��z�^����\�}0��8!E��� o߇U� ��,g,t�2�lV�TJ pY���[��17:x�͐x�&����/ HY�����y�������3������u�^I�W�Q�Wg^&��l�D��Z��V��Aģ�a'��R����(�Y@)+n���:�p2l�E�+X.�aŐ��V���)����م2>�G{n�[�C��P�(�������;*T&g?Դ��)�ɳ�5����!�fo���'ٰ�&��Ooc���Ē|0����>�u�GU���Z�y|]#㽩K��"-Q��n�� �}%L--��2EBcD_�$!3�N�Ȍp~ݱ�/~�}�@�U��Du�1���L�Ϳ�4�#��!@�3u�Q��"]���O�2YJ�:����m��kS��O8� w�7w������J��%dЦP0����AF$��.�zK'Oe��7;���dV�-���4D�q�@Z�1ɲ~j�υ�&Hl���L�(r�I����聑(>+q��y��A#�Qdܗ �D;xX��cI�C�ě"]?,}���e�Ğ6��=�����eA��Jk�d�D��'���h p��@:�䣴K�I1��w��><;�,�˫:������H|Âs�9/�m�ҽ��5��6$���W��#Aa��R tSx�m����L�zI��F��&�sR���8rd��]������t"PȜ�K*/o��NH�bA��Lk>;��Yp�&{���2QU�Ы2T.�T��U��`57��n��x'ϸt�t�zI��R�M4adb,=�*���r�Y�\ � =-�;�d�U�#���(��>J8�6rO*���0X��!���n�ا(K��[�t�wџ�d\�!Q����_��X Q'���*��Z��s2���Z{�M����&� D�`�&�Z���\T�`��5a �I ;L��ij�fb��êD�� �P۰3�.ڌX~��i�o�7fކ(�Ϸ���1��I��q�t��r��7e5*O��{�3�H�YM�����Q�?uC�@��Ci2�ɳ��Y)`���;G�=��!���{�B{����%Js=�����j�) !��(I�Q�����y*v�a��m��o�bS}*s��;�e��X���Y���lTA#��m ����Qc�v���hw��iX����T�I�϶th������x]1�ݵ�w��H#h����x�e�t�qX�����4��$nK����}��I�4ur��D8���2�QA?�hQ�r R!�E7&U� �KZ��x+�`vd�B1��,��|2UX�js�ߖ�łW>��b�'M����^n\b*`��=��o�1�ڼ�i��4ܦ�Oy�\�P攵��m*A<Y!\b�4F�m��ߺ��G��/wQѨVC��!�_]��2S�k�s�(�/2�Rq�^L+/���P���� R�X����\`X�$N� n($�IS1�>�k�i�\9&�ݩ����(���ia{(�A@`<?_#�k��������V�� H��l��I�pj�<����J�G��f��%?em���{~�T�>��۲��^�::G<}����� �(*ɧ��$/Xk"���";���j�L�nD[9[����;;��.���5���d*u�Ơ�ik���X��7����g��\�ꚣ�a����@�˅��9ؖ��� �+���T(5/e�w�p��9M#�?k ���1��fG=�/�,q��O�=�z4h1�v����� ��s�Ov��<��Ǡ+ǃwJ���̫/-.��:��@����,ީ��*T�����A��� ������f����33:﨨Z_@b�� 4�u���)N�r2q�<�i3Jv�����U!�n�y$�<���/�R��n���ܡ�cYL�.�$o�c>�ch%�b6���|�M�U�%����G8�7`G�u�{�Z���6���:�7B}�^L�wa�W�n�teZ�>">ʝ*��F|7�0��y[��{�����ŧ ۄ\��]!$�3��t[͜���&{Ev<��g;�8���.��k�G�\�JP��7�7��s������$���3�u�A?������i`x��I�[�3���9��Cr�g�I�96���bL�d~�\�Ќ�����x���L�ܔ��4���9�A_�X.��5A�|j��>XR�2���!Ż�����7��;� .]�t�f�w]��_��W��+d��+;ynF�*^��CZ����g�g�+�H-G�����x�CՇS4Qh�-�d,����&!���� T���w��FJ.�b:\e���(W�e�pF�ӱ+b���,>����z�^@�PRdes�:�. ���\��Js�]����`�����@.����Ѡ�h����9N�yx����&y�����ɧ��9�9+p;;�� �ai����Q�i�l���~ z$����Nm�I˄��D�*@�����c����ը�,';���\z.�C��s���k�Hp�t:Q \�g�$b�t����Ĕ��|a��5d�&+>h&�5%��ԑ��[=m_*�Ø�Z�)3ڞAr���Uw=����.�)¨_e:�:���&9��Z��|������@8��S�5�?1���g��������n��w����coX�3_��ו��t��ΗFϐU�Q"�T%8p7��0|��� ���,���j]YҡC��(���H |�߲�MB}��QY����E���u�nx-_�3w��Bwh[�s) �A��n��K\��H����_�=��@��UD��`��u�~$DZ�[�88'M�X��m �r�;~�7�����S @s�̉?�-��"a��O�IPB��}u�� [���q�Gww�6�0��>��a;U�����K�(^���i(��!|����v5��p4� �+���D%��m��#�*��f���k�0�Md��~�7 �J�=�e]���Rz�<����^ ���9�8�'�99�Ļ��e)5���W:S��Pgxn�"�#E�a�4L���� �:�P�3�Lx~�n�e2�X��"1�C��K����u֙�b�c��{�;����s�H�Y���(�����ʭ��e4ٌ�`�?�A+~��W�O�tl!�/����L�C�
