imports

kernel32

InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetLastError
GetModuleFileNameW
DuplicateHandle
ConnectNamedPipe
DisconnectNamedPipe
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
SetEvent
WaitForSingleObject
CreateEventW
GetCurrentProcess
TerminateProcess
CreateThread
OpenProcess
UnregisterWaitEx
RegisterWaitForSingleObject
GetFileInformationByHandleEx
FindClose
CloseHandle
GetProcAddress
LoadLibraryW
CreateFileW
SetNamedPipeHandleState
TransactNamedPipe
CreateNamedPipeW
WaitNamedPipeW
GetVersion
ReleaseSemaphore
CreateSemaphoreW
GetStdHandle
GetFileType
LockFileEx
LeaveCriticalSection
SetEndOfFile
SetFilePointerEx
UnlockFileEx
WriteFile
GetModuleHandleW
FormatMessageA
LocalFree
CreateDirectoryW
DeleteFileW
GetFileAttributesW
GetProcessTimes
SuspendThread
ResumeThread
GetProcessId
GetThreadContext
Wow64GetThreadContext
VerSetConditionMask
IsProcessorFeaturePresent
GetSystemInfo
VerifyVersionInfoW
GetTimeZoneInformation
GetThreadLocale
GetSystemDefaultLCID
GetUserDefaultLCID
IsWow64Process
SleepEx
Sleep
CreateProcessW
InitOnceComplete
EnterCriticalSection
FormatMessageW
GetLocalTime
GetCurrentThreadId
GetCurrentProcessId
GetLastError
OutputDebugStringW
SetConsoleCtrlHandler
SetProcessShutdownParameters
ReadFile
ReleaseSRWLockExclusive
SetUnhandledExceptionFilter
InitializeCriticalSection
ReadProcessMemory
VirtualQueryEx
RemoveDirectoryW
GetFileTime
FindNextFileW
FindFirstFileExW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
InitOnceBeginInitialize

advapi32

SystemFunction036
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorW
BuildExplicitAccessWithNameW
BuildSecurityDescriptorW
RevertToSelf
ImpersonateNamedPipeClient

user32

GetWindowLongPtrW
DestroyWindow
GetMessageW
SetWindowLongPtrW
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
PostMessageW
DispatchMessageW
TranslateMessage

winhttp

WinHttpConnect
WinHttpCrackUrl
WinHttpOpen
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpAddRequestHeaders
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpQueryHeaders
WinHttpSetTimeouts
WinHttpReadData
WinHttpWriteData

zlib1

deflate
deflateEnd
zError
deflateInit2_

powrprof

CallNtPowerInformation

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?setf@ios_base@std@@QEAAHHH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

strchr
__C_specific_handler
__current_exception
__current_exception_context
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memcpy
__std_terminate
memchr
memcmp
_purecall
memset
memmove

api-ms-win-crt-runtime-l1-1-0

terminate
_c_exit
_initialize_onexit_table
_cexit
_crt_atexit
_exit
__p___argc
__p___wargv
_invalid_parameter_noinfo_noreturn
exit
_set_app_type
_register_thread_local_exe_atexit_callback
_seh_filter_exe
_initterm
_get_wide_winmain_command_line
_configure_wide_argv
signal
_invoke_watson
_initialize_wide_environment
_errno
abort
_register_onexit_function
_initterm_e

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf
__p__commode
_set_fmode
__stdio_common_vsprintf_p
__acrt_iob_func
__stdio_common_vsprintf
fflush
__stdio_common_vfprintf

api-ms-win-crt-string-l1-1-0

tolower
wcsncmp
_wcsicmp
wcsnlen
isspace
strncmp
isalnum
strnlen

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
_aligned_free
free
_aligned_malloc
_set_new_mode

api-ms-win-crt-convert-l1-1-0

strtoul
strtoull

api-ms-win-crt-math-l1-1-0

__setusermatherr
_dclass

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

api-ms-win-crt-filesystem-l1-1-0

_wstat64

Sections

.text
Size: 392KB - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

CPADinfo
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ModEngine-2.1.0.0-win64/modengine2/crashpad/zlib1.dll
.dll windows:6 windows x64 arch:x64

d879d2294039900ef484e0f01607f882

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\ModEngine2\ModEngine2\builddir\vcpkg_installed\vcpkg\blds\zlib\x64-windows-rel\zlib.pdb

