Fortnite Cheat[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Fortnite Cheat.zip
Size

65.9MB
MD5

7d7348011af396afddb8a2de3f7c8894
SHA1

4c15674c157cf583f658a401bc6e30c3c1bccd09
SHA256

f1d265935f4dbaa9750357c73455a089a5b2a1a161c38444811b0f37ba74342e
SHA512

d89e3b78d5e8230470cbca3262e7b022bdc514bc48b3e12255856639e79fe5e628ce0fbe61b14c99445a6126ed5362a5bb9d043412627addfe2a136b55c09f3e
SSDEEP

1572864:Gj/J7p/LPpxmngaMZmfaU80A7it1lK6VnfXabquvt17K8ngSg5QpVC:SCCmfa137qHfo5l1Gsw5Uo

Score

3^/10

Malware Config

Signatures

Unsigned PE 11 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Fortnite Cheat/Fortnite Hack.exe
unpack001/Fortnite Cheat/cfg/AuthFWSnapin.dll
unpack001/Fortnite Cheat/cfg/InputService.dll
unpack001/Fortnite Cheat/cfg/Windows.AI.MachineLearning.dll
unpack001/Fortnite Cheat/cfg/cdp.dll
unpack001/Fortnite Cheat/cfg/jscript9.dll
unpack001/Fortnite Cheat/cfg/prm0009.dll
unpack001/Fortnite Cheat/cfg/wininet.dll
unpack001/Fortnite Cheat/dbgeng.dll
unpack001/Fortnite Cheat/prm0019.dll
unpack001/Fortnite Cheat/wmp.dll

Files

Fortnite Cheat.zip
.zip

Password: 3636
Fortnite Cheat/Fortnite Hack.exe
.exe windows:6 windows x86 arch:x86

Password: 3636

b907912f27a3d3e7f087f7a311c4b628

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
OffsetRect

kernel32

CreateFileW
HeapSize
SetStdHandle
GetProcessHeap
WaitForSingleObject
ExitProcess
CreateThread
VirtualAlloc
GetConsoleWindow
RaiseException
InitOnceBeginInitialize
InitOnceComplete
CloseHandle
GetCurrentThreadId
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
WideCharToMultiByte
GetLastError
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
GetModuleHandleExW
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
QueryPerformanceCounter
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
GetStringTypeW
GetCPInfo
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
InitializeSListHead
SetEnvironmentVariableW
RtlUnwind
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetModuleFileNameW
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
ReadConsoleW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 303KB - Virtual size: 307KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fortnite Cheat/amdadlx64.dll
.dll windows:6 windows x64 arch:x64

Password: 3636

5ecbb8bdacdf7391d9965a8154aba02a

Code Sign

33:00:00:01:09:5e:de:a2:12:7e:92:81:cc:00:00:00:00:01:09
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

14/09/2023, 19:14

Not After

04/09/2024, 19:14

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:09:5e:de:a2:12:7e:92:81:cc:00:00:00:00:01:09
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

14/09/2023, 19:14

Not After

04/09/2024, 19:14

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:bf:8a:a0:db:a4:f2:e1:35:79:c9:d2:8f:c6:09:5e:aa:a8:80:a8:16:23:34:9d:31:5e:b7:46:2e:cd:44:19
Signer

Actual PE Digest

33:bf:8a:a0:db:a4:f2:e1:35:79:c9:d2:8f:c6:09:5e:aa:a8:80:a8:16:23:34:9d:31:5e:b7:46:2e:cd:44:19

Digest Algorithm

sha256

PE Digest Matches

true

33:bf:8a:a0:db:a4:f2:e1:35:79:c9:d2:8f:c6:09:5e:aa:a8:80:a8:16:23:34:9d:31:5e:b7:46:2e:cd:44:19
Signer

Actual PE Digest

33:bf:8a:a0:db:a4:f2:e1:35:79:c9:d2:8f:c6:09:5e:aa:a8:80:a8:16:23:34:9d:31:5e:b7:46:2e:cd:44:19

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\constructicon\builds\gfx\six\24.10\drivers\ADLX\Build\VS2019\x64\Release\amdadlx64.pdb

Imports

pdh

PdhCloseQuery
PdhAddEnglishCounterW
PdhGetFormattedCounterValue
PdhOpenQueryW
PdhCollectQueryData

setupapi

SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdW
SetupDiGetClassDevsW

kernel32

OutputDebugStringW
GetLocalTime
GetCurrentProcessId
CreateSemaphoreW
Process32First
GetModuleHandleA
OpenProcess
CreateToolhelp32Snapshot
QueryFullProcessImageNameA
Process32Next
GetConsoleWindow
OutputDebugStringA
MultiByteToWideChar
LocalFree
SystemTimeToFileTime
GetSystemTime
FormatMessageA
GetCurrentProcess
RtlCaptureStackBackTrace
GetModuleHandleExA
K32GetModuleFileNameExA
K32GetModuleInformation
K32EnumProcessModules
lstrlenA
GetEnvironmentVariableA
GetNativeSystemInfo
SetEnvironmentVariableA
FindFirstFileA
FindNextFileA
LoadLibraryA
lstrcmpW
CreateFileW
ReadFile
FindClose
WriteFile
GetFileAttributesW
QueryPerformanceCounter
CreateEventA
RemoveDirectoryW
GetSystemTimeAsFileTime
InitializeSListHead
InitOnceComplete
InitOnceBeginInitialize
FindNextFileW
FindFirstFileW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
K32GetPerformanceInfo
GetSystemInfo
Sleep
GetTickCount
SetEnvironmentVariableW
GetTickCount64
ResetEvent
CloseHandle
SetEvent
GetLastError
DeleteFileW
CreateEventW
GetCurrentThreadId
WaitForMultipleObjects
GetModuleHandleExW
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
ReleaseSemaphore
LoadLibraryExW
FreeLibrary
GetProcAddress
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleW
WaitForSingleObjectEx
SetFilePointer

user32

GetSystemMetrics
ShowWindow
SetWindowTextA
MoveWindow
AdjustWindowRect
DefWindowProcA
CreateWindowExA
LoadCursorA
GetClientRect
PeekMessageA
GetWindowLongPtrA
GetWindowRect
DispatchMessageA
RegisterClassExW
CreateWindowExW
FillRect
PostMessageW
DefWindowProcW
GetMessageW
GetClassNameW
EnumWindows
SendMessageTimeoutW
DispatchMessageW
GetDesktopWindow
GetDC
SetTimer
TranslateMessage
EndPaint
GetKeyState
EnumDisplayDevicesA
RegisterClassA
RegisterDeviceNotificationW
PostMessageA
DestroyWindow
EnumChildWindows
LoadIconA
BeginPaint
ReleaseDC
InvalidateRect
UnregisterDeviceNotification
UpdateWindow
PostQuitMessage
UnregisterClassA
KillTimer
GetParent
SetWindowLongPtrA
RegisterClassExA

gdi32

D3DKMTOpenAdapterFromHdc
SetPixelFormat
D3DKMTCloseAdapter
SwapBuffers
DescribePixelFormat
D3DKMTOpenAdapterFromGdiDisplayName
GetColorSpace
GetLogColorSpaceW
CreateSolidBrush
DeleteObject
SetBkMode
TextOutA
SetTextColor
DeleteDC
GetStockObject
CreateCompatibleDC
SelectObject
CreateFontA
CreateCompatibleBitmap
BitBlt

advapi32

RegCreateKeyA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegDeleteValueA
OpenProcessToken
GetTokenInformation
EventWriteTransfer
EventRegister
EventSetInformation
EventUnregister

shell32

SHCreateDirectoryExW
SHGetKnownFolderPath

ole32

CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemFree

oleaut32

VariantInit
VariantClear

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Throw_C_error@std@@YAXH@Z
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_init_in_situ
_Cnd_do_broadcast_at_thread_exit
_Thrd_id
_Thrd_detach
_Thrd_join
_Mtx_unlock
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
_Cnd_unregister_at_thread_exit
?__ExceptionPtrCreate@@YAXPEAX@Z
_Cnd_init_in_situ
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?_Syserror_map@std@@YAPEBDH@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
_Cnd_register_at_thread_exit
_Cnd_wait
_Xtime_get_ticks
_Cnd_broadcast
_Cnd_destroy_in_situ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?uncaught_exception@std@@YA_NXZ
?id@?$ctype@_W@std@@2V0locale@2@A
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?is@?$ctype@_W@std@@QEBA_NF_W@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
??Bid@locale@std@@QEAA_KXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
??0task_continuation_context@Concurrency@@AEAA@XZ
_Mtx_current_owns
_Query_perf_frequency
?_Xbad_function_call@std@@YAXXZ
_Cnd_timedwait
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
_Query_perf_counter
?_Xbad_alloc@std@@YAXXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memchr
memcmp
memmove
__std_type_info_destroy_list
_CxxThrowException
__current_exception_context
__current_exception
memcpy
strstr
strrchr
_set_se_translator
strchr
__C_specific_handler
_purecall
__std_exception_copy
__std_exception_destroy
__std_terminate
__RTDynamicCast
memset

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh
realloc

api-ms-win-crt-convert-l1-1-0

strtof
strtod
wcstol
atoi
strtoll
strtoull
strtol
wcstombs
strtoul
mbstowcs_s
wcstombs_s

api-ms-win-crt-runtime-l1-1-0

abort
strerror
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
exit
terminate
_wassert
_beginthreadex
_invalid_parameter_noinfo_noreturn
_errno

api-ms-win-crt-stdio-l1-1-0

feof
fwrite
__stdio_common_vfprintf
__stdio_common_vswprintf_s
fgetwc
rewind
fgetc
__stdio_common_vsprintf_s
__stdio_common_vsscanf
__acrt_iob_func
fflush
fseek
ftell
fgetpos
setvbuf
fclose
ungetwc
ungetc
fsetpos
_fseeki64
_get_stream_buffer_pointers
fputwc
__stdio_common_vsnwprintf_s
fread
__stdio_common_vfwprintf_s
_wfsopen
__stdio_common_vsprintf
fputc
fopen

api-ms-win-crt-string-l1-1-0

strncpy
wcsncpy_s
towupper
isalpha
_strdup
strtok_s
_stricmp
strcpy_s
toupper
isspace
tolower
isdigit
strcmp
strtok
isalnum
wcscpy_s
strncmp

api-ms-win-crt-filesystem-l1-1-0

_mkdir
_lock_file
_stat64i32
_unlock_file

api-ms-win-crt-time-l1-1-0

strftime
_difftime64
_ctime64
_mktime64
_time64
_localtime64

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-math-l1-1-0

cbrtf
fmaxf
fminf
log2f
ceilf
sin
sqrtf
ceil
pow
log
floorf
roundf
floor
ldexp
sqrt
cosf
sinf
powf
cos
tanf
nan

d3d9

Direct3DCreate9

dbghelp

SymFromAddr
SymGetOptions
SymCleanup
SymInitialize
SymGetLineFromAddr64
SymSetOptions

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

opengl32

wglDeleteContext
wglCreateContext
wglGetProcAddress
wglGetCurrentDC
wglMakeCurrent
wglGetCurrentContext

Exports

Exports

ADLXInitialize
ADLXInitializeWithADLAndEventManager
ADLXInitializeWithCallerAdl
ADLXInitializeWithIncompatibleDriver
ADLXQueryFullVersion
ADLXQueryVersion
ADLXTerminate

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 98KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fortnite Cheat/cfg/AuthFWSnapin.dll
.dll windows:4 windows x86 arch:x86

Password: 3636

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

AuthFWSnapin.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fortnite Cheat/cfg/D3DX9_37.dll
.dll windows:6 windows x64 arch:x64

Password: 3636

7cf118624dcc0248df495d68b7c954a8

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:0f:78:4d:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/08/2007, 00:23

Not After

23/02/2009, 00:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:14:2c:a7:00:00:00:00:00:06
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/06/2007, 23:54

Not After

13/06/2012, 00:04

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:27F4-D440-54F3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:14:2c:a7:00:00:00:00:00:06
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/06/2007, 23:54

Not After

13/06/2012, 00:04

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:27F4-D440-54F3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6b:66:25:0c:fc:7b:6d:10:27:cf:17:8b:76:5c:e3:ff:d3:cc:17:74
Signer