Static task
static1
Behavioral task
behavioral1
Sample
gamesensepub-h4xrOx-patch-3.zip
Resource
win10v2004-20240802-en
General
-
Target
gamesensepub-h4xrOx-patch-3.zip
-
Size
38.6MB
-
MD5
7a79bf1631f0d2630ed30917a8398329
-
SHA1
bf0760205e9ea697dfedb5975d77f9334378d43d
-
SHA256
a4eb26b96bde4dcbfc060bf20b3043ccce2ec1369c01dab4774197ebb03e96c9
-
SHA512
01bfbb240a9d56d7b16ba3fffc08ecb47614a18c0c3bd152e52767d0c57a515551efc6886fa8a70f092d3cf504a43c8b0504e614cca2aedfdaa96eaecfd14c7d
-
SSDEEP
786432:tesUUqfVeMkLgrMVPAFRTv8NsO2GYeDVm4Q/f4aUVUPC86jX:t9/VgrM+Fti2sIWGPC867
Malware Config
Signatures
-
Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/gamesensepub-h4xrOx-patch-3/Loader/uowmnu.exe unpack001/gamesensepub-h4xrOx-patch-3/ReflectiveLoader.exe unpack003/ReflectiveLoader.exe unpack001/gamesensepub-h4xrOx-patch-3/testingdll.dll
Files
-
gamesensepub-h4xrOx-patch-3.zip.zip
-
gamesensepub-h4xrOx-patch-3/Loader/OffClick.png.png
-
gamesensepub-h4xrOx-patch-3/Loader/OnClick.png.png
-
gamesensepub-h4xrOx-patch-3/Loader/uowmnu.exe.exe windows:6 windows x64 arch:x64
262b9605deafdb994970c30f8ab867f1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
msvcrt
wcstoul
ntdll
RtlLookupFunctionEntry
advapi32
QueryAllTracesW
RegQueryValueExA
OpenSCManagerW
EnumServicesStatusExW
OpenServiceW
QueryServiceConfigW
CloseServiceHandle
kernel32
GetFileType
LoadLibraryA
LocalAlloc
GetCurrentProcess
GetCurrentThread
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
GetLastError
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SetWindowTextW
CharUpperBuffW
ole32
CoInitializeEx
comctl32
ord412
wtsapi32
WTSSendMessageW
Exports
Exports
Sections
.text Size: - Virtual size: 418KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 184KB - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yctjje Size: - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.smezy Size: - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ffzex Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ichnc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jmmsdp Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
gamesensepub-h4xrOx-patch-3/README.md
-
gamesensepub-h4xrOx-patch-3/Rainbowbar.png.png
-
gamesensepub-h4xrOx-patch-3/ReflectiveLoader.exe.exe windows:6 windows x64 arch:x64
262b9605deafdb994970c30f8ab867f1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