Imports

vcruntime140

__std_type_info_destroy_list
__C_specific_handler
memmove
memchr
memset
memcpy

api-ms-win-crt-stdio-l1-1-0

_wopen
_write
_read
_close
__stdio_common_vsprintf
_open
_lseeki64

api-ms-win-crt-heap-l1-1-0

malloc
free

api-ms-win-crt-convert-l1-1-0

wcstombs

api-ms-win-crt-runtime-l1-1-0

_errno
strerror
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_cexit

kernel32

DisableThreadLibraryCalls
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter

Exports

Exports

adler32
adler32_combine
adler32_z
compress
compress2
compressBound
crc32
crc32_combine
crc32_combine_gen
crc32_combine_op
crc32_z
deflate
deflateBound
deflateCopy
deflateEnd
deflateGetDictionary
deflateInit2_
deflateInit_
deflateParams
deflatePending
deflatePrime
deflateReset
deflateResetKeep
deflateSetDictionary
deflateSetHeader
deflateTune
get_crc_table
gzbuffer
gzclearerr
gzclose
gzclose_r
gzclose_w
gzdirect
gzdopen
gzeof
gzerror
gzflush
gzfread
gzfwrite
gzgetc
gzgetc_
gzgets
gzoffset
gzoffset64
gzopen
gzopen64
gzopen_w
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzseek64
gzsetparams
gztell
gztell64
gzungetc
gzvprintf
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCodesUsed
inflateCopy
inflateEnd
inflateGetDictionary
inflateGetHeader
inflateInit2_
inflateInit_
inflateMark
inflatePrime
inflateReset
inflateReset2
inflateResetKeep
inflateSetDictionary
inflateSync
inflateSyncPoint
inflateUndermine
inflateValidate
uncompress
uncompress2
zError
zlibCompileFlags
zlibVersion