Actual PE Digest

6b:66:25:0c:fc:7b:6d:10:27:cf:17:8b:76:5c:e3:ff:d3:cc:17:74

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d3dx9_37.pdb

Imports

msvcrt

_vsnprintf
_finite
memmove
_purecall
qsort
_stricmp
modff
iswpunct
iswdigit
iswalpha
iswspace
??3@YAXPEAX@Z
__CxxFrameHandler
malloc
_errno
_clearfp
_strdup
setlocale
free
calloc
realloc
sscanf
_strtime
_lseeki64
_isatty
_write
__pioinfo
__badioinfo
_fileno
??1type_info@@UEAA@XZ
_itoa
_snprintf
wctomb
_iob
isleadbyte
?terminate@@YAXXZ
__dllonexit
_onexit
_lock
_unlock
_CxxThrowException
memcpy
memset
__C_specific_handler
_initterm
_XcptFilter
_amsg_exit
_fpclass
tolower
srand
strtod
fread
fwrite
fflush
abort
_tempnam
_ultoa
atol
atof
isxdigit
wcstombs
_isnan
rand
strncmp
strchr
isalnum
toupper
atoi
isalpha
isdigit
_controlfp
strrchr
_strnicmp
modf
isspace
longjmp
ldexp
frexp
??2@YAPEAX_K@Z
_strdate
memcmp
sqrt
powf
sqrtf
floor
fmodf
log
cos
exp
sinf
cosf
floorf
ceilf
atan2
atan
acos
asin
sin
pow
atan2f
logf
acosf
fmod
asinf
ceil
cosh
sinh
tan
tanh
_setjmp

gdi32

MoveToEx
GetGlyphOutlineW
GetCurrentObject
GetOutlineTextMetricsA
TranslateCharsetInfo
ExtTextOutA
ExtTextOutW
CreateDIBSection
GetGlyphOutlineA
GetObjectW
GetObjectA
GetCharacterPlacementA
GetCharacterPlacementW
SetTextColor
SetBkColor
SetBkMode
GetTextMetricsA
GetTextMetricsW
GetFontLanguageInfo
CreateFontIndirectA
CreateFontIndirectW
SetTextAlign
SetMapMode
CreateCompatibleDC
DeleteDC
DeleteObject
SelectObject

kernel32

FindResourceW
TlsAlloc
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
UnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry
GetProcessHeap
HeapFree
HeapAlloc
ReleaseMutex
WaitForSingleObject
CreateMutexA
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
ExpandEnvironmentStringsA
GlobalMemoryStatus
GetSystemInfo
SetEndOfFile
MoveFileW
GetTempFileNameW
MoveFileA
CompareStringA
SetFilePointer
DeleteFileW
FindResourceA
LoadResource
LockResource
SizeofResource
FreeResource
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateFileW
LocalFree
FormatMessageA
GetLastError
GetFileSizeEx
GetFullPathNameA
IsDBCSLeadByte
WriteFile
DeleteFileA
CloseHandle
ReadFile
CreateFileA
GetTempFileNameA
GetTempPathA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
GetACP
MultiByteToWideChar
WideCharToMultiByte
OutputDebugStringA
GetModuleHandleA
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
Sleep
VirtualProtect
DisableThreadLibraryCalls
lstrcmpiA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA

Exports

Exports

D3DXAssembleShader
D3DXAssembleShaderFromFileA
D3DXAssembleShaderFromFileW
D3DXAssembleShaderFromResourceA
D3DXAssembleShaderFromResourceW
D3DXBoxBoundProbe
D3DXCheckCubeTextureRequirements
D3DXCheckTextureRequirements
D3DXCheckVersion
D3DXCheckVolumeTextureRequirements
D3DXCleanMesh
D3DXColorAdjustContrast
D3DXColorAdjustSaturation
D3DXCompileShader
D3DXCompileShaderFromFileA
D3DXCompileShaderFromFileW
D3DXCompileShaderFromResourceA
D3DXCompileShaderFromResourceW
D3DXComputeBoundingBox
D3DXComputeBoundingSphere
D3DXComputeIMTFromPerTexelSignal
D3DXComputeIMTFromPerVertexSignal
D3DXComputeIMTFromSignal
D3DXComputeIMTFromTexture
D3DXComputeNormalMap
D3DXComputeNormals
D3DXComputeTangent
D3DXComputeTangentFrame
D3DXComputeTangentFrameEx
D3DXConcatenateMeshes
D3DXConvertMeshSubsetToSingleStrip
D3DXConvertMeshSubsetToStrips
D3DXCreateAnimationController
D3DXCreateBox
D3DXCreateBuffer
D3DXCreateCompressedAnimationSet
D3DXCreateCubeTexture
D3DXCreateCubeTextureFromFileA
D3DXCreateCubeTextureFromFileExA
D3DXCreateCubeTextureFromFileExW
D3DXCreateCubeTextureFromFileInMemory
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXCreateCubeTextureFromFileW
D3DXCreateCubeTextureFromResourceA
D3DXCreateCubeTextureFromResourceExA
D3DXCreateCubeTextureFromResourceExW
D3DXCreateCubeTextureFromResourceW
D3DXCreateCylinder
D3DXCreateEffect
D3DXCreateEffectCompiler
D3DXCreateEffectCompilerFromFileA
D3DXCreateEffectCompilerFromFileW
D3DXCreateEffectCompilerFromResourceA
D3DXCreateEffectCompilerFromResourceW
D3DXCreateEffectEx
D3DXCreateEffectFromFileA
D3DXCreateEffectFromFileExA
D3DXCreateEffectFromFileExW
D3DXCreateEffectFromFileW
D3DXCreateEffectFromResourceA
D3DXCreateEffectFromResourceExA
D3DXCreateEffectFromResourceExW
D3DXCreateEffectFromResourceW
D3DXCreateEffectPool
D3DXCreateFontA
D3DXCreateFontIndirectA
D3DXCreateFontIndirectW
D3DXCreateFontW
D3DXCreateFragmentLinker
D3DXCreateFragmentLinkerEx
D3DXCreateKeyframedAnimationSet
D3DXCreateLine
D3DXCreateMatrixStack
D3DXCreateMesh
D3DXCreateMeshFVF
D3DXCreateNPatchMesh
D3DXCreatePMeshFromStream
D3DXCreatePRTBuffer
D3DXCreatePRTBufferTex
D3DXCreatePRTCompBuffer
D3DXCreatePRTEngine
D3DXCreatePatchMesh
D3DXCreatePolygon
D3DXCreateRenderToEnvMap
D3DXCreateRenderToSurface
D3DXCreateSPMesh
D3DXCreateSkinInfo
D3DXCreateSkinInfoFVF
D3DXCreateSkinInfoFromBlendedMesh
D3DXCreateSphere
D3DXCreateSprite
D3DXCreateTeapot
D3DXCreateTextA
D3DXCreateTextW
D3DXCreateTexture
D3DXCreateTextureFromFileA
D3DXCreateTextureFromFileExA
D3DXCreateTextureFromFileExW
D3DXCreateTextureFromFileInMemory
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateTextureFromFileW
D3DXCreateTextureFromResourceA
D3DXCreateTextureFromResourceExA
D3DXCreateTextureFromResourceExW
D3DXCreateTextureFromResourceW
D3DXCreateTextureGutterHelper
D3DXCreateTextureShader
D3DXCreateTorus
D3DXCreateVolumeTexture
D3DXCreateVolumeTextureFromFileA
D3DXCreateVolumeTextureFromFileExA
D3DXCreateVolumeTextureFromFileExW
D3DXCreateVolumeTextureFromFileInMemory
D3DXCreateVolumeTextureFromFileInMemoryEx
D3DXCreateVolumeTextureFromFileW
D3DXCreateVolumeTextureFromResourceA
D3DXCreateVolumeTextureFromResourceExA
D3DXCreateVolumeTextureFromResourceExW
D3DXCreateVolumeTextureFromResourceW
D3DXDebugMute
D3DXDeclaratorFromFVF
D3DXDisassembleEffect
D3DXDisassembleShader
D3DXFVFFromDeclarator
D3DXFileCreate
D3DXFillCubeTexture
D3DXFillCubeTextureTX
D3DXFillTexture
D3DXFillTextureTX
D3DXFillVolumeTexture
D3DXFillVolumeTextureTX
D3DXFilterTexture
D3DXFindShaderComment
D3DXFloat16To32Array
D3DXFloat32To16Array
D3DXFrameAppendChild
D3DXFrameCalculateBoundingSphere
D3DXFrameDestroy
D3DXFrameFind
D3DXFrameNumNamedMatrices
D3DXFrameRegisterNamedMatrices
D3DXFresnelTerm
D3DXGatherFragments
D3DXGatherFragmentsFromFileA
D3DXGatherFragmentsFromFileW
D3DXGatherFragmentsFromResourceA
D3DXGatherFragmentsFromResourceW
D3DXGenerateOutputDecl
D3DXGeneratePMesh
D3DXGetDeclLength
D3DXGetDeclVertexSize
D3DXGetDriverLevel
D3DXGetFVFVertexSize
D3DXGetImageInfoFromFileA
D3DXGetImageInfoFromFileInMemory
D3DXGetImageInfoFromFileW
D3DXGetImageInfoFromResourceA
D3DXGetImageInfoFromResourceW
D3DXGetPixelShaderProfile
D3DXGetShaderConstantTable
D3DXGetShaderConstantTableEx
D3DXGetShaderInputSemantics
D3DXGetShaderOutputSemantics
D3DXGetShaderSamplers
D3DXGetShaderSize
D3DXGetShaderVersion
D3DXGetVertexShaderProfile
D3DXIntersect
D3DXIntersectSubset
D3DXIntersectTri
D3DXLoadMeshFromXA
D3DXLoadMeshFromXInMemory
D3DXLoadMeshFromXResource
D3DXLoadMeshFromXW
D3DXLoadMeshFromXof
D3DXLoadMeshHierarchyFromXA
D3DXLoadMeshHierarchyFromXInMemory
D3DXLoadMeshHierarchyFromXW
D3DXLoadPRTBufferFromFileA
D3DXLoadPRTBufferFromFileW
D3DXLoadPRTCompBufferFromFileA
D3DXLoadPRTCompBufferFromFileW
D3DXLoadPatchMeshFromXof
D3DXLoadSkinMeshFromXof
D3DXLoadSurfaceFromFileA
D3DXLoadSurfaceFromFileInMemory
D3DXLoadSurfaceFromFileW
D3DXLoadSurfaceFromMemory
D3DXLoadSurfaceFromResourceA
D3DXLoadSurfaceFromResourceW
D3DXLoadSurfaceFromSurface
D3DXLoadVolumeFromFileA
D3DXLoadVolumeFromFileInMemory
D3DXLoadVolumeFromFileW
D3DXLoadVolumeFromMemory
D3DXLoadVolumeFromResourceA
D3DXLoadVolumeFromResourceW
D3DXLoadVolumeFromVolume
D3DXMatrixAffineTransformation
D3DXMatrixAffineTransformation2D
D3DXMatrixDecompose
D3DXMatrixDeterminant
D3DXMatrixInverse
D3DXMatrixLookAtLH
D3DXMatrixLookAtRH
D3DXMatrixMultiply
D3DXMatrixMultiplyTranspose
D3DXMatrixOrthoLH
D3DXMatrixOrthoOffCenterLH
D3DXMatrixOrthoOffCenterRH
D3DXMatrixOrthoRH
D3DXMatrixPerspectiveFovLH
D3DXMatrixPerspectiveFovRH
D3DXMatrixPerspectiveLH
D3DXMatrixPerspectiveOffCenterLH
D3DXMatrixPerspectiveOffCenterRH
D3DXMatrixPerspectiveRH
D3DXMatrixReflect
D3DXMatrixRotationAxis
D3DXMatrixRotationQuaternion
D3DXMatrixRotationX
D3DXMatrixRotationY
D3DXMatrixRotationYawPitchRoll
D3DXMatrixRotationZ
D3DXMatrixScaling
D3DXMatrixShadow
D3DXMatrixTransformation
D3DXMatrixTransformation2D
D3DXMatrixTranslation
D3DXMatrixTranspose
D3DXOptimizeFaces
D3DXOptimizeVertices
D3DXPlaneFromPointNormal
D3DXPlaneFromPoints
D3DXPlaneIntersectLine
D3DXPlaneNormalize
D3DXPlaneTransform
D3DXPlaneTransformArray
D3DXPreprocessShader
D3DXPreprocessShaderFromFileA
D3DXPreprocessShaderFromFileW
D3DXPreprocessShaderFromResourceA
D3DXPreprocessShaderFromResourceW
D3DXQuaternionBaryCentric
D3DXQuaternionExp
D3DXQuaternionInverse
D3DXQuaternionLn
D3DXQuaternionMultiply
D3DXQuaternionNormalize
D3DXQuaternionRotationAxis
D3DXQuaternionRotationMatrix
D3DXQuaternionRotationYawPitchRoll
D3DXQuaternionSlerp
D3DXQuaternionSquad
D3DXQuaternionSquadSetup
D3DXQuaternionToAxisAngle
D3DXRectPatchSize
D3DXSHAdd
D3DXSHDot
D3DXSHEvalConeLight
D3DXSHEvalDirection
D3DXSHEvalDirectionalLight
D3DXSHEvalHemisphereLight
D3DXSHEvalSphericalLight
D3DXSHMultiply2
D3DXSHMultiply3
D3DXSHMultiply4
D3DXSHMultiply5
D3DXSHMultiply6
D3DXSHPRTCompSplitMeshSC
D3DXSHPRTCompSuperCluster
D3DXSHProjectCubeMap
D3DXSHRotate
D3DXSHRotateZ
D3DXSHScale
D3DXSaveMeshHierarchyToFileA
D3DXSaveMeshHierarchyToFileW
D3DXSaveMeshToXA
D3DXSaveMeshToXW
D3DXSavePRTBufferToFileA
D3DXSavePRTBufferToFileW
D3DXSavePRTCompBufferToFileA
D3DXSavePRTCompBufferToFileW
D3DXSaveSurfaceToFileA
D3DXSaveSurfaceToFileInMemory
D3DXSaveSurfaceToFileW
D3DXSaveTextureToFileA
D3DXSaveTextureToFileInMemory
D3DXSaveTextureToFileW
D3DXSaveVolumeToFileA
D3DXSaveVolumeToFileInMemory
D3DXSaveVolumeToFileW
D3DXSimplifyMesh
D3DXSphereBoundProbe
D3DXSplitMesh
D3DXTessellateNPatches
D3DXTessellateRectPatch
D3DXTessellateTriPatch
D3DXTriPatchSize
D3DXUVAtlasCreate
D3DXUVAtlasPack
D3DXUVAtlasPartition
D3DXValidMesh
D3DXValidPatchMesh
D3DXVec2BaryCentric
D3DXVec2CatmullRom
D3DXVec2Hermite
D3DXVec2Normalize
D3DXVec2Transform
D3DXVec2TransformArray
D3DXVec2TransformCoord
D3DXVec2TransformCoordArray
D3DXVec2TransformNormal
D3DXVec2TransformNormalArray
D3DXVec3BaryCentric
D3DXVec3CatmullRom
D3DXVec3Hermite
D3DXVec3Normalize
D3DXVec3Project
D3DXVec3ProjectArray
D3DXVec3Transform
D3DXVec3TransformArray
D3DXVec3TransformCoord
D3DXVec3TransformCoordArray
D3DXVec3TransformNormal
D3DXVec3TransformNormalArray
D3DXVec3Unproject
D3DXVec3UnprojectArray
D3DXVec4BaryCentric
D3DXVec4CatmullRom
D3DXVec4Cross
D3DXVec4Hermite
D3DXVec4Normalize
D3DXVec4Transform
D3DXVec4TransformArray
D3DXWeldVertices