msvcrt
wcstoul
ntdll
RtlLookupFunctionEntry
advapi32
QueryAllTracesW
RegQueryValueExA
OpenSCManagerW
EnumServicesStatusExW
OpenServiceW
QueryServiceConfigW
CloseServiceHandle
kernel32
GetFileType
LoadLibraryA
LocalAlloc
GetCurrentProcess
GetCurrentThread
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
GetLastError
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SetWindowTextW
CharUpperBuffW
ole32
CoInitializeEx
comctl32
ord412
wtsapi32
WTSSendMessageW
Exports
Exports
��z�^����\�}0��8!E��� o߇U� ��,g,t�2�lV�TJ pY���[��17:x�͐x�&����/ HY�����y�������3������u�^I�W�Q�Wg^&��l�D��Z��V��Aģ�a'��R����(�Y@)+n���:�p2l�E�+X.�aŐ��V���)����م2>�G{n�[�C��P�(�������;*T&g?Դ��)�ɳ�5����!�fo���'ٰ�&��Ooc���Ē|0����>�u�GU���Z�y|]#㽩K��"-Q��n�� �}%L--��2EBcD_�$!3�N�Ȍp~ݱ�/~�}�@�U��Du�1���L�Ϳ�4�#��!@�3u�Q��"]���O�2YJ�:����m��kS��O8� w�7w������J��%dЦP0����AF$��.�zK'Oe��7;���dV�-���4D�q�@Z�1ɲ~j�υ�&Hl���L�(r�I����聑(>+q��y��A#�Qdܗ �D;xX��cI�C�ě"]?,}���e�Ğ6��=�����eA��Jk�d�D��'���h p��@:�䣴K�I1��w��><;�,�˫:������H|Âs�9/�m�ҽ��5��6$���W��#Aa��R tSx�m����L�zI��F��&�sR���8rd��]������t"PȜ�K*/o��NH�bA��Lk>;��Yp�&{���2QU�Ы2T.�T��U��`57��n��x'ϸt�t�zI��R�M4adb,=�*���r�Y�\ � =-�;�d�U�#���(��>J8�6rO*���0X��!���n�ا(K��[�t�wџ�d\�!Q����_��X Q'���*��Z��s2���Z{�M����&� D�`�&�Z���\T�`��5a �I ;L��ij�fb��êD�� �P۰3�.ڌX~��i�o�7fކ(�Ϸ���1��I��q�t��r��7e5*O��{�3�H�YM�����Q�?uC�@��Ci2�ɳ��Y)`���;G�=��!���{�B{����%Js=�����j�) !��(I�Q�����y*v�a��m��o�bS}*s��;�e��X���Y���lTA#��m ����Qc�v���hw��iX����T�I�϶th������x]1�ݵ�w��H#h����x�e�t�qX�����4��$nK����}��I�4ur��D8���2�QA?�hQ�r R!�E7&U� �KZ��x+�`vd�B1��,��|2UX�js�ߖ�łW>��b�'M����^n\b*`��=��o�1�ڼ�i��4ܦ�Oy�\�P攵��m*A<Y!\b�4F�m��ߺ��G��/wQѨVC��!�_]��2S�k�s�(�/2�Rq�^L+/���P���� R�X����\`X�$N� n($�IS1�>�k�i�\9&�ݩ����(���ia{(�A@`<?_#�k��������V�� H��l��I�pj�<����J�G��f��%?em���{~�T�>��۲��^�::G<}����� �(*ɧ��$/Xk"���";���j�L�nD[9[����;;��.���5���d*u�Ơ�ik���X��7����g��\�ꚣ�a����@�˅��9ؖ��� �+���T(5/e�w�p��9M#�?k ���1��fG=�/�,q��O�=�z4h1�v����� ��s�Ov��<��Ǡ+ǃwJ���̫/-.��:��@����,ީ��*T�����A��� ������f����33:﨨Z_@b�� 4�u���)N�r2q�<�i3Jv�����U!�n�y$�<���/�R��n���ܡ�cYL�.�$o�c>�ch%�b6���|�M�U�%����G8�7`G�u�{�Z���6���:�7B}�^L�wa�W�n�teZ�>">ʝ*��F|7�0��y[��{�����ŧ ۄ\��]!$�3��t[͜���&{Ev<��g;�8���.��k�G�\�JP��7�7��s������$���3�u�A?������i`x��I�[�3���9��Cr�g�I�96���bL�d~�\�Ќ�����x���L�ܔ��4���9�A_�X.��5A�|j��>XR�2���!Ż�����7��;� .]�t�f�w]��_��W��+d��+;ynF�*^��CZ����g�g�+�H-G�����x�CՇS4Qh�-�d,����&!���� T���w��FJ.�b:\e���(W�e�pF�ӱ+b���,>����z�^@�PRdes�:�. ���\��Js�]����`�����@.