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ModEngine-2.1.0.0-win64/modengine2/include/MINT.h
ModEngine-2.1.0.0-win64/modengine2/include/README.md
ModEngine-2.1.0.0-win64/modengine2/include/fmt/args.h
ModEngine-2.1.0.0-win64/modengine2/include/fmt/chrono.h
ModEngine-2.1.0.0-win64/modengine2/include/fmt/color.h
ModEngine-2.1.0.0-win64/modengine2/include/fmt/compile.h
ModEngine-2.1.0.0-win64/modengine2/include/fmt/core.h
ModEngine-2.1.0.0-win64/modengine2/include/fmt/format-inl.h
ModEngine-2.1.0.0-win64/modengine2/include/fmt/format.h
ModEngine-2.1.0.0-win64/modengine2/include/fmt/os.h
ModEngine-2.1.0.0-win64/modengine2/include/fmt/ostream.h
ModEngine-2.1.0.0-win64/modengine2/include/fmt/printf.h
ModEngine-2.1.0.0-win64/modengine2/include/fmt/ranges.h
ModEngine-2.1.0.0-win64/modengine2/include/fmt/std.h
ModEngine-2.1.0.0-win64/modengine2/include/fmt/xchar.h
ModEngine-2.1.0.0-win64/modengine2/include/lauxlib.h
ModEngine-2.1.0.0-win64/modengine2/include/lua.h
ModEngine-2.1.0.0-win64/modengine2/include/lua.hpp
ModEngine-2.1.0.0-win64/modengine2/include/luaconf.h
ModEngine-2.1.0.0-win64/modengine2/include/lualib.h
ModEngine-2.1.0.0-win64/modengine2/include/modengine/extension.h
ModEngine-2.1.0.0-win64/modengine2/include/modengine/extension_logger.h
ModEngine-2.1.0.0-win64/modengine2/include/modengine/game_type.h
ModEngine-2.1.0.0-win64/modengine2/include/modengine/hook.h
ModEngine-2.1.0.0-win64/modengine2/include/modengine/settings.h
ModEngine-2.1.0.0-win64/modengine2/include/modengine/util/memory_scanner.h
ModEngine-2.1.0.0-win64/modengine2/include/sol/as_args.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/as_returns.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/assert.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/base_traits.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/bind_traits.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/bytecode.hpp
.js
ModEngine-2.1.0.0-win64/modengine2/include/sol/call.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/compatibility.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/compatibility/compat-5.3.c.h
ModEngine-2.1.0.0-win64/modengine2/include/sol/compatibility/compat-5.3.h
ModEngine-2.1.0.0-win64/modengine2/include/sol/compatibility/compat-5.4.h
ModEngine-2.1.0.0-win64/modengine2/include/sol/compatibility/lua_version.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/config.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/coroutine.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/debug.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/demangle.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/deprecate.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/detail/build_version.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/dump_handler.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/ebco.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/environment.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/epilogue.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/error.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/error_handler.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/forward.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/forward_detail.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/function.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/function_result.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/function_types.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/function_types_core.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/function_types_overloaded.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/function_types_stateful.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/function_types_stateless.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/function_types_templated.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/in_place.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/inheritance.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/load_result.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/lua_table.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/lua_value.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/make_reference.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/metatable.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/object.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/object_base.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/optional.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/optional_implementation.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/overload.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/packaged_coroutine.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/pairs_iterator.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/pointer_like.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/policies.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/prologue.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/property.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/protect.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/protected_function.hpp
.js
ModEngine-2.1.0.0-win64/modengine2/include/sol/protected_function_result.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/protected_handler.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/proxy_base.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/raii.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/reference.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/resolve.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/sol.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/stack.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/stack/detail/pairs.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/stack_check.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/stack_check_get.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/stack_check_get_qualified.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/stack_check_get_unqualified.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/stack_check_qualified.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/stack_check_unqualified.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/stack_core.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/stack_field.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/stack_get.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/stack_get_qualified.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/stack_get_unqualified.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/stack_guard.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/stack_iterator.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/stack_pop.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/stack_probe.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/stack_proxy.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/stack_proxy_base.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/stack_push.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/stack_reference.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/state.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/state_handling.hpp
.js
ModEngine-2.1.0.0-win64/modengine2/include/sol/state_view.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/string_view.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/table.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/table_core.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/table_iterator.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/table_proxy.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/thread.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/tie.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/traits.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/trampoline.hpp
.js
ModEngine-2.1.0.0-win64/modengine2/include/sol/tuple.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/types.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/unicode.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/unique_usertype_traits.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/unsafe_function.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/unsafe_function_result.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/userdata.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/usertype.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/usertype_container.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/usertype_container_launch.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/usertype_core.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/usertype_proxy.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/usertype_storage.hpp
.vbs
ModEngine-2.1.0.0-win64/modengine2/include/sol/usertype_traits.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/variadic_args.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/variadic_results.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/version.hpp
ModEngine-2.1.0.0-win64/modengine2/include/sol/wrapper.hpp
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/async.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/async_logger-inl.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/async_logger.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/cfg/argv.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/cfg/env.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/cfg/helpers-inl.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/cfg/helpers.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/common-inl.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/common.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/details/backtracer-inl.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/details/backtracer.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/details/circular_q.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/details/console_globals.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/details/file_helper-inl.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/details/file_helper.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/details/fmt_helper.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/details/log_msg-inl.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/details/log_msg.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/details/log_msg_buffer-inl.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/details/log_msg_buffer.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/details/mpmc_blocking_q.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/details/null_mutex.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/details/os-inl.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/details/os.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/details/periodic_worker-inl.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/details/periodic_worker.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/details/registry-inl.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/details/registry.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/details/synchronous_factory.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/details/tcp_client-windows.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/details/tcp_client.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/details/thread_pool-inl.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/details/thread_pool.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/details/udp_client-windows.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/details/udp_client.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/details/windows_include.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/fmt/bin_to_hex.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/fmt/chrono.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/fmt/compile.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/fmt/fmt.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/fmt/ostr.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/fmt/ranges.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/fmt/xchar.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/formatter.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/fwd.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/logger-inl.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/logger.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/pattern_formatter-inl.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/pattern_formatter.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/android_sink.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/ansicolor_sink-inl.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/ansicolor_sink.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/base_sink-inl.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/base_sink.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/basic_file_sink-inl.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/basic_file_sink.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/daily_file_sink.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/dist_sink.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/dup_filter_sink.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/hourly_file_sink.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/mongo_sink.h
.js
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/msvc_sink.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/null_sink.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/ostream_sink.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/qt_sinks.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/ringbuffer_sink.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/rotating_file_sink-inl.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/rotating_file_sink.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/sink-inl.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/sink.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/stdout_color_sinks-inl.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/stdout_color_sinks.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/stdout_sinks-inl.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/stdout_sinks.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/syslog_sink.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/systemd_sink.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/tcp_sink.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/udp_sink.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/win_eventlog_sink.h
.js
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/wincolor_sink-inl.h
.vbs
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/sinks/wincolor_sink.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/spdlog-inl.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/spdlog.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/stopwatch.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/tweakme.h
ModEngine-2.1.0.0-win64/modengine2/include/spdlog/version.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/array.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/array.inl
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/at_path.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/at_path.inl
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/date_time.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/formatter.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/formatter.inl
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/forward_declarations.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/header_end.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/header_start.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/json_formatter.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/json_formatter.inl
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/key.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/make_node.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/node.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/node.inl
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/node_view.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/parse_error.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/parse_result.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/parser.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/parser.inl
.js
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/preprocessor.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/print_to_stream.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/print_to_stream.inl
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/simd.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/source_region.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/std_except.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/std_initializer_list.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/std_map.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/std_new.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/std_optional.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/std_string.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/std_string.inl
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/std_utility.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/std_vector.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/table.h
.js
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/table.inl
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/toml_formatter.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/toml_formatter.inl
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/unicode.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/unicode.inl
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/unicode_autogenerated.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/value.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/version.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/yaml_formatter.h
ModEngine-2.1.0.0-win64/modengine2/include/toml++/impl/yaml_formatter.inl
ModEngine-2.1.0.0-win64/modengine2/include/toml++/toml.h
ModEngine-2.1.0.0-win64/modengine2/lib/lua.lib
ModEngine-2.1.0.0-win64/modengine2/lib/modengine2.lib
ModEngine-2.1.0.0-win64/modengine2/share/cmake/modengine/ModEngineConfig.cmake
ModEngine-2.1.0.0-win64/modengine2/share/cmake/modengine/ModEngineConfigVersion.cmake
ModEngine-2.1.0.0-win64/modengine2/share/cmake/modengine/ModEngineTargets-minsizerel.cmake
ModEngine-2.1.0.0-win64/modengine2/share/cmake/modengine/ModEngineTargets.cmake
ModEngine-2.1.0.0-win64/modengine2/tools/scyllahide/HookLibraryx64.dll
.dll windows:5 windows x64 arch:x64