Sections

.text
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 98KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fortnite Cheat/cfg/D3DX9_38.dll
.dll windows:6 windows x64 arch:x64

Password: 3636

fa824607d91dab1bfcb8584f93e64e05

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:0f:78:4d:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/08/2007, 00:23

Not After

23/02/2009, 00:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/09/2006, 01:53

Not After

16/09/2011, 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/09/2006, 01:53

Not After

16/09/2011, 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:ff:2b:47:0d:e7:26:f5:82:02:97:57:d5:97:89:93:9c:ca:dd:97
Signer

Actual PE Digest

03:ff:2b:47:0d:e7:26:f5:82:02:97:57:d5:97:89:93:9c:ca:dd:97

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d3dx9_38.pdb

Imports

msvcrt

_vsnprintf
_finite
memmove
_purecall
qsort
_stricmp
modff
iswpunct
iswdigit
iswalpha
iswspace
??3@YAXPEAX@Z
??2@YAPEAX_K@Z
malloc
_errno
_clearfp
_strdup
setlocale
free
calloc
realloc
sscanf
_strtime
_lseeki64
_isatty
_write
__pioinfo
__badioinfo
_fileno
??1type_info@@UEAA@XZ
_itoa
_snprintf
wctomb
_iob
isleadbyte
?terminate@@YAXXZ
__dllonexit
_onexit
_lock
_unlock
_CxxThrowException
memcpy
memset
__C_specific_handler
_initterm
_XcptFilter
_amsg_exit
_fpclass
tolower
srand
strtod
fread
fwrite
fflush
abort
_tempnam
_ultoa
atol
atof
isxdigit
wcstombs
_isnan
rand
strncmp
strchr
isalnum
toupper
atoi
isalpha
isdigit
getenv
_controlfp
strrchr
_strnicmp
modf
isspace
longjmp
ldexp
frexp
__CxxFrameHandler
_strdate
memcmp
sqrt
powf
sqrtf
floor
fmodf
log
cos
exp
sinf
cosf
floorf
ceilf
atan2
atan
acos
asin
sin
pow
atan2f
logf
acosf
fmod
asinf
ceil
cosh
sinh
tan
tanh
_setjmp

gdi32

ExtTextOutA
GetGlyphOutlineW
GetCurrentObject
GetOutlineTextMetricsA
TranslateCharsetInfo
MoveToEx
ExtTextOutW
CreateDIBSection
GetGlyphOutlineA
GetObjectW
GetObjectA
GetCharacterPlacementA
GetCharacterPlacementW
SetTextColor
SetBkColor
SetBkMode
GetTextMetricsA
GetTextMetricsW
GetFontLanguageInfo
CreateFontIndirectA
CreateFontIndirectW
SetTextAlign
SetMapMode
CreateCompatibleDC
DeleteDC
DeleteObject
SelectObject

kernel32

FindResourceW
TlsAlloc
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
UnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry
GetProcessHeap
HeapFree
HeapAlloc
ReleaseMutex
WaitForSingleObject
CreateMutexA
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
ExpandEnvironmentStringsA
GlobalMemoryStatus
GetSystemInfo
SetEndOfFile
MoveFileW
GetTempFileNameW
MoveFileA
CompareStringA
SetFilePointer
DeleteFileW
FindResourceA
LoadResource
LockResource
SizeofResource
FreeResource
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateFileW
LocalFree
FormatMessageA
GetLastError
GetFileSizeEx
GetFullPathNameA
IsDBCSLeadByte
WriteFile
DeleteFileA
CloseHandle
ReadFile
CreateFileA
GetTempFileNameA
GetTempPathA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
GetACP
MultiByteToWideChar
WideCharToMultiByte
OutputDebugStringA
GetModuleHandleA
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
Sleep
VirtualProtect
DisableThreadLibraryCalls
lstrcmpiA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA

Exports

Exports

D3DXAssembleShader
D3DXAssembleShaderFromFileA
D3DXAssembleShaderFromFileW
D3DXAssembleShaderFromResourceA
D3DXAssembleShaderFromResourceW
D3DXBoxBoundProbe
D3DXCheckCubeTextureRequirements
D3DXCheckTextureRequirements
D3DXCheckVersion
D3DXCheckVolumeTextureRequirements
D3DXCleanMesh
D3DXColorAdjustContrast
D3DXColorAdjustSaturation
D3DXCompileShader
D3DXCompileShaderFromFileA
D3DXCompileShaderFromFileW
D3DXCompileShaderFromResourceA
D3DXCompileShaderFromResourceW
D3DXComputeBoundingBox
D3DXComputeBoundingSphere
D3DXComputeIMTFromPerTexelSignal
D3DXComputeIMTFromPerVertexSignal
D3DXComputeIMTFromSignal
D3DXComputeIMTFromTexture
D3DXComputeNormalMap
D3DXComputeNormals
D3DXComputeTangent
D3DXComputeTangentFrame
D3DXComputeTangentFrameEx
D3DXConcatenateMeshes
D3DXConvertMeshSubsetToSingleStrip
D3DXConvertMeshSubsetToStrips
D3DXCreateAnimationController
D3DXCreateBox
D3DXCreateBuffer
D3DXCreateCompressedAnimationSet
D3DXCreateCubeTexture
D3DXCreateCubeTextureFromFileA
D3DXCreateCubeTextureFromFileExA
D3DXCreateCubeTextureFromFileExW
D3DXCreateCubeTextureFromFileInMemory
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXCreateCubeTextureFromFileW
D3DXCreateCubeTextureFromResourceA
D3DXCreateCubeTextureFromResourceExA
D3DXCreateCubeTextureFromResourceExW
D3DXCreateCubeTextureFromResourceW
D3DXCreateCylinder
D3DXCreateEffect
D3DXCreateEffectCompiler
D3DXCreateEffectCompilerFromFileA
D3DXCreateEffectCompilerFromFileW
D3DXCreateEffectCompilerFromResourceA
D3DXCreateEffectCompilerFromResourceW
D3DXCreateEffectEx
D3DXCreateEffectFromFileA
D3DXCreateEffectFromFileExA
D3DXCreateEffectFromFileExW
D3DXCreateEffectFromFileW
D3DXCreateEffectFromResourceA
D3DXCreateEffectFromResourceExA
D3DXCreateEffectFromResourceExW
D3DXCreateEffectFromResourceW
D3DXCreateEffectPool
D3DXCreateFontA
D3DXCreateFontIndirectA
D3DXCreateFontIndirectW
D3DXCreateFontW
D3DXCreateFragmentLinker
D3DXCreateFragmentLinkerEx
D3DXCreateKeyframedAnimationSet
D3DXCreateLine
D3DXCreateMatrixStack
D3DXCreateMesh
D3DXCreateMeshFVF
D3DXCreateNPatchMesh
D3DXCreatePMeshFromStream
D3DXCreatePRTBuffer
D3DXCreatePRTBufferTex
D3DXCreatePRTCompBuffer
D3DXCreatePRTEngine
D3DXCreatePatchMesh
D3DXCreatePolygon
D3DXCreateRenderToEnvMap
D3DXCreateRenderToSurface
D3DXCreateSPMesh
D3DXCreateSkinInfo
D3DXCreateSkinInfoFVF
D3DXCreateSkinInfoFromBlendedMesh
D3DXCreateSphere
D3DXCreateSprite
D3DXCreateTeapot
D3DXCreateTextA
D3DXCreateTextW
D3DXCreateTexture
D3DXCreateTextureFromFileA
D3DXCreateTextureFromFileExA
D3DXCreateTextureFromFileExW
D3DXCreateTextureFromFileInMemory
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateTextureFromFileW
D3DXCreateTextureFromResourceA
D3DXCreateTextureFromResourceExA
D3DXCreateTextureFromResourceExW
D3DXCreateTextureFromResourceW
D3DXCreateTextureGutterHelper
D3DXCreateTextureShader
D3DXCreateTorus
D3DXCreateVolumeTexture
D3DXCreateVolumeTextureFromFileA
D3DXCreateVolumeTextureFromFileExA
D3DXCreateVolumeTextureFromFileExW
D3DXCreateVolumeTextureFromFileInMemory
D3DXCreateVolumeTextureFromFileInMemoryEx
D3DXCreateVolumeTextureFromFileW
D3DXCreateVolumeTextureFromResourceA
D3DXCreateVolumeTextureFromResourceExA
D3DXCreateVolumeTextureFromResourceExW
D3DXCreateVolumeTextureFromResourceW
D3DXDebugMute
D3DXDeclaratorFromFVF
D3DXDisassembleEffect
D3DXDisassembleShader
D3DXFVFFromDeclarator
D3DXFileCreate
D3DXFillCubeTexture
D3DXFillCubeTextureTX
D3DXFillTexture
D3DXFillTextureTX
D3DXFillVolumeTexture
D3DXFillVolumeTextureTX
D3DXFilterTexture
D3DXFindShaderComment
D3DXFloat16To32Array
D3DXFloat32To16Array
D3DXFrameAppendChild
D3DXFrameCalculateBoundingSphere
D3DXFrameDestroy
D3DXFrameFind
D3DXFrameNumNamedMatrices
D3DXFrameRegisterNamedMatrices
D3DXFresnelTerm
D3DXGatherFragments
D3DXGatherFragmentsFromFileA
D3DXGatherFragmentsFromFileW
D3DXGatherFragmentsFromResourceA
D3DXGatherFragmentsFromResourceW
D3DXGenerateOutputDecl
D3DXGeneratePMesh
D3DXGetDeclLength
D3DXGetDeclVertexSize
D3DXGetDriverLevel
D3DXGetFVFVertexSize
D3DXGetImageInfoFromFileA
D3DXGetImageInfoFromFileInMemory
D3DXGetImageInfoFromFileW
D3DXGetImageInfoFromResourceA
D3DXGetImageInfoFromResourceW
D3DXGetPixelShaderProfile
D3DXGetShaderConstantTable
D3DXGetShaderConstantTableEx
D3DXGetShaderInputSemantics
D3DXGetShaderOutputSemantics
D3DXGetShaderSamplers
D3DXGetShaderSize
D3DXGetShaderVersion
D3DXGetVertexShaderProfile
D3DXIntersect
D3DXIntersectSubset
D3DXIntersectTri
D3DXLoadMeshFromXA
D3DXLoadMeshFromXInMemory
D3DXLoadMeshFromXResource
D3DXLoadMeshFromXW
D3DXLoadMeshFromXof
D3DXLoadMeshHierarchyFromXA
D3DXLoadMeshHierarchyFromXInMemory
D3DXLoadMeshHierarchyFromXW
D3DXLoadPRTBufferFromFileA
D3DXLoadPRTBufferFromFileW
D3DXLoadPRTCompBufferFromFileA
D3DXLoadPRTCompBufferFromFileW
D3DXLoadPatchMeshFromXof
D3DXLoadSkinMeshFromXof
D3DXLoadSurfaceFromFileA
D3DXLoadSurfaceFromFileInMemory
D3DXLoadSurfaceFromFileW
D3DXLoadSurfaceFromMemory
D3DXLoadSurfaceFromResourceA
D3DXLoadSurfaceFromResourceW
D3DXLoadSurfaceFromSurface
D3DXLoadVolumeFromFileA
D3DXLoadVolumeFromFileInMemory
D3DXLoadVolumeFromFileW
D3DXLoadVolumeFromMemory
D3DXLoadVolumeFromResourceA
D3DXLoadVolumeFromResourceW
D3DXLoadVolumeFromVolume
D3DXMatrixAffineTransformation
D3DXMatrixAffineTransformation2D
D3DXMatrixDecompose
D3DXMatrixDeterminant
D3DXMatrixInverse
D3DXMatrixLookAtLH
D3DXMatrixLookAtRH
D3DXMatrixMultiply
D3DXMatrixMultiplyTranspose
D3DXMatrixOrthoLH
D3DXMatrixOrthoOffCenterLH
D3DXMatrixOrthoOffCenterRH
D3DXMatrixOrthoRH
D3DXMatrixPerspectiveFovLH
D3DXMatrixPerspectiveFovRH
D3DXMatrixPerspectiveLH
D3DXMatrixPerspectiveOffCenterLH
D3DXMatrixPerspectiveOffCenterRH
D3DXMatrixPerspectiveRH
D3DXMatrixReflect
D3DXMatrixRotationAxis
D3DXMatrixRotationQuaternion
D3DXMatrixRotationX
D3DXMatrixRotationY
D3DXMatrixRotationYawPitchRoll
D3DXMatrixRotationZ
D3DXMatrixScaling
D3DXMatrixShadow
D3DXMatrixTransformation
D3DXMatrixTransformation2D
D3DXMatrixTranslation
D3DXMatrixTranspose
D3DXOptimizeFaces
D3DXOptimizeVertices
D3DXPlaneFromPointNormal
D3DXPlaneFromPoints
D3DXPlaneIntersectLine
D3DXPlaneNormalize
D3DXPlaneTransform
D3DXPlaneTransformArray
D3DXPreprocessShader
D3DXPreprocessShaderFromFileA
D3DXPreprocessShaderFromFileW
D3DXPreprocessShaderFromResourceA
D3DXPreprocessShaderFromResourceW
D3DXQuaternionBaryCentric
D3DXQuaternionExp
D3DXQuaternionInverse
D3DXQuaternionLn
D3DXQuaternionMultiply
D3DXQuaternionNormalize
D3DXQuaternionRotationAxis
D3DXQuaternionRotationMatrix
D3DXQuaternionRotationYawPitchRoll
D3DXQuaternionSlerp
D3DXQuaternionSquad
D3DXQuaternionSquadSetup
D3DXQuaternionToAxisAngle
D3DXRectPatchSize
D3DXSHAdd
D3DXSHDot
D3DXSHEvalConeLight
D3DXSHEvalDirection
D3DXSHEvalDirectionalLight
D3DXSHEvalHemisphereLight
D3DXSHEvalSphericalLight
D3DXSHMultiply2
D3DXSHMultiply3
D3DXSHMultiply4
D3DXSHMultiply5
D3DXSHMultiply6
D3DXSHPRTCompSplitMeshSC
D3DXSHPRTCompSuperCluster
D3DXSHProjectCubeMap
D3DXSHRotate
D3DXSHRotateZ
D3DXSHScale
D3DXSaveMeshHierarchyToFileA
D3DXSaveMeshHierarchyToFileW
D3DXSaveMeshToXA
D3DXSaveMeshToXW
D3DXSavePRTBufferToFileA
D3DXSavePRTBufferToFileW
D3DXSavePRTCompBufferToFileA
D3DXSavePRTCompBufferToFileW
D3DXSaveSurfaceToFileA
D3DXSaveSurfaceToFileInMemory
D3DXSaveSurfaceToFileW
D3DXSaveTextureToFileA
D3DXSaveTextureToFileInMemory
D3DXSaveTextureToFileW
D3DXSaveVolumeToFileA
D3DXSaveVolumeToFileInMemory
D3DXSaveVolumeToFileW
D3DXSimplifyMesh
D3DXSphereBoundProbe
D3DXSplitMesh
D3DXTessellateNPatches
D3DXTessellateRectPatch
D3DXTessellateTriPatch
D3DXTriPatchSize
D3DXUVAtlasCreate
D3DXUVAtlasPack
D3DXUVAtlasPartition
D3DXValidMesh
D3DXValidPatchMesh
D3DXVec2BaryCentric
D3DXVec2CatmullRom
D3DXVec2Hermite
D3DXVec2Normalize
D3DXVec2Transform
D3DXVec2TransformArray
D3DXVec2TransformCoord
D3DXVec2TransformCoordArray
D3DXVec2TransformNormal
D3DXVec2TransformNormalArray
D3DXVec3BaryCentric
D3DXVec3CatmullRom
D3DXVec3Hermite
D3DXVec3Normalize
D3DXVec3Project
D3DXVec3ProjectArray
D3DXVec3Transform
D3DXVec3TransformArray
D3DXVec3TransformCoord
D3DXVec3TransformCoordArray
D3DXVec3TransformNormal
D3DXVec3TransformNormalArray
D3DXVec3Unproject
D3DXVec3UnprojectArray
D3DXVec4BaryCentric
D3DXVec4CatmullRom
D3DXVec4Cross
D3DXVec4Hermite
D3DXVec4Normalize
D3DXVec4Transform
D3DXVec4TransformArray
D3DXWeldVertices