����Ѡ�h����9N�yx����&y�����ɧ��9�9+p;;�� �ai����Q�i�l���~ z$����Nm�I˄��D�*@�����c����ը�,';���\z.�C��s���k�Hp�t:Q \�g�$b�t����Ĕ��|a��5d�&+>h&�5%��ԑ��[=m_*�Ø�Z�)3ڞAr���Uw=����.�)¨_e:�:���&9��Z��|������@8��S�5�?1���g��������n��w����coX�3_��ו��t��ΗFϐU�Q"�T%8p7��0|��� ���,���j]YҡC��(���H |�߲�MB}��QY����E���u�nx-_�3w��Bwh[�s) �A��n��K\��H����_�=��@��UD��`��u�~$DZ�[�88'M�X��m �r�;~�7�����S @s�̉?�-��"a��O�IPB��}u�� [���q�Gww�6�0��>��a;U�����K�(^���i(��!|����v5��p4� �+���D%��m��#�*��f���k�0�Md��~�7 �J�=�e]���Rz�<����^ ���9�8�'�99�Ļ��e)5���W:S��Pgxn�"�#E�a�4L���� �:�P�3�Lx~�n�e2�X��"1�C��K����u֙�b�c��{�;����s�H�Y���(�����ʭ��e4ٌ�`�?�A+~��W�O�tl!�/����L�C�
Sections
.text Size: - Virtual size: 418KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 184KB - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yctjje Size: - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.smezy Size: - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ffzex Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ichnc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jmmsdp Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
gamesensepub-h4xrOx-patch-3/Testingdll.cpp
-
gamesensepub-h4xrOx-patch-3/Testingdll.def
-
gamesensepub-h4xrOx-patch-3/Testingdll.h
-
gamesensepub-h4xrOx-patch-3/Testingdll_InitData.cpp
-
gamesensepub-h4xrOx-patch-3/Testingdll_data.cpp
-
gamesensepub-h4xrOx-patch-3/Testingdll_data.h
-
gamesensepub-h4xrOx-patch-3/Testingdll_rdata.cpp
-
gamesensepub-h4xrOx-patch-3/Testingdll_reloc.cpp
-
gamesensepub-h4xrOx-patch-3/Testingdll_reloc.h
-
gamesensepub-h4xrOx-patch-3/Testingdll_retard0.cpp
-
gamesensepub-h4xrOx-patch-3/Testingdll_retard0.h
-
gamesensepub-h4xrOx-patch-3/Testingdll_retard1.7z.7z
-
Testingdll_retard1.cpp
-
gamesensepub-h4xrOx-patch-3/Testingdll_rsrc.cpp
-
gamesensepub-h4xrOx-patch-3/Testingdll_rsrc.h
-
gamesensepub-h4xrOx-patch-3/Testingdll_text.cpp
-
gamesensepub-h4xrOx-patch-3/Testingdll_text.h
-
gamesensepub-h4xrOx-patch-3/Testingdll_vmpdmp.cpp
-
gamesensepub-h4xrOx-patch-3/aimbot.cpp
-
gamesensepub-h4xrOx-patch-3/aimbot.h
-
gamesensepub-h4xrOx-patch-3/commit a50d9b3 on Feb 11Loader.7z.7z
-
ReflectiveLoader.exe.exe windows:6 windows x64 arch:x64
262b9605deafdb994970c30f8ab867f1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
msvcrt
wcstoul
ntdll
RtlLookupFunctionEntry
advapi32
QueryAllTracesW
RegQueryValueExA
OpenSCManagerW
EnumServicesStatusExW
OpenServiceW
QueryServiceConfigW
CloseServiceHandle
kernel32
GetFileType