73b0a41dd52079dd6cc2d7796cae803b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

ntdll

LdrGetProcedureAddress
RtlEqualUnicodeString
LdrGetDllHandle
DbgBreakPoint
RtlImageNtHeader
NtQueryObject
DbgPrint
NtOpenProcessToken
NtFreeVirtualMemory
NtOpenThread
RtlAllocateHeap
NtQuerySystemInformation
NtWriteFile
RtlTimeToTimeFields
NtQueryInformationProcess
NtOpenProcess
RtlInitUnicodeString
RtlDosPathNameToNtPathName_U
NtAllocateVirtualMemory
NtReadVirtualMemory
NtClose
RtlAdjustPrivilege
RtlFreeHeap
NtCreateDebugObject
NtPrivilegeCheck
NtSetInformationProcess
NtQueryInformationThread
NtCreateFile
NtTerminateProcess
LdrDisableThreadCalloutsForDll
memcpy
memset

Exports

Exports

HookDllData
HookedGetLocalTime
HookedGetSystemTime
HookedGetTickCount
HookedGetTickCount64
HookedKiUserExceptionDispatcher
HookedNativeCallInternal
HookedNtClose
HookedNtContinue
HookedNtCreateThread
HookedNtCreateThreadEx
HookedNtDuplicateObject
HookedNtGetContextThread
HookedNtQueryInformationProcess
HookedNtQueryObject
HookedNtQueryPerformanceCounter
HookedNtQuerySystemInformation
HookedNtQuerySystemTime
HookedNtResumeThread
HookedNtSetContextThread
HookedNtSetDebugFilterState
HookedNtSetInformationProcess
HookedNtSetInformationThread
HookedNtUserBlockInput
HookedNtUserBuildHwndList
HookedNtUserBuildHwndList_Eight
HookedNtUserFindWindowEx
HookedNtUserQueryWindow
HookedNtYieldExecution
HookedOutputDebugStringA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ModEngine-2.1.0.0-win64/modengine2/tools/scyllahide/InjectorCLIx64.exe
.exe windows:5 windows x64 arch:x64

ef494800d4d6b3d20ea9129a8886c068

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\projects\scyllahide\build\Release\x64\InjectorCLIx64.pdb