Sections

.text
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 98KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fortnite Cheat/cfg/D3DX9_39.dll
.dll windows:6 windows x64 arch:x64

Password: 3636

fa824607d91dab1bfcb8584f93e64e05

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:0f:78:4d:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/08/2007, 00:23

Not After

23/02/2009, 00:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/09/2006, 01:53

Not After

16/09/2011, 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:49:7c:ed:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/09/2006, 01:55

Not After

16/09/2011, 02:05

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

12:89:8a:04:32:d3:11:ec:8b:86:9b:12:0a:4e:41:9f:fb:b1:5c:de
Signer

Actual PE Digest

12:89:8a:04:32:d3:11:ec:8b:86:9b:12:0a:4e:41:9f:fb:b1:5c:de

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d3dx9_39.pdb

Imports

msvcrt

_vsnprintf
_finite
memmove
_purecall
qsort
_stricmp
modff
iswpunct
iswdigit
iswalpha
iswspace
??3@YAXPEAX@Z
??2@YAPEAX_K@Z
malloc
_errno
_clearfp
_strdup
setlocale
free
calloc
realloc
sscanf
_strtime
_lseeki64
_isatty
_write
__pioinfo
__badioinfo
_fileno
??1type_info@@UEAA@XZ
_itoa
_snprintf
wctomb
_iob
isleadbyte
?terminate@@YAXXZ
__dllonexit
_onexit
_lock
_unlock
_CxxThrowException
memcpy
memset
__C_specific_handler
_initterm
_XcptFilter
_amsg_exit
_fpclass
tolower
srand
strtod
fread
fwrite
fflush
abort
_tempnam
_ultoa
atol
atof
isxdigit
wcstombs
_isnan
rand
strncmp
strchr
isalnum
toupper
atoi
isalpha
isdigit
getenv
_controlfp
strrchr
_strnicmp
modf
isspace
longjmp
ldexp
frexp
__CxxFrameHandler
_strdate
memcmp
sqrt
powf
sqrtf
floor
fmodf
log
cos
exp
sinf
cosf
floorf
ceilf
atan2
atan
acos
asin
sin
pow
atan2f
logf
acosf
fmod
asinf
ceil
cosh
sinh
tan
tanh
_setjmp

gdi32

ExtTextOutA
GetGlyphOutlineW
GetCurrentObject
GetOutlineTextMetricsA
TranslateCharsetInfo
MoveToEx
ExtTextOutW
CreateDIBSection
GetGlyphOutlineA
GetObjectW
GetObjectA
GetCharacterPlacementA
GetCharacterPlacementW
SetTextColor
SetBkColor
SetBkMode
GetTextMetricsA
GetTextMetricsW
GetFontLanguageInfo
CreateFontIndirectA
CreateFontIndirectW
SetTextAlign
SetMapMode
CreateCompatibleDC
DeleteDC
DeleteObject
SelectObject

kernel32

FindResourceW
TlsAlloc
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
UnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry
GetProcessHeap
HeapFree
HeapAlloc
ReleaseMutex
WaitForSingleObject
CreateMutexA
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
ExpandEnvironmentStringsA
GlobalMemoryStatus
GetSystemInfo
SetEndOfFile
MoveFileW
GetTempFileNameW
MoveFileA
CompareStringA
SetFilePointer
DeleteFileW
FindResourceA
LoadResource
LockResource
SizeofResource
FreeResource
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateFileW
LocalFree
FormatMessageA
GetLastError
GetFileSizeEx
GetFullPathNameA
IsDBCSLeadByte
WriteFile
DeleteFileA
CloseHandle
ReadFile
CreateFileA
GetTempFileNameA
GetTempPathA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
GetACP
MultiByteToWideChar
WideCharToMultiByte
OutputDebugStringA
GetModuleHandleA
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
Sleep
VirtualProtect
DisableThreadLibraryCalls
lstrcmpiA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA

Exports

Exports

D3DXAssembleShader
D3DXAssembleShaderFromFileA
D3DXAssembleShaderFromFileW
D3DXAssembleShaderFromResourceA
D3DXAssembleShaderFromResourceW
D3DXBoxBoundProbe
D3DXCheckCubeTextureRequirements
D3DXCheckTextureRequirements
D3DXCheckVersion
D3DXCheckVolumeTextureRequirements
D3DXCleanMesh
D3DXColorAdjustContrast
D3DXColorAdjustSaturation
D3DXCompileShader
D3DXCompileShaderFromFileA
D3DXCompileShaderFromFileW
D3DXCompileShaderFromResourceA
D3DXCompileShaderFromResourceW
D3DXComputeBoundingBox
D3DXComputeBoundingSphere
D3DXComputeIMTFromPerTexelSignal
D3DXComputeIMTFromPerVertexSignal
D3DXComputeIMTFromSignal
D3DXComputeIMTFromTexture
D3DXComputeNormalMap
D3DXComputeNormals
D3DXComputeTangent
D3DXComputeTangentFrame
D3DXComputeTangentFrameEx
D3DXConcatenateMeshes
D3DXConvertMeshSubsetToSingleStrip
D3DXConvertMeshSubsetToStrips
D3DXCreateAnimationController
D3DXCreateBox
D3DXCreateBuffer
D3DXCreateCompressedAnimationSet
D3DXCreateCubeTexture
D3DXCreateCubeTextureFromFileA
D3DXCreateCubeTextureFromFileExA
D3DXCreateCubeTextureFromFileExW
D3DXCreateCubeTextureFromFileInMemory
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXCreateCubeTextureFromFileW
D3DXCreateCubeTextureFromResourceA
D3DXCreateCubeTextureFromResourceExA
D3DXCreateCubeTextureFromResourceExW
D3DXCreateCubeTextureFromResourceW
D3DXCreateCylinder
D3DXCreateEffect
D3DXCreateEffectCompiler
D3DXCreateEffectCompilerFromFileA
D3DXCreateEffectCompilerFromFileW
D3DXCreateEffectCompilerFromResourceA
D3DXCreateEffectCompilerFromResourceW
D3DXCreateEffectEx
D3DXCreateEffectFromFileA
D3DXCreateEffectFromFileExA
D3DXCreateEffectFromFileExW
D3DXCreateEffectFromFileW
D3DXCreateEffectFromResourceA
D3DXCreateEffectFromResourceExA
D3DXCreateEffectFromResourceExW
D3DXCreateEffectFromResourceW
D3DXCreateEffectPool
D3DXCreateFontA
D3DXCreateFontIndirectA
D3DXCreateFontIndirectW
D3DXCreateFontW
D3DXCreateFragmentLinker
D3DXCreateFragmentLinkerEx
D3DXCreateKeyframedAnimationSet
D3DXCreateLine
D3DXCreateMatrixStack
D3DXCreateMesh
D3DXCreateMeshFVF
D3DXCreateNPatchMesh
D3DXCreatePMeshFromStream
D3DXCreatePRTBuffer
D3DXCreatePRTBufferTex
D3DXCreatePRTCompBuffer
D3DXCreatePRTEngine
D3DXCreatePatchMesh
D3DXCreatePolygon
D3DXCreateRenderToEnvMap
D3DXCreateRenderToSurface
D3DXCreateSPMesh
D3DXCreateSkinInfo
D3DXCreateSkinInfoFVF
D3DXCreateSkinInfoFromBlendedMesh
D3DXCreateSphere
D3DXCreateSprite
D3DXCreateTeapot
D3DXCreateTextA
D3DXCreateTextW
D3DXCreateTexture
D3DXCreateTextureFromFileA
D3DXCreateTextureFromFileExA
D3DXCreateTextureFromFileExW
D3DXCreateTextureFromFileInMemory
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateTextureFromFileW
D3DXCreateTextureFromResourceA
D3DXCreateTextureFromResourceExA
D3DXCreateTextureFromResourceExW
D3DXCreateTextureFromResourceW
D3DXCreateTextureGutterHelper
D3DXCreateTextureShader
D3DXCreateTorus
D3DXCreateVolumeTexture
D3DXCreateVolumeTextureFromFileA
D3DXCreateVolumeTextureFromFileExA
D3DXCreateVolumeTextureFromFileExW
D3DXCreateVolumeTextureFromFileInMemory
D3DXCreateVolumeTextureFromFileInMemoryEx
D3DXCreateVolumeTextureFromFileW
D3DXCreateVolumeTextureFromResourceA
D3DXCreateVolumeTextureFromResourceExA
D3DXCreateVolumeTextureFromResourceExW
D3DXCreateVolumeTextureFromResourceW
D3DXDebugMute
D3DXDeclaratorFromFVF
D3DXDisassembleEffect
D3DXDisassembleShader
D3DXFVFFromDeclarator
D3DXFileCreate
D3DXFillCubeTexture
D3DXFillCubeTextureTX
D3DXFillTexture
D3DXFillTextureTX
D3DXFillVolumeTexture
D3DXFillVolumeTextureTX
D3DXFilterTexture
D3DXFindShaderComment
D3DXFloat16To32Array
D3DXFloat32To16Array
D3DXFrameAppendChild
D3DXFrameCalculateBoundingSphere
D3DXFrameDestroy
D3DXFrameFind
D3DXFrameNumNamedMatrices
D3DXFrameRegisterNamedMatrices
D3DXFresnelTerm
D3DXGatherFragments
D3DXGatherFragmentsFromFileA
D3DXGatherFragmentsFromFileW
D3DXGatherFragmentsFromResourceA
D3DXGatherFragmentsFromResourceW
D3DXGenerateOutputDecl
D3DXGeneratePMesh
D3DXGetDeclLength
D3DXGetDeclVertexSize
D3DXGetDriverLevel
D3DXGetFVFVertexSize
D3DXGetImageInfoFromFileA
D3DXGetImageInfoFromFileInMemory
D3DXGetImageInfoFromFileW
D3DXGetImageInfoFromResourceA
D3DXGetImageInfoFromResourceW
D3DXGetPixelShaderProfile
D3DXGetShaderConstantTable
D3DXGetShaderConstantTableEx
D3DXGetShaderInputSemantics
D3DXGetShaderOutputSemantics
D3DXGetShaderSamplers
D3DXGetShaderSize
D3DXGetShaderVersion
D3DXGetVertexShaderProfile
D3DXIntersect
D3DXIntersectSubset
D3DXIntersectTri
D3DXLoadMeshFromXA
D3DXLoadMeshFromXInMemory
D3DXLoadMeshFromXResource
D3DXLoadMeshFromXW
D3DXLoadMeshFromXof
D3DXLoadMeshHierarchyFromXA
D3DXLoadMeshHierarchyFromXInMemory
D3DXLoadMeshHierarchyFromXW
D3DXLoadPRTBufferFromFileA
D3DXLoadPRTBufferFromFileW
D3DXLoadPRTCompBufferFromFileA
D3DXLoadPRTCompBufferFromFileW
D3DXLoadPatchMeshFromXof
D3DXLoadSkinMeshFromXof
D3DXLoadSurfaceFromFileA
D3DXLoadSurfaceFromFileInMemory
D3DXLoadSurfaceFromFileW
D3DXLoadSurfaceFromMemory
D3DXLoadSurfaceFromResourceA
D3DXLoadSurfaceFromResourceW
D3DXLoadSurfaceFromSurface
D3DXLoadVolumeFromFileA
D3DXLoadVolumeFromFileInMemory
D3DXLoadVolumeFromFileW
D3DXLoadVolumeFromMemory
D3DXLoadVolumeFromResourceA
D3DXLoadVolumeFromResourceW
D3DXLoadVolumeFromVolume
D3DXMatrixAffineTransformation
D3DXMatrixAffineTransformation2D
D3DXMatrixDecompose
D3DXMatrixDeterminant
D3DXMatrixInverse
D3DXMatrixLookAtLH
D3DXMatrixLookAtRH
D3DXMatrixMultiply
D3DXMatrixMultiplyTranspose
D3DXMatrixOrthoLH
D3DXMatrixOrthoOffCenterLH
D3DXMatrixOrthoOffCenterRH
D3DXMatrixOrthoRH
D3DXMatrixPerspectiveFovLH
D3DXMatrixPerspectiveFovRH
D3DXMatrixPerspectiveLH
D3DXMatrixPerspectiveOffCenterLH
D3DXMatrixPerspectiveOffCenterRH
D3DXMatrixPerspectiveRH
D3DXMatrixReflect
D3DXMatrixRotationAxis
D3DXMatrixRotationQuaternion
D3DXMatrixRotationX
D3DXMatrixRotationY
D3DXMatrixRotationYawPitchRoll
D3DXMatrixRotationZ
D3DXMatrixScaling
D3DXMatrixShadow
D3DXMatrixTransformation
D3DXMatrixTransformation2D
D3DXMatrixTranslation
D3DXMatrixTranspose
D3DXOptimizeFaces
D3DXOptimizeVertices
D3DXPlaneFromPointNormal
D3DXPlaneFromPoints
D3DXPlaneIntersectLine
D3DXPlaneNormalize
D3DXPlaneTransform
D3DXPlaneTransformArray
D3DXPreprocessShader
D3DXPreprocessShaderFromFileA
D3DXPreprocessShaderFromFileW
D3DXPreprocessShaderFromResourceA
D3DXPreprocessShaderFromResourceW
D3DXQuaternionBaryCentric
D3DXQuaternionExp
D3DXQuaternionInverse
D3DXQuaternionLn
D3DXQuaternionMultiply
D3DXQuaternionNormalize
D3DXQuaternionRotationAxis
D3DXQuaternionRotationMatrix
D3DXQuaternionRotationYawPitchRoll
D3DXQuaternionSlerp
D3DXQuaternionSquad
D3DXQuaternionSquadSetup
D3DXQuaternionToAxisAngle
D3DXRectPatchSize
D3DXSHAdd
D3DXSHDot
D3DXSHEvalConeLight
D3DXSHEvalDirection
D3DXSHEvalDirectionalLight
D3DXSHEvalHemisphereLight
D3DXSHEvalSphericalLight
D3DXSHMultiply2
D3DXSHMultiply3
D3DXSHMultiply4
D3DXSHMultiply5
D3DXSHMultiply6
D3DXSHPRTCompSplitMeshSC
D3DXSHPRTCompSuperCluster
D3DXSHProjectCubeMap
D3DXSHRotate
D3DXSHRotateZ
D3DXSHScale
D3DXSaveMeshHierarchyToFileA
D3DXSaveMeshHierarchyToFileW
D3DXSaveMeshToXA
D3DXSaveMeshToXW
D3DXSavePRTBufferToFileA
D3DXSavePRTBufferToFileW
D3DXSavePRTCompBufferToFileA
D3DXSavePRTCompBufferToFileW
D3DXSaveSurfaceToFileA
D3DXSaveSurfaceToFileInMemory
D3DXSaveSurfaceToFileW
D3DXSaveTextureToFileA
D3DXSaveTextureToFileInMemory
D3DXSaveTextureToFileW
D3DXSaveVolumeToFileA
D3DXSaveVolumeToFileInMemory
D3DXSaveVolumeToFileW
D3DXSimplifyMesh
D3DXSphereBoundProbe
D3DXSplitMesh
D3DXTessellateNPatches
D3DXTessellateRectPatch
D3DXTessellateTriPatch
D3DXTriPatchSize
D3DXUVAtlasCreate
D3DXUVAtlasPack
D3DXUVAtlasPartition
D3DXValidMesh
D3DXValidPatchMesh
D3DXVec2BaryCentric
D3DXVec2CatmullRom
D3DXVec2Hermite
D3DXVec2Normalize
D3DXVec2Transform
D3DXVec2TransformArray
D3DXVec2TransformCoord
D3DXVec2TransformCoordArray
D3DXVec2TransformNormal
D3DXVec2TransformNormalArray
D3DXVec3BaryCentric
D3DXVec3CatmullRom
D3DXVec3Hermite
D3DXVec3Normalize
D3DXVec3Project
D3DXVec3ProjectArray
D3DXVec3Transform
D3DXVec3TransformArray
D3DXVec3TransformCoord
D3DXVec3TransformCoordArray
D3DXVec3TransformNormal
D3DXVec3TransformNormalArray
D3DXVec3Unproject
D3DXVec3UnprojectArray
D3DXVec4BaryCentric
D3DXVec4CatmullRom
D3DXVec4Cross
D3DXVec4Hermite
D3DXVec4Normalize
D3DXVec4Transform
D3DXVec4TransformArray
D3DXWeldVertices

Sections

.text
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 98KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fortnite Cheat/cfg/D3DX9_40.dll
.dll windows:6 windows x64 arch:x64

Password: 3636

ad7adf86f2710c11698a95404527ada4

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:0f:78:4d:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/08/2007, 00:23

Not After

23/02/2009, 00:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:49:7c:ed:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/09/2006, 01:55

Not After

16/09/2011, 02:05

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4b:23:74:0d:85:42:d1:c0:3d:41:82:34:1f:24:e4:80:be:af:9b:10
Signer

Actual PE Digest

4b:23:74:0d:85:42:d1:c0:3d:41:82:34:1f:24:e4:80:be:af:9b:10

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d3dx9_40.pdb

Imports

msvcrt

_purecall
qsort
_stricmp
modff
iswpunct
iswdigit
iswalpha
iswspace
??3@YAXPEAX@Z
??2@YAPEAX_K@Z
memmove
_finite
_vsnprintf
malloc
_clearfp
_strdup
setlocale
free
calloc
realloc
sscanf
_strtime
_isatty
_write
_lseeki64
_fileno
__pioinfo
__badioinfo
??1type_info@@UEAA@XZ
wctomb
_itoa
_snprintf
_iob
isleadbyte
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
_CxxThrowException
memset
memcpy
__C_specific_handler
_amsg_exit
_initterm
_XcptFilter
_fpclass
tolower
srand
strtod
fread
fwrite
fflush
abort
_tempnam
_ultoa
atol
atof
isxdigit
wcstombs
_isnan
rand
strncmp
strchr
isalnum
toupper
_errno
_controlfp
strrchr
_strnicmp
modf
atoi
isalpha
isdigit
isspace
longjmp
ldexp
frexp
__CxxFrameHandler
_strdate
memcmp
floor
fmod
sqrt
powf
sqrtf
fmodf
log
cos
exp
sinf
cosf
floorf
ceilf
atan2
atan
acos
asin
sin
pow
atan2f
logf
acosf
asinf
ceil
cosh
sinh
tan
tanh
_setjmp

gdi32

GetOutlineTextMetricsA
GetGlyphOutlineW
GetCurrentObject
TranslateCharsetInfo
ExtTextOutA
MoveToEx
ExtTextOutW
CreateDIBSection
GetGlyphOutlineA
GetObjectW
GetObjectA
GetCharacterPlacementA
GetCharacterPlacementW
SetTextColor
SetBkColor
SetBkMode
GetTextMetricsA
GetTextMetricsW
GetFontLanguageInfo
CreateFontIndirectA
CreateFontIndirectW
SetTextAlign
SetMapMode
CreateCompatibleDC
DeleteDC
DeleteObject
SelectObject

kernel32

FindResourceW
HeapCreate
GetEnvironmentVariableA
TlsGetValue
HeapDestroy
TlsSetValue
TlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetProcessHeap
HeapFree
HeapAlloc
ReleaseMutex
WaitForSingleObject
CreateMutexA
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
ExpandEnvironmentStringsA
GlobalMemoryStatus
GetSystemInfo
SetEndOfFile
MoveFileW
GetTempFileNameW
MoveFileA
CompareStringA
SetFilePointer
DeleteFileW
FindResourceA
LoadResource
LockResource
SizeofResource
FreeResource
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateFileW
LocalFree
FormatMessageA
GetLastError
GetFileSizeEx
GetFullPathNameA
IsDBCSLeadByte
WriteFile
DeleteFileA
CloseHandle
ReadFile
CreateFileA
GetTempFileNameA
GetTempPathA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
GetACP
MultiByteToWideChar
WideCharToMultiByte
OutputDebugStringA
GetModuleHandleA
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
Sleep
VirtualProtect
DisableThreadLibraryCalls
lstrcmpiA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA

Exports

Exports

D3DXAssembleShader
D3DXAssembleShaderFromFileA
D3DXAssembleShaderFromFileW
D3DXAssembleShaderFromResourceA
D3DXAssembleShaderFromResourceW
D3DXBoxBoundProbe
D3DXCheckCubeTextureRequirements
D3DXCheckTextureRequirements
D3DXCheckVersion
D3DXCheckVolumeTextureRequirements
D3DXCleanMesh
D3DXColorAdjustContrast
D3DXColorAdjustSaturation
D3DXCompileShader
D3DXCompileShaderFromFileA
D3DXCompileShaderFromFileW
D3DXCompileShaderFromResourceA
D3DXCompileShaderFromResourceW
D3DXComputeBoundingBox
D3DXComputeBoundingSphere
D3DXComputeIMTFromPerTexelSignal
D3DXComputeIMTFromPerVertexSignal
D3DXComputeIMTFromSignal
D3DXComputeIMTFromTexture
D3DXComputeNormalMap
D3DXComputeNormals
D3DXComputeTangent
D3DXComputeTangentFrame
D3DXComputeTangentFrameEx
D3DXConcatenateMeshes
D3DXConvertMeshSubsetToSingleStrip
D3DXConvertMeshSubsetToStrips
D3DXCreateAnimationController
D3DXCreateBox
D3DXCreateBuffer
D3DXCreateCompressedAnimationSet
D3DXCreateCubeTexture
D3DXCreateCubeTextureFromFileA
D3DXCreateCubeTextureFromFileExA
D3DXCreateCubeTextureFromFileExW
D3DXCreateCubeTextureFromFileInMemory
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXCreateCubeTextureFromFileW
D3DXCreateCubeTextureFromResourceA
D3DXCreateCubeTextureFromResourceExA
D3DXCreateCubeTextureFromResourceExW
D3DXCreateCubeTextureFromResourceW
D3DXCreateCylinder
D3DXCreateEffect
D3DXCreateEffectCompiler
D3DXCreateEffectCompilerFromFileA
D3DXCreateEffectCompilerFromFileW
D3DXCreateEffectCompilerFromResourceA
D3DXCreateEffectCompilerFromResourceW
D3DXCreateEffectEx
D3DXCreateEffectFromFileA
D3DXCreateEffectFromFileExA
D3DXCreateEffectFromFileExW
D3DXCreateEffectFromFileW
D3DXCreateEffectFromResourceA
D3DXCreateEffectFromResourceExA
D3DXCreateEffectFromResourceExW
D3DXCreateEffectFromResourceW
D3DXCreateEffectPool
D3DXCreateFontA
D3DXCreateFontIndirectA
D3DXCreateFontIndirectW
D3DXCreateFontW
D3DXCreateFragmentLinker
D3DXCreateFragmentLinkerEx
D3DXCreateKeyframedAnimationSet
D3DXCreateLine
D3DXCreateMatrixStack
D3DXCreateMesh
D3DXCreateMeshFVF
D3DXCreateNPatchMesh
D3DXCreatePMeshFromStream
D3DXCreatePRTBuffer
D3DXCreatePRTBufferTex
D3DXCreatePRTCompBuffer
D3DXCreatePRTEngine
D3DXCreatePatchMesh
D3DXCreatePolygon
D3DXCreateRenderToEnvMap
D3DXCreateRenderToSurface
D3DXCreateSPMesh
D3DXCreateSkinInfo
D3DXCreateSkinInfoFVF
D3DXCreateSkinInfoFromBlendedMesh
D3DXCreateSphere
D3DXCreateSprite
D3DXCreateTeapot
D3DXCreateTextA
D3DXCreateTextW
D3DXCreateTexture
D3DXCreateTextureFromFileA
D3DXCreateTextureFromFileExA
D3DXCreateTextureFromFileExW
D3DXCreateTextureFromFileInMemory
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateTextureFromFileW
D3DXCreateTextureFromResourceA
D3DXCreateTextureFromResourceExA
D3DXCreateTextureFromResourceExW
D3DXCreateTextureFromResourceW
D3DXCreateTextureGutterHelper
D3DXCreateTextureShader
D3DXCreateTorus
D3DXCreateVolumeTexture
D3DXCreateVolumeTextureFromFileA
D3DXCreateVolumeTextureFromFileExA
D3DXCreateVolumeTextureFromFileExW
D3DXCreateVolumeTextureFromFileInMemory
D3DXCreateVolumeTextureFromFileInMemoryEx
D3DXCreateVolumeTextureFromFileW
D3DXCreateVolumeTextureFromResourceA
D3DXCreateVolumeTextureFromResourceExA
D3DXCreateVolumeTextureFromResourceExW
D3DXCreateVolumeTextureFromResourceW
D3DXDebugMute
D3DXDeclaratorFromFVF
D3DXDisassembleEffect
D3DXDisassembleShader
D3DXFVFFromDeclarator
D3DXFileCreate
D3DXFillCubeTexture
D3DXFillCubeTextureTX
D3DXFillTexture
D3DXFillTextureTX
D3DXFillVolumeTexture
D3DXFillVolumeTextureTX
D3DXFilterTexture
D3DXFindShaderComment
D3DXFloat16To32Array
D3DXFloat32To16Array
D3DXFrameAppendChild
D3DXFrameCalculateBoundingSphere
D3DXFrameDestroy
D3DXFrameFind
D3DXFrameNumNamedMatrices
D3DXFrameRegisterNamedMatrices
D3DXFresnelTerm
D3DXGatherFragments
D3DXGatherFragmentsFromFileA
D3DXGatherFragmentsFromFileW
D3DXGatherFragmentsFromResourceA
D3DXGatherFragmentsFromResourceW
D3DXGenerateOutputDecl
D3DXGeneratePMesh
D3DXGetDeclLength
D3DXGetDeclVertexSize
D3DXGetDriverLevel
D3DXGetFVFVertexSize
D3DXGetImageInfoFromFileA
D3DXGetImageInfoFromFileInMemory
D3DXGetImageInfoFromFileW
D3DXGetImageInfoFromResourceA
D3DXGetImageInfoFromResourceW
D3DXGetPixelShaderProfile
D3DXGetShaderConstantTable
D3DXGetShaderConstantTableEx
D3DXGetShaderInputSemantics
D3DXGetShaderOutputSemantics
D3DXGetShaderSamplers
D3DXGetShaderSize
D3DXGetShaderVersion
D3DXGetVertexShaderProfile
D3DXIntersect
D3DXIntersectSubset
D3DXIntersectTri
D3DXLoadMeshFromXA
D3DXLoadMeshFromXInMemory
D3DXLoadMeshFromXResource
D3DXLoadMeshFromXW
D3DXLoadMeshFromXof
D3DXLoadMeshHierarchyFromXA
D3DXLoadMeshHierarchyFromXInMemory
D3DXLoadMeshHierarchyFromXW
D3DXLoadPRTBufferFromFileA
D3DXLoadPRTBufferFromFileW
D3DXLoadPRTCompBufferFromFileA
D3DXLoadPRTCompBufferFromFileW
D3DXLoadPatchMeshFromXof
D3DXLoadSkinMeshFromXof
D3DXLoadSurfaceFromFileA
D3DXLoadSurfaceFromFileInMemory
D3DXLoadSurfaceFromFileW
D3DXLoadSurfaceFromMemory
D3DXLoadSurfaceFromResourceA
D3DXLoadSurfaceFromResourceW
D3DXLoadSurfaceFromSurface
D3DXLoadVolumeFromFileA
D3DXLoadVolumeFromFileInMemory
D3DXLoadVolumeFromFileW
D3DXLoadVolumeFromMemory
D3DXLoadVolumeFromResourceA
D3DXLoadVolumeFromResourceW
D3DXLoadVolumeFromVolume
D3DXMatrixAffineTransformation
D3DXMatrixAffineTransformation2D
D3DXMatrixDecompose
D3DXMatrixDeterminant
D3DXMatrixInverse
D3DXMatrixLookAtLH
D3DXMatrixLookAtRH
D3DXMatrixMultiply
D3DXMatrixMultiplyTranspose
D3DXMatrixOrthoLH
D3DXMatrixOrthoOffCenterLH
D3DXMatrixOrthoOffCenterRH
D3DXMatrixOrthoRH
D3DXMatrixPerspectiveFovLH
D3DXMatrixPerspectiveFovRH
D3DXMatrixPerspectiveLH
D3DXMatrixPerspectiveOffCenterLH
D3DXMatrixPerspectiveOffCenterRH
D3DXMatrixPerspectiveRH
D3DXMatrixReflect
D3DXMatrixRotationAxis
D3DXMatrixRotationQuaternion
D3DXMatrixRotationX
D3DXMatrixRotationY
D3DXMatrixRotationYawPitchRoll
D3DXMatrixRotationZ
D3DXMatrixScaling
D3DXMatrixShadow
D3DXMatrixTransformation
D3DXMatrixTransformation2D
D3DXMatrixTranslation
D3DXMatrixTranspose
D3DXOptimizeFaces
D3DXOptimizeVertices
D3DXPlaneFromPointNormal
D3DXPlaneFromPoints
D3DXPlaneIntersectLine
D3DXPlaneNormalize
D3DXPlaneTransform
D3DXPlaneTransformArray
D3DXPreprocessShader
D3DXPreprocessShaderFromFileA
D3DXPreprocessShaderFromFileW
D3DXPreprocessShaderFromResourceA
D3DXPreprocessShaderFromResourceW
D3DXQuaternionBaryCentric
D3DXQuaternionExp
D3DXQuaternionInverse
D3DXQuaternionLn
D3DXQuaternionMultiply
D3DXQuaternionNormalize
D3DXQuaternionRotationAxis
D3DXQuaternionRotationMatrix
D3DXQuaternionRotationYawPitchRoll
D3DXQuaternionSlerp
D3DXQuaternionSquad
D3DXQuaternionSquadSetup
D3DXQuaternionToAxisAngle
D3DXRectPatchSize
D3DXSHAdd
D3DXSHDot
D3DXSHEvalConeLight
D3DXSHEvalDirection
D3DXSHEvalDirectionalLight
D3DXSHEvalHemisphereLight
D3DXSHEvalSphericalLight
D3DXSHMultiply2
D3DXSHMultiply3
D3DXSHMultiply4
D3DXSHMultiply5
D3DXSHMultiply6
D3DXSHPRTCompSplitMeshSC
D3DXSHPRTCompSuperCluster
D3DXSHProjectCubeMap
D3DXSHRotate
D3DXSHRotateZ
D3DXSHScale
D3DXSaveMeshHierarchyToFileA
D3DXSaveMeshHierarchyToFileW
D3DXSaveMeshToXA
D3DXSaveMeshToXW
D3DXSavePRTBufferToFileA
D3DXSavePRTBufferToFileW
D3DXSavePRTCompBufferToFileA
D3DXSavePRTCompBufferToFileW
D3DXSaveSurfaceToFileA
D3DXSaveSurfaceToFileInMemory
D3DXSaveSurfaceToFileW
D3DXSaveTextureToFileA
D3DXSaveTextureToFileInMemory
D3DXSaveTextureToFileW
D3DXSaveVolumeToFileA
D3DXSaveVolumeToFileInMemory
D3DXSaveVolumeToFileW
D3DXSimplifyMesh
D3DXSphereBoundProbe
D3DXSplitMesh
D3DXTessellateNPatches
D3DXTessellateRectPatch
D3DXTessellateTriPatch
D3DXTriPatchSize
D3DXUVAtlasCreate
D3DXUVAtlasPack
D3DXUVAtlasPartition
D3DXValidMesh
D3DXValidPatchMesh
D3DXVec2BaryCentric
D3DXVec2CatmullRom
D3DXVec2Hermite
D3DXVec2Normalize
D3DXVec2Transform
D3DXVec2TransformArray
D3DXVec2TransformCoord
D3DXVec2TransformCoordArray
D3DXVec2TransformNormal
D3DXVec2TransformNormalArray
D3DXVec3BaryCentric
D3DXVec3CatmullRom
D3DXVec3Hermite
D3DXVec3Normalize
D3DXVec3Project
D3DXVec3ProjectArray
D3DXVec3Transform
D3DXVec3TransformArray
D3DXVec3TransformCoord
D3DXVec3TransformCoordArray
D3DXVec3TransformNormal
D3DXVec3TransformNormalArray
D3DXVec3Unproject
D3DXVec3UnprojectArray
D3DXVec4BaryCentric
D3DXVec4CatmullRom
D3DXVec4Cross
D3DXVec4Hermite
D3DXVec4Normalize
D3DXVec4Transform
D3DXVec4TransformArray
D3DXWeldVertices

Sections

.text
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fortnite Cheat/cfg/D3DX9_41.dll
.dll windows:6 windows x64 arch:x64

Password: 3636

a16e9b15a2fff3b60fc312eaa499c462

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:27:81:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/10/2008, 21:24

Not After

22/01/2010, 21:34

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c8:68:9d:69:58:9d:b7:d7:90:84:dd:a7:70:b9:33:1d:09:34:4b:af
Signer

Actual PE Digest

c8:68:9d:69:58:9d:b7:d7:90:84:dd:a7:70:b9:33:1d:09:34:4b:af

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d3dx9_41.pdb

Imports

msvcrt

_strdup
_clearfp
malloc
_vsnprintf
_finite
memmove
_purecall
qsort
_stricmp
modff
setlocale
iswdigit
__CxxFrameHandler
iswalpha
iswspace
??3@YAXPEAX@Z
??2@YAPEAX_K@Z
free
calloc
realloc
sscanf
_strtime
_isatty
_write
_lseeki64
_fileno
__pioinfo
__badioinfo
wctomb
_itoa
_snprintf
_iob
isleadbyte
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
_CxxThrowException
memset
memcpy
__C_specific_handler
_amsg_exit
_initterm
_XcptFilter
getenv
modf
_mbstrlen
strncmp
_fpclass
_strnicmp
strchr
strrchr
tolower
_controlfp
srand
strtod
fread
fwrite
fflush
abort
_tempnam
_ultoa
atol
atof
isxdigit
wcstombs
_isnan
rand
isalnum
_vsnwprintf
toupper
atoi
isalpha
isdigit
isspace
longjmp
ldexp
frexp
iswpunct
_errno
_strdate
memcmp
floor
fmod
sqrt
powf
sqrtf
fmodf
log
cos
exp
sinf
cosf
floorf
ceilf
atan2
atan
acos
asin
sin
pow
atan2f
logf
acosf
ceil
cosh
sinh
tan
tanh
asinf
_setjmp

gdi32

GetGlyphOutlineA
GetGlyphOutlineW
GetCurrentObject
GetOutlineTextMetricsA
TranslateCharsetInfo
ExtTextOutA
MoveToEx
ExtTextOutW
CreateDIBSection
GetObjectW
GetObjectA
GetCharacterPlacementA
GetCharacterPlacementW
SetTextColor
SetBkColor
SetBkMode
GetTextMetricsA
GetTextMetricsW
GetFontLanguageInfo
CreateFontIndirectA
CreateFontIndirectW
SetTextAlign
SetMapMode
CreateCompatibleDC
DeleteDC
DeleteObject
SelectObject

kernel32

FindResourceW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetFullPathNameA
lstrcmpiA
HeapCreate
GetEnvironmentVariableA
TlsGetValue
HeapDestroy
TlsSetValue
TlsAlloc
GetProcessHeap
HeapFree
HeapAlloc
ReleaseMutex
WaitForSingleObject
CreateMutexA
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
ExpandEnvironmentStringsA
GlobalMemoryStatus
GetSystemInfo
SetEndOfFile
MoveFileW
GetTempFileNameW
MoveFileA
CompareStringA
SetFilePointer
DeleteFileW
FindResourceA
LoadResource
LockResource
SizeofResource
FreeResource
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalFree
FormatMessageA
GetLastError
GetFullPathNameW
CreateFileW
GetFileSizeEx
IsDBCSLeadByte
WriteFile
DeleteFileA
CloseHandle
ReadFile
CreateFileA
GetTempFileNameA
GetTempPathA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
GetACP
MultiByteToWideChar
WideCharToMultiByte
OutputDebugStringA
GetModuleHandleA
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
Sleep
VirtualProtect
DisableThreadLibraryCalls