LoadLibraryA
LocalAlloc
GetCurrentProcess
GetCurrentThread
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
GetLastError
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SetWindowTextW
CharUpperBuffW
ole32
CoInitializeEx
comctl32
ord412
wtsapi32
WTSSendMessageW
Exports
Exports
��z�^����\�}0��8!E��� o߇U� ��,g,t�2�lV�TJ pY���[��17:x�͐x�&����/ HY�����y�������3������u�^I�W�Q�Wg^&��l�D��Z��V��Aģ�a'��R����(�Y@)+n���:�p2l�E�+X.�aŐ��V���)����م2>�G{n�[�C��P�(�������;*T&g?Դ��)�ɳ�5����!�fo���'ٰ�&��Ooc���Ē|0����>�u�GU���Z�y|]#㽩K��"-Q��n�� �}%L--��2EBcD_�$!3�N�Ȍp~ݱ�/~�}�@�U��Du�1���L�Ϳ�4�#��!@�3u�Q��"]���O�2YJ�:����m��kS��O8� w�7w������J��%dЦP0����AF$��.�zK'Oe��7;���dV�-���4D�q�@Z�1ɲ~j�υ�&Hl���L�(r�I����聑(>+q��y��A#�Qdܗ �D;xX��cI�C�ě"]?,}���e�Ğ6��=�����eA��Jk�d�D��'���h p��@:�䣴K�I1��w��><;�,�˫:������H|Âs�9/�m�ҽ��5��6$���W��#Aa��R tSx�m����L�zI��F��&�sR���8rd��]������t"PȜ�K*/o��NH�bA��Lk>;��Yp�&{���2QU�Ы2T.�T��U��`57��n��x'ϸt�t�zI��R�M4adb,=�*���r�Y�\ � =-�;�d�U�#���(��>J8�6rO*���0X��!���n�ا(K��[�t�wџ�d\�!Q����_��X Q'���*��Z��s2���Z{�M����&� D�`�&�Z���\T�`��5a �I ;L��ij�fb��êD�� �P۰3�.ڌX~��i�o�7fކ(�Ϸ���1��I��q�t��r��7e5*O��{�3�H�YM�����Q�?uC�@��Ci2�ɳ��Y)`���;G�=��!���{�B{����%Js=�����j�) !��(I�Q�����y*v�a��m��o�bS}*s��;�e��X���Y���lTA#��m ����Qc�v���hw��iX����T�I�϶th������x]1�ݵ�w��H#h����x�e�t�qX�����4��$nK����}��I�4ur��D8���2�QA?�hQ�r R!�E7&U� �KZ��x+�`vd�B1��,��|2UX�js�ߖ�łW>��b�'M����^n\b*`��=��o�1�ڼ�i��4ܦ�Oy�\�P攵��m*A<Y!\b�4F�m��ߺ��G��/wQѨVC��!�_]��2S�k�s�(�/2�Rq�^L+/���P���� R�X����\`X�$N� n($�IS1�>�k�i�\9&�ݩ����(���ia{(�A@`<?_#�k��������V�� H��l��I�pj�<����J�G��f��%?em���{~�T�>��۲��^�::G<}����� �(*ɧ��$/Xk"���";���j�L�nD[9[����;;��.���5���d*u�Ơ�ik���X��7����g��\�ꚣ�a����@�˅��9ؖ��� �+���T(5/e�w�p��9M#�?k ���1��fG=�/�,q��O�=�z4h1�v����� ��s�Ov��<��Ǡ+ǃwJ���̫/-.��:��@����,ީ��*T�����A��� ������f����33:﨨Z_@b�� 4�u���)N�r2q�<�i3Jv�����U!�n�y$�<���/�R��n���ܡ�cYL�.�$o�c>�ch%�b6���|�M�U�%����G8�7`G�u�{�Z���6���:�7B}�^L�wa�W�n�teZ�>">ʝ*��F|7�0��y[��{�����ŧ ۄ\��]!$�3��t[͜���&{Ev<��g;�8���.��k�G�\�JP��7�7��s������$���3�u�A?������i`x��I�[�3���9��Cr�g�I�96���bL�d~�\�Ќ�����x���L�ܔ��4���9�A_�X.��5A�|j��>XR�2���!Ż�����7��;� .]�t�f�w]��_��W��+d��+;ynF�*^��CZ����g�g�+�H-G�����x�CՇS4Qh�-�d,����&!���� T���w��FJ.�b:\e���(W�e�pF�ӱ+b���,>����z�^@�PRdes�:�. ���\��Js�]����`�����@.����Ѡ�h����9N�yx����&y�����ɧ��9�9+p;;�� �ai����Q�i�l���~ z$����Nm�I˄��D�*@�����c����ը�,';���\z.�C��s���k�Hp�t:Q \�g�$b�t����Ĕ��|a��5d�&+>h&�5%��ԑ��[=m_*�Ø�Z�)3ڞAr���Uw=����.