Imports

ntdll

RtlLookupFunctionEntry
RtlUnwindEx
RtlPcToFileHeader
RtlCaptureContext
RtlInitAnsiString
RtlEqualString
RtlGetVersion
LdrAccessResource
LdrFindResource_U
NtResumeThread
RtlFreeHeap
NtClose
RtlImageNtHeader
NtQueryInformationProcess
NtSuspendThread
NtQuerySystemInformation
RtlAllocateHeap
RtlVirtualUnwind
NtOpenThread
RtlUnwind

kernel32

GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
SetEndOfFile
ReadFile
WriteProcessMemory
CreateFileW
OpenProcess
CloseHandle
VirtualProtectEx
GetProcAddress
VirtualAllocEx
GetFileSize
GetCurrentProcessId
GetModuleHandleW
FreeLibrary
FreeEnvironmentStringsW
ReadProcessMemory
VirtualFree
VirtualAlloc
GetModuleHandleA
LoadLibraryA
GetCurrentProcess
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
IsWow64Process
LoadLibraryExW
lstrlenW
GetModuleFileNameW
GetPrivateProfileSectionNamesW
GetPrivateProfileStringW
WriteFile
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetTimeZoneInformation
SetFilePointerEx
GetFileSizeEx
GetProcessHeap
SetEnvironmentVariableW
SetStdHandle
VirtualFreeEx
WriteConsoleW
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
HeapSize
GetDateFormatW
GetLastError
QueryPerformanceCounter
MultiByteToWideChar
WideCharToMultiByte
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentThreadId
InitializeSListHead
TerminateProcess
RaiseException
ExitProcess
GetModuleHandleExW
GetStdHandle
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree

user32

MessageBoxA

advapi32

AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueW

psapi

EnumProcessModules
GetModuleFileNameExW

Sections

.text
Size: 426KB - Virtual size: 425KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ModEngine-2.1.0.0-win64/modengine2/tools/scyllahide/scylla_hide.ini
ModEngine-2.1.0.0-win64/modengine2_launcher.exe
.exe windows:6 windows x64 arch:x64

763e4b47c222bc4bb6ffd0c94be81e49

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

IsDebuggerPresent
CloseHandle
GetLastError
GetCurrentProcessId
GetCurrentThreadId
GetModuleFileNameW
GetProcAddress
LoadLibraryW
LocalFree
GetDynamicTimeZoneInformation
GetConsoleMode
WriteConsoleA
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
OutputDebugStringA
SetLastError
TerminateProcess
ResumeThread
WriteFile
VirtualAllocEx
VirtualProtectEx
VirtualQueryEx
ReadProcessMemory
WriteProcessMemory
IsWow64Process
MultiByteToWideChar
GetCurrentProcess
GetModuleHandleW
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
SetEnvironmentVariableW
GetCommandLineW
CreateProcessW
GetStdHandle
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
GetFileInformationByHandleEx
AreFileApisANSI
GetFullPathNameW
GetFileAttributesExW
FindFirstFileW
FindClose
CreateFileW
GetLocaleInfoEx
FormatMessageA
InitializeSListHead

shell32

CommandLineToArgvW

advapi32

RegCreateKeyExW
RegCloseKey
RegGetValueW

msvcp140

?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??Bios_base@std@@QEBA_NXZ
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?setf@ios_base@std@@QEAAHHH@Z
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Xbad_function_call@std@@YAXXZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$numpunct@D@std@@2V0locale@2@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?uncaught_exception@std@@YA_NXZ
?_Xbad_alloc@std@@YAXXZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
_Xtime_get_ticks
_Thrd_join
_Thrd_id
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
_Cnd_destroy_in_situ
_Cnd_signal
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAHH@Z
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??Bid@locale@std@@QEAA_KXZ
??0facet@locale@std@@IEAA@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??1facet@locale@std@@MEAA@XZ
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
?tolower@?$ctype@D@std@@QEBADD@Z

vcruntime140

_purecall
__std_terminate
__current_exception
__current_exception_context
memchr
memcmp
memcpy
memmove
memset
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__C_specific_handler