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA

Exports

Exports

D3DXAssembleShader
D3DXAssembleShaderFromFileA
D3DXAssembleShaderFromFileW
D3DXAssembleShaderFromResourceA
D3DXAssembleShaderFromResourceW
D3DXBoxBoundProbe
D3DXCheckCubeTextureRequirements
D3DXCheckTextureRequirements
D3DXCheckVersion
D3DXCheckVolumeTextureRequirements
D3DXCleanMesh
D3DXColorAdjustContrast
D3DXColorAdjustSaturation
D3DXCompileShader
D3DXCompileShaderFromFileA
D3DXCompileShaderFromFileW
D3DXCompileShaderFromResourceA
D3DXCompileShaderFromResourceW
D3DXComputeBoundingBox
D3DXComputeBoundingSphere
D3DXComputeIMTFromPerTexelSignal
D3DXComputeIMTFromPerVertexSignal
D3DXComputeIMTFromSignal
D3DXComputeIMTFromTexture
D3DXComputeNormalMap
D3DXComputeNormals
D3DXComputeTangent
D3DXComputeTangentFrame
D3DXComputeTangentFrameEx
D3DXConcatenateMeshes
D3DXConvertMeshSubsetToSingleStrip
D3DXConvertMeshSubsetToStrips
D3DXCreateAnimationController
D3DXCreateBox
D3DXCreateBuffer
D3DXCreateCompressedAnimationSet
D3DXCreateCubeTexture
D3DXCreateCubeTextureFromFileA
D3DXCreateCubeTextureFromFileExA
D3DXCreateCubeTextureFromFileExW
D3DXCreateCubeTextureFromFileInMemory
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXCreateCubeTextureFromFileW
D3DXCreateCubeTextureFromResourceA
D3DXCreateCubeTextureFromResourceExA
D3DXCreateCubeTextureFromResourceExW
D3DXCreateCubeTextureFromResourceW
D3DXCreateCylinder
D3DXCreateEffect
D3DXCreateEffectCompiler
D3DXCreateEffectCompilerFromFileA
D3DXCreateEffectCompilerFromFileW
D3DXCreateEffectCompilerFromResourceA
D3DXCreateEffectCompilerFromResourceW
D3DXCreateEffectEx
D3DXCreateEffectFromFileA
D3DXCreateEffectFromFileExA
D3DXCreateEffectFromFileExW
D3DXCreateEffectFromFileW
D3DXCreateEffectFromResourceA
D3DXCreateEffectFromResourceExA
D3DXCreateEffectFromResourceExW
D3DXCreateEffectFromResourceW
D3DXCreateEffectPool
D3DXCreateFontA
D3DXCreateFontIndirectA
D3DXCreateFontIndirectW
D3DXCreateFontW
D3DXCreateFragmentLinker
D3DXCreateFragmentLinkerEx
D3DXCreateKeyframedAnimationSet
D3DXCreateLine
D3DXCreateMatrixStack
D3DXCreateMesh
D3DXCreateMeshFVF
D3DXCreateNPatchMesh
D3DXCreatePMeshFromStream
D3DXCreatePRTBuffer
D3DXCreatePRTBufferTex
D3DXCreatePRTCompBuffer
D3DXCreatePRTEngine
D3DXCreatePatchMesh
D3DXCreatePolygon
D3DXCreateRenderToEnvMap
D3DXCreateRenderToSurface
D3DXCreateSPMesh
D3DXCreateSkinInfo
D3DXCreateSkinInfoFVF
D3DXCreateSkinInfoFromBlendedMesh
D3DXCreateSphere
D3DXCreateSprite
D3DXCreateTeapot
D3DXCreateTextA
D3DXCreateTextW
D3DXCreateTexture
D3DXCreateTextureFromFileA
D3DXCreateTextureFromFileExA
D3DXCreateTextureFromFileExW
D3DXCreateTextureFromFileInMemory
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateTextureFromFileW
D3DXCreateTextureFromResourceA
D3DXCreateTextureFromResourceExA
D3DXCreateTextureFromResourceExW
D3DXCreateTextureFromResourceW
D3DXCreateTextureGutterHelper
D3DXCreateTextureShader
D3DXCreateTorus
D3DXCreateVolumeTexture
D3DXCreateVolumeTextureFromFileA
D3DXCreateVolumeTextureFromFileExA
D3DXCreateVolumeTextureFromFileExW
D3DXCreateVolumeTextureFromFileInMemory
D3DXCreateVolumeTextureFromFileInMemoryEx
D3DXCreateVolumeTextureFromFileW
D3DXCreateVolumeTextureFromResourceA
D3DXCreateVolumeTextureFromResourceExA
D3DXCreateVolumeTextureFromResourceExW
D3DXCreateVolumeTextureFromResourceW
D3DXDebugMute
D3DXDeclaratorFromFVF
D3DXDisassembleEffect
D3DXDisassembleShader
D3DXFVFFromDeclarator
D3DXFileCreate
D3DXFillCubeTexture
D3DXFillCubeTextureTX
D3DXFillTexture
D3DXFillTextureTX
D3DXFillVolumeTexture
D3DXFillVolumeTextureTX
D3DXFilterTexture
D3DXFindShaderComment
D3DXFloat16To32Array
D3DXFloat32To16Array
D3DXFrameAppendChild
D3DXFrameCalculateBoundingSphere
D3DXFrameDestroy
D3DXFrameFind
D3DXFrameNumNamedMatrices
D3DXFrameRegisterNamedMatrices
D3DXFresnelTerm
D3DXGatherFragments
D3DXGatherFragmentsFromFileA
D3DXGatherFragmentsFromFileW
D3DXGatherFragmentsFromResourceA
D3DXGatherFragmentsFromResourceW
D3DXGenerateOutputDecl
D3DXGeneratePMesh
D3DXGetDeclLength
D3DXGetDeclVertexSize
D3DXGetDriverLevel
D3DXGetFVFVertexSize
D3DXGetImageInfoFromFileA
D3DXGetImageInfoFromFileInMemory
D3DXGetImageInfoFromFileW
D3DXGetImageInfoFromResourceA
D3DXGetImageInfoFromResourceW
D3DXGetPixelShaderProfile
D3DXGetShaderConstantTable
D3DXGetShaderConstantTableEx
D3DXGetShaderInputSemantics
D3DXGetShaderOutputSemantics
D3DXGetShaderSamplers
D3DXGetShaderSize
D3DXGetShaderVersion
D3DXGetVertexShaderProfile
D3DXIntersect
D3DXIntersectSubset
D3DXIntersectTri
D3DXLoadMeshFromXA
D3DXLoadMeshFromXInMemory
D3DXLoadMeshFromXResource
D3DXLoadMeshFromXW
D3DXLoadMeshFromXof
D3DXLoadMeshHierarchyFromXA
D3DXLoadMeshHierarchyFromXInMemory
D3DXLoadMeshHierarchyFromXW
D3DXLoadPRTBufferFromFileA
D3DXLoadPRTBufferFromFileW
D3DXLoadPRTCompBufferFromFileA
D3DXLoadPRTCompBufferFromFileW
D3DXLoadPatchMeshFromXof
D3DXLoadSkinMeshFromXof
D3DXLoadSurfaceFromFileA
D3DXLoadSurfaceFromFileInMemory
D3DXLoadSurfaceFromFileW
D3DXLoadSurfaceFromMemory
D3DXLoadSurfaceFromResourceA
D3DXLoadSurfaceFromResourceW
D3DXLoadSurfaceFromSurface
D3DXLoadVolumeFromFileA
D3DXLoadVolumeFromFileInMemory
D3DXLoadVolumeFromFileW
D3DXLoadVolumeFromMemory
D3DXLoadVolumeFromResourceA
D3DXLoadVolumeFromResourceW
D3DXLoadVolumeFromVolume
D3DXMatrixAffineTransformation
D3DXMatrixAffineTransformation2D
D3DXMatrixDecompose
D3DXMatrixDeterminant
D3DXMatrixInverse
D3DXMatrixLookAtLH
D3DXMatrixLookAtRH
D3DXMatrixMultiply
D3DXMatrixMultiplyTranspose
D3DXMatrixOrthoLH
D3DXMatrixOrthoOffCenterLH
D3DXMatrixOrthoOffCenterRH
D3DXMatrixOrthoRH
D3DXMatrixPerspectiveFovLH
D3DXMatrixPerspectiveFovRH
D3DXMatrixPerspectiveLH
D3DXMatrixPerspectiveOffCenterLH
D3DXMatrixPerspectiveOffCenterRH
D3DXMatrixPerspectiveRH
D3DXMatrixReflect
D3DXMatrixRotationAxis
D3DXMatrixRotationQuaternion
D3DXMatrixRotationX
D3DXMatrixRotationY
D3DXMatrixRotationYawPitchRoll
D3DXMatrixRotationZ
D3DXMatrixScaling
D3DXMatrixShadow
D3DXMatrixTransformation
D3DXMatrixTransformation2D
D3DXMatrixTranslation
D3DXMatrixTranspose
D3DXOptimizeFaces
D3DXOptimizeVertices
D3DXPlaneFromPointNormal
D3DXPlaneFromPoints
D3DXPlaneIntersectLine
D3DXPlaneNormalize
D3DXPlaneTransform
D3DXPlaneTransformArray
D3DXPreprocessShader
D3DXPreprocessShaderFromFileA
D3DXPreprocessShaderFromFileW
D3DXPreprocessShaderFromResourceA
D3DXPreprocessShaderFromResourceW
D3DXQuaternionBaryCentric
D3DXQuaternionExp
D3DXQuaternionInverse
D3DXQuaternionLn
D3DXQuaternionMultiply
D3DXQuaternionNormalize
D3DXQuaternionRotationAxis
D3DXQuaternionRotationMatrix
D3DXQuaternionRotationYawPitchRoll
D3DXQuaternionSlerp
D3DXQuaternionSquad
D3DXQuaternionSquadSetup
D3DXQuaternionToAxisAngle
D3DXRectPatchSize
D3DXSHAdd
D3DXSHDot
D3DXSHEvalConeLight
D3DXSHEvalDirection
D3DXSHEvalDirectionalLight
D3DXSHEvalHemisphereLight
D3DXSHEvalSphericalLight
D3DXSHMultiply2
D3DXSHMultiply3
D3DXSHMultiply4
D3DXSHMultiply5
D3DXSHMultiply6
D3DXSHPRTCompSplitMeshSC
D3DXSHPRTCompSuperCluster
D3DXSHProjectCubeMap
D3DXSHRotate
D3DXSHRotateZ
D3DXSHScale
D3DXSaveMeshHierarchyToFileA
D3DXSaveMeshHierarchyToFileW
D3DXSaveMeshToXA
D3DXSaveMeshToXW
D3DXSavePRTBufferToFileA
D3DXSavePRTBufferToFileW
D3DXSavePRTCompBufferToFileA
D3DXSavePRTCompBufferToFileW
D3DXSaveSurfaceToFileA
D3DXSaveSurfaceToFileInMemory
D3DXSaveSurfaceToFileW
D3DXSaveTextureToFileA
D3DXSaveTextureToFileInMemory
D3DXSaveTextureToFileW
D3DXSaveVolumeToFileA
D3DXSaveVolumeToFileInMemory
D3DXSaveVolumeToFileW
D3DXSimplifyMesh
D3DXSphereBoundProbe
D3DXSplitMesh
D3DXTessellateNPatches
D3DXTessellateRectPatch
D3DXTessellateTriPatch
D3DXTriPatchSize
D3DXUVAtlasCreate
D3DXUVAtlasPack
D3DXUVAtlasPartition
D3DXValidMesh
D3DXValidPatchMesh
D3DXVec2BaryCentric
D3DXVec2CatmullRom
D3DXVec2Hermite
D3DXVec2Normalize
D3DXVec2Transform
D3DXVec2TransformArray
D3DXVec2TransformCoord
D3DXVec2TransformCoordArray
D3DXVec2TransformNormal
D3DXVec2TransformNormalArray
D3DXVec3BaryCentric
D3DXVec3CatmullRom
D3DXVec3Hermite
D3DXVec3Normalize
D3DXVec3Project
D3DXVec3ProjectArray
D3DXVec3Transform
D3DXVec3TransformArray
D3DXVec3TransformCoord
D3DXVec3TransformCoordArray
D3DXVec3TransformNormal
D3DXVec3TransformNormalArray
D3DXVec3Unproject
D3DXVec3UnprojectArray
D3DXVec4BaryCentric
D3DXVec4CatmullRom
D3DXVec4Cross
D3DXVec4Hermite
D3DXVec4Normalize
D3DXVec4Transform
D3DXVec4TransformArray
D3DXWeldVertices