�)¨_e:�:���&9��Z��|������@8��S�5�?1���g��������n��w����coX�3_��ו��t��ΗFϐU�Q"�T%8p7��0|��� ���,���j]YҡC��(���H |�߲�MB}��QY����E���u�nx-_�3w��Bwh[�s) �A��n��K\��H����_�=��@��UD��`��u�~$DZ�[�88'M�X��m �r�;~�7�����S @s�̉?�-��"a��O�IPB��}u�� [���q�Gww�6�0��>��a;U�����K�(^���i(��!|����v5��p4� �+���D%��m��#�*��f���k�0�Md��~�7 �J�=�e]���Rz�<����^ ���9�8�'�99�Ļ��e)5���W:S��Pgxn�"�#E�a�4L���� �:�P�3�Lx~�n�e2�X��"1�C��K����u֙�b�c��{�;����s�H�Y���(�����ʭ��e4ٌ�`�?�A+~��W�O�tl!�/����L�C�
Sections
.text Size: - Virtual size: 418KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 184KB - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yctjje Size: - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.smezy Size: - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ffzex Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ichnc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jmmsdp Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
gamesensepub-h4xrOx-patch-3/commit_feb11.txt
-
gamesensepub-h4xrOx-patch-3/lagcomp.cpp
-
gamesensepub-h4xrOx-patch-3/lagcomp.h
-
gamesensepub-h4xrOx-patch-3/resolver.cpp
-
gamesensepub-h4xrOx-patch-3/resolver.h
-
gamesensepub-h4xrOx-patch-3/skins.cpp
-
gamesensepub-h4xrOx-patch-3/skins.h
-
gamesensepub-h4xrOx-patch-3/testingdll.dll.exe windows:6 windows x86 arch:x86
d6348b22d141747b6a0c59d7ae1fb153
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetCurrentProcess
LocalAlloc
GetCurrentProcess
GetCurrentThread
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
GetLastError
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
ShowWindow
CharUpperBuffW
msvcp140
?_Xout_of_range@std@@YAXPBD@Z
wininet
InternetOpenA
vcruntime140
memcpy
api-ms-win-crt-runtime-l1-1-0
_c_exit
api-ms-win-crt-utility-l1-1-0
rand
api-ms-win-crt-stdio-l1-1-0
fclose
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-heap-l1-1-0
malloc
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
wtsapi32
WTSSendMessageW
advapi32
RegQueryValueExA
OpenSCManagerW
EnumServicesStatusExW
OpenServiceW
QueryServiceConfigW
CloseServiceHandle
Exports
Exports
�N���ۉ(�9W��40��H�Q}E�{�a�ҷu=�W\7�0�`����K?���I���V������7�R���zET�5�߫8�;�,G�����U-��hlH����]fSf�X��Ђ��I��6�hJ��ݤ����G����] i��-�05o���5��Euly�t��B�t@��J����5m�g}���-0�������$Æ��H8��ф�M������n����4����L���B�E�R�`F��~�YnE�g����N�������%g!�$�*X��4h�F� ��T����4��ښ~$����j_��ց؇�(d]�������Cˤ�Ba�P��zJ 4�穠�HP�fߥ�`M��&��2,���Y�I/E�ЁX��)z�ۿ����x�t������M�`����5$�Yw���^�.����m��D�:ڒ3��{������J�(�6��|�U����1�����s��_p��J0c��h܀t(�Q���=Gˢ���P���-�o�Kj��y���:$��:�L�u\��V"^����t�\L�H5|�U��:��zɧl�A�١__�K��Bν���a�f���n����C_�%?