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_configure_narrow_argv
_initialize_narrow_environment
_register_thread_local_exe_atexit_callback
_initialize_onexit_table
_c_exit
_register_onexit_function
__p___argv
_invalid_parameter_noinfo_noreturn
_errno
_cexit
_seh_filter_exe
_set_app_type
__p___argc
_get_initial_narrow_environment
_exit
exit
_initterm_e
_initterm
terminate

api-ms-win-crt-string-l1-1-0

wcslen
isdigit
wcscpy_s
strlen

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
_set_new_mode
malloc

api-ms-win-crt-utility-l1-1-0

abs

api-ms-win-crt-convert-l1-1-0

strtoll
strtold

api-ms-win-crt-environment-l1-1-0

getenv
_dupenv_s

api-ms-win-crt-math-l1-1-0

floor
_dsign
ceil
_fdtest
__setusermatherr
_dtest
ceilf
_ldtest

api-ms-win-crt-stdio-l1-1-0

_get_stream_buffer_pointers
fclose
setvbuf
fflush
fread
ungetc
__stdio_common_vfprintf
__acrt_iob_func
fgetc
__stdio_common_vsprintf_s
fgetpos
fputc
fwrite
_fseeki64
__p__commode
__stdio_common_vsprintf
fsetpos
__stdio_common_vsnprintf_s
_set_fmode

api-ms-win-crt-filesystem-l1-1-0

_unlock_file
_lock_file

api-ms-win-crt-time-l1-1-0

_gmtime64_s
_localtime64_s
strftime

api-ms-win-crt-locale-l1-1-0

_configthreadlocale
localeconv
___lc_codepage_func

Sections

.text
Size: 380KB - Virtual size: 379KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourd
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a3334a4c6ae84c95b970e89aa0e15a8f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

Exports

Exports

Sections

.text Size: 180KB - Virtual size: 180KB

.rdata Size: 35KB - Virtual size: 35KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 12KB - Virtual size: 11KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 952B

3b1e23108c22f33810874028c817da87

Headers

DLL Characteristics

File Characteristics

Imports

lua

kernel32

user32

gdi32

advapi32

ntdll

msvcp140

msvcp140_atomic_wait

concrt140

d3dcompiler_47

imm32

vcruntime140

vcruntime140_1

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-utility-l1-1-0

Exports

Exports

Sections

.text Size: 715KB - Virtual size: 715KB

.rdata Size: 167KB - Virtual size: 167KB

.data Size: 25KB - Virtual size: 31KB

.pdata Size: 33KB - Virtual size: 33KB

.detourc Size: 8KB - Virtual size: 8KB

.detourd Size: 512B - Virtual size: 24B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 6KB - Virtual size: 5KB

6e1b56f9970c3b6eec05cc58fcbe20c5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

user32

.text
Size: 180KB - Virtual size: 180KB

.rdata
Size: 35KB - Virtual size: 35KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 952B

.text
Size: 715KB - Virtual size: 715KB

.rdata
Size: 167KB - Virtual size: 167KB

.data
Size: 25KB - Virtual size: 31KB

.pdata
Size: 33KB - Virtual size: 33KB

.detourc
Size: 8KB - Virtual size: 8KB

.detourd
Size: 512B - Virtual size: 24B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 6KB - Virtual size: 5KB

.text
Size: 392KB - Virtual size: 392KB

.rdata
Size: 140KB - Virtual size: 139KB

.data
Size: 10KB - Virtual size: 11KB

.pdata
Size: 22KB - Virtual size: 21KB

CPADinfo
Size: 512B - Virtual size: 56B

.reloc
Size: 2KB - Virtual size: 2KB

.text
Size: 53KB - Virtual size: 53KB

.rdata
Size: 27KB - Virtual size: 27KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 108B

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 7KB

.pdata
Size: 1024B - Virtual size: 528B

.reloc
Size: 512B - Virtual size: 96B