Sections

.text
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 106KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fortnite Cheat/cfg/InputService.dll
.dll windows:10 windows x64 arch:x64

2a6d675957847ee30ed7c31a76f64d1f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

InputService.pdb

Imports

msvcrt

wcstoul
wcsstr
_wcslwr_s
wcsrchr
towupper
_wcsicmp
wcsncpy_s
_strlwr_s
wcscpy_s
wcstok_s
wcstombs_s
??1bad_cast@@UEAA@XZ
??0bad_cast@@QEAA@PEBD@Z
??0bad_cast@@QEAA@AEBV0@@Z
realloc
iswupper
strcspn
localeconv
iswalpha
iswpunct
strchr
_wcsnicmp
sprintf_s
fflush
fclose
fputwc
iswcntrl
ungetwc
iswdigit
fgetc
__mb_cur_max
fgetwc
fwrite
_errno
wcschr
_callnewh
setvbuf
ungetc
fsetpos
_fseeki64
wcsncmp
isspace
swscanf_s
iswascii
tolower
wcsnlen
wcstol
iswprint
swprintf_s
isalnum
islower
toupper
wcscat_s
calloc
iswgraph
_ultow_s
time
qsort
qsort_s
_wtoi
rand_s
towlower
_create_locale
_free_locale
_wtof_l
___lc_collate_cp_func
setlocale
__uncaught_exception
__pctype_func
isupper
___lc_handle_func
___lc_codepage_func
memcmp
___mb_cur_max_func
_ismbblead
memset
fseek
_wfsopen
__iob_func
memchr
_wcsdup
??8type_info@@QEBAHAEBV0@@Z
__crtCompareStringW
__crtCompareStringA
__crtLCMapStringW
__crtLCMapStringA
abort
_Getdays
_Getmonths
_W_Getdays
_W_Getmonths
_W_Gettnames
_Wcsftime
_Gettnames
_Strftime
isdigit
??0exception@@QEAA@AEBQEBD@Z
_wsetlocale
_vsnprintf_s
strcpy_s
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@XZ
??0exception@@QEAA@AEBQEBDH@Z
floorf
_beginthreadex
??1exception@@UEAA@XZ
_purecall
memcpy_s
??3@YAXPEAX@Z
strrchr
logf
_CxxThrowException
iswspace
atan2
memcpy
memmove
_XcptFilter
_unlock
_amsg_exit
free
_vsnwprintf
fputc
??_V@YAXPEAX@Z
__dllonexit
swscanf
__CxxFrameHandler3
ldiv
malloc
_lock
memmove_s
sqrtf
??1type_info@@UEAA@XZ
ldexp
_initterm
atan
_wcsnicmp_l
_onexit
__C_specific_handler
wcspbrk
fgetpos
?terminate@@YAXXZ
iswalnum
?what@exception@@UEBAPEBDXZ
wcscmp

api-ms-win-core-libraryloader-l1-2-0

LoadStringW
FindStringOrdinal
GetModuleHandleExW
GetProcAddress
GetModuleFileNameW
GetModuleFileNameA
GetModuleHandleW
FreeLibrary
LoadLibraryExW

api-ms-win-core-com-l1-1-0

StringFromCLSID
IIDFromString
CoGetMalloc
CoTaskMemAlloc
CLSIDFromString
CoTaskMemRealloc
CoTaskMemFree
PropVariantClear
StringFromGUID2
CoUninitialize
CoCreateInstance
CoRegisterClassObject
CoCreateFreeThreadedMarshaler
CoGetApartmentType
CoWaitForMultipleHandles
CoRevokeClassObject
CoInitializeEx
CoIncrementMTAUsage
CoDecrementMTAUsage
CoInitializeSecurity
CoCreateGuid

api-ms-win-core-synch-l1-2-0

InitOnceComplete
WakeAllConditionVariable
SleepConditionVariableSRW
Sleep
InitOnceBeginInitialize

api-ms-win-core-synch-l1-1-0

WaitForSingleObject
InitializeSRWLock
OpenEventW
ReleaseMutex
ReleaseSRWLockExclusive
LeaveCriticalSection
AcquireSRWLockShared
ResetEvent
CreateEventW
ReleaseSemaphore
EnterCriticalSection
SetEvent
InitializeCriticalSectionEx
CreateEventExW
DeleteCriticalSection
SleepEx
InitializeCriticalSection
CreateMutexExW
ReleaseSRWLockShared
OpenSemaphoreW
WaitForSingleObjectEx
AcquireSRWLockExclusive
CreateSemaphoreExW

api-ms-win-core-heap-l1-1-0

HeapAlloc
GetProcessHeap
HeapDestroy
HeapReAlloc
HeapCreate
HeapFree

api-ms-win-core-errorhandling-l1-1-0

RaiseException
GetLastError
UnhandledExceptionFilter
SetLastError
SetUnhandledExceptionFilter

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventWrite
EventRegister
EventSetInformation
EventActivityIdControl
EventProviderEnabled
EventWriteTransfer

api-ms-win-core-threadpool-l1-2-0

WaitForThreadpoolWaitCallbacks
SetThreadpoolWait
CloseThreadpoolWait
WaitForThreadpoolTimerCallbacks
CreateThreadpoolWait
SetThreadpoolTimer
CloseThreadpoolTimer
CreateThreadpoolTimer

api-ms-win-core-processthreads-l1-1-0

TerminateProcess
OpenProcessToken
CreateThread
GetProcessIdOfThread
GetCurrentThread
SetThreadPriority
ProcessIdToSessionId
OpenThread
GetCurrentProcessId
ResumeThread
OpenThreadToken
GetCurrentProcess
GetCurrentThreadId
GetThreadId

api-ms-win-core-localization-l1-2-0

GetLocaleInfoEx
FormatMessageW
GetACP
LCMapStringW
GetLocaleInfoA
GetLocaleInfoW

api-ms-win-core-debug-l1-1-0

DebugBreak
IsDebuggerPresent
OutputDebugStringW

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-service-core-l1-1-0

RegisterServiceCtrlHandlerExW
SetServiceStatus

oleaut32

SysStringLen
VariantClear
VariantInit
SysFreeString
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
SysAllocString
VarBstrCmp

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency
QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount64
GetSystemTimeAsFileTime
GetTickCount
GetSystemTime
GetVersionExW
GetSystemDirectoryW
GetWindowsDirectoryW

api-ms-win-core-threadpool-legacy-l1-1-0

UnregisterWaitEx

textinputmethodformatter

?GetTVKRImpl@TextInputMethodFormatter@@UEAAJPEAPEAUITextVirtualizationKeyRouting@@@Z
?SetTVKRTarget@TextInputMethodFormatter@@UEAAJPEAUITextVirtualizationKeyRouting@@@Z
?Uninitialize@TextInputMethodFormatter@@UEAAJXZ
?Initialize@TextInputMethodFormatter@@QEAAJPEAUIMessagePort@@W4VirtualizationEnvironment@@PEAUIVirtualizedTextDataSender@@U_GUID@@@Z
??1TextInputMethodFormatter@@QEAA@XZ
??0TextInputMethodFormatter@@QEAA@XZ

coreuicomponents

CoreUIClientCreate
CoreUIServerCreate
CoreUIFactoryCreate

coremessaging

MsgRelease
MsgBufferShare
MsgStringCreateShared
CoreUICallReceive
CoreUICallCreateEndpointHost
CoreUICallSend
CoreUIOpenExisting
MsgBlobCreateStack
CoreUICreate
MsgBlobCreateShared

ntdll

NtQueryInformationProcess
DbgPrintEx
RtlGetDeviceFamilyInfoEnum
NtQueryWnfStateData
RtlPublishWnfStateData
RtlUnsubscribeWnfNotificationWaitForCompletion
VerSetConditionMask
RtlQueryWnfStateData
RtlSubscribeWnfStateChangeNotification
RtlUnsubscribeWnfStateChangeNotification
RtlCapabilityCheck
RtlInitUnicodeString
RtlIsMultiSessionSku

api-ms-win-core-registry-l1-1-0

RegNotifyChangeKeyValue
RegGetValueW
RegEnumValueW
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegQueryInfoKeyW
RegDeleteValueW
RegDeleteTreeW
RegOpenCurrentUser
RegCreateKeyExW

api-ms-win-stateseparation-helpers-l1-1-0

GetPersistedRegistryLocationW
GetPersistedRegistryValueW

api-ms-win-core-string-l1-1-0

GetStringTypeExW
MultiByteToWideChar
WideCharToMultiByte
CompareStringOrdinal
GetStringTypeW

api-ms-win-core-file-l1-1-0

FindNextFileW
GetFileAttributesW
UnlockFile
SetFilePointerEx
GetDriveTypeW
FindFirstFileExW
LockFile
ReadFile
CreateDirectoryW
CompareFileTime
WriteFile
GetFullPathNameW
GetFileSize
SetEndOfFile
CreateFileW
GetFileSizeEx
SetFileTime
FindClose

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-security-base-l1-1-0

CreateWellKnownSid
CheckTokenMembership
IsValidSid
IsWellKnownSid
CopySid
GetTokenInformation
GetLengthSid
RevertToSelf

api-ms-win-security-isolatedcontainer-l1-1-1

IsProcessInWDAGContainer

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-core-psapi-l1-1-0

K32GetModuleBaseNameW

api-ms-win-core-kernel32-legacy-l1-1-0

WTSGetActiveConsoleSessionId
MoveFileW

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

api-ms-win-core-shlwapi-legacy-l1-1-0

PathCombineW
PathIsPrefixW
PathFindNextComponentW
PathIsUNCW
PathAppendW
PathFileExistsW
PathGetDriveNumberW
PathIsFileSpecW
PathFindFileNameW

api-ms-win-core-heap-l2-1-0

LocalFree
LocalAlloc
LocalReAlloc

api-ms-win-rtcore-ntuser-window-l1-1-0

GetWindowTextW
GetForegroundWindow
GetWindowThreadProcessId

api-ms-win-security-sddl-l1-1-0

ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateString
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference

api-ms-win-core-winrt-l1-1-0

RoInitialize
RoUninitialize
RoActivateInstance
RoGetActivationFactory

api-ms-win-core-registry-l1-1-1

RegDeleteKeyValueW
RegSetKeyValueW

api-ms-win-core-memory-l1-1-0

CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile

api-ms-win-core-normalization-l1-1-0

NormalizeString

api-ms-win-core-localization-l1-2-2

LCIDToLocaleName

api-ms-win-core-winrt-error-l1-1-1

RoReportFailedDelegate
IsErrorPropagationEnabled
RoGetMatchingRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError
SetRestrictedErrorInfo
RoTransformError

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-core-url-l1-1-0

UrlEscapeW

api-ms-win-shcore-taskpool-l1-1-0

SHTaskPoolQueueTask

api-ms-win-core-util-l1-1-0

EncodePointer
Beep
DecodePointer

profapi

ord104

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

api-ms-win-core-shlwapi-obsolete-l1-1-0

StrRChrW
StrStrIW

api-ms-win-core-localization-obsolete-l1-2-0

GetUserDefaultUILanguage

api-ms-win-core-largeinteger-l1-1-0

MulDiv

api-ms-win-core-memory-l1-1-1

PrefetchVirtualMemory

api-ms-win-core-registry-l2-1-0

RegDeleteKeyW

api-ms-win-core-string-obsolete-l1-1-0

lstrlenW

api-ms-win-core-string-l2-1-0

CharUpperBuffW
CharLowerBuffW
CharUpperW

Exports

Exports

CreateInputMethodClient
CreateKeyEventProcessor
InitializeService
ServiceMain
SvchostPushServiceGlobals
UninitializeService

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fortnite Cheat/cfg/StartTileData.dll
.dll windows:10 windows x64 arch:x64

dc04b594b6adc9aed281d7e5ad85c7ca

Code Sign

33:00:00:04:5f:f3:c9:6c:1a:7f:f7:da:1d:00:00:00:00:04:5f
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:20

Not After

14/11/2024, 19:20

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bd:5a:23:98:af:09:65:3e:bd:88:bd:c3:69:8b:8c:c7:4c:ea:94:32:d5:67:57:f0:29:b5:40:87:d7:00:b4:c3
Signer

Actual PE Digest

bd:5a:23:98:af:09:65:3e:bd:88:bd:c3:69:8b:8c:c7:4c:ea:94:32:d5:67:57:f0:29:b5:40:87:d7:00:b4:c3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

StartTileData.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm

api-ms-win-crt-private-l1-1-0

_o__itow_s
_o__purecall
_o__register_onexit_function
_o__seh_filter_dll
_o__set_errno
_o__ui64tow_s
_o__wcsicmp
_o__wcstoi64
_o__wcstoui64
_o__wtoi
memmove
_o_bsearch_s
_o_calloc
_o_ceil
_o_free
_o_iswspace
_o_llroundl
_o_lround
_o_malloc
_o_pow
_o_rand_s
_o_realloc
_o_roundf
_o_roundl
_o_terminate
_o_towupper
_o_wcscat_s
_o_wcscpy_s
_o_wcsncpy_s
_o_wcstok_s
_o_wcstol