�l������i����%C�.%}f a#h`,O��8�C�M灊=�"�g杁�c�T�������&�A}��_>I~����L�Z.���O��&�#Q1sn^�ˁ��ϲ%\wn����[|��9�������;�����������gcvo٥�YA#jϽ� � ��j@�-2�;H�Y���$v7�ƞ��s�J�t�Bzit� ��,�F0�A�W�!�ct���; �~��0�ċ� ��3�K�א�/�������`�њ٪���.:�=����5a~������ʡV�~���Vw�j%�7���5���r� ���-�B��1�Xa�q<�@�۩�<����h�y�d݇�܃�~�iN���W-�2���*ƕ�����ݻ�N�gi'��U'��Q��������Q����/P>Ƭp���DƸ�8b�b!35am�:T��x߈qȇHv)y�T����^kzg��v� ��[}L~�!�n�o� I�b,<�9�M��Р(V��j����Y�L0Pv3G xE�̆�ˑ4��6$ޘ�{�]:f��f�[J���Vu�~_ĺg{�_�T���s�4UΌ�vg��=�r.�s��BfN|K��rT>�z� o>���Y���(�F{�$(�����`.v�,J�P���N�:h�Mժ�̎\�˚�dR@�� ;�n�.�������4Nt)U��k������9Ѩe8�� �OE�w?2�+�a(H���b¼��÷��!,����;�9��"_�勵+�������������x#1���ިI�qQ����\���Y��M����������֓h��3h�{�jg��b[�X�]�E�����u<$L=�j��"�p���`Fd7�bt��I:�U)ٸ�A���{����d���uæ%F�#4Z찆��lP��QP�S<z����E}a��u36Y�x��?�����G��7�;����t}:�y�72���7C�?ֱ�����������(|7R�h������G�+����!#ֽ�?U�ET483���� ���Й�5CQ,�y9�>-�d�Zm!� .�{'9��!�5�2����x���4NRI��x�d8P+Y�}���V8��2�qdX 7t��E���o�-b��q��.�����N�� �VL"�~ �p(w{�4��h_w�Ň��a]A5X- ��S��CͰ:��q�{Z0t����}�[1��p�4��"�h��Mڞ5�<� ��k���nx��dzaD�a��O6̓�/g���Rr���<�]"�J ��^S��JV.���G_�����4N��B�>�t�q�Y�y9]������� K���K����^��V��ή��3�#�N�`*̆��>�|o ����/�Sf�ӽ5ˌ�rc��m�w�#�7�������J���X��_���u[z���t�.mȼ+!�Ϙ��m�M��{k������s��KF�Y�"�mVq�ŷ�~=R�����g�'?�����&�Lv���nz�����@5��έ��k�_�\SF�Ʈ�JeDC' i�����H�V�;�i5V7�i� vވ�k���%LQZ*'o���J-t�2�>"����u\N�]f&KZ�*H ��-�b�_*��E�9�w�g�El[T�+4rբ���/��2Od�7��f�փ�?�<}��qqe 0���>3:�+T�+���+gz� ��x����8g�O7�5��U���?e��A�"���>������!��:A��~8���I��c� �c��Q<e�BH��t���:8i4R�+p��V�BJ�|�����Ѝi��bD�J#��a=$������7��W��Y)�:�Vׇ�d�n:E ,���x�DT��Tc�Eb�DNbCj�N�/�T�U��u� 滃�q>*��T�1���,�B>��%7'�R�XԍLƧ`�N�ȶ�"�m�l]NI`�J @E�a);��g�Z�V��q��GLBz�gV #��D����=<���C3$��hA�`7�J0�s� �`���D|� IۿܟmV���_Û ���0k�?��+WH�䣲�/@�n��Ƌ3�7�Uo�'�_0�h�^����J�U�a���*!S$<�hc2<�O"����+G�N&}x�(K��� �d���Sv���5�����[.����T�*7�����_qt �Vg���bA���d�.��{LǶ��Ҭ�hΗ���/))1Z�Z{����(J[�%˄��f ��"�!�j�%���xȎ�}�)���� }�aP0�d�t�1 v�{]�jWV���Z��=; jh����'GJO�̣���.a$jUc�|��(���y�$(8��@��*�������.jj=�{�F���>��N�L�/�����/�{�~���:5��B��-� #x�(��hI4./Ʒ猂f�ؠ�.�\���Q��N�����Ox��A�)5ypКiإ�D�%G�Ș�ݴ�8{\�W>�A<��J~ŗR�D`$AH]Ӻ �S��1�4�7~e
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.retard0 Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.retard1 Size: 5.6MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 304B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmpdmp Size: 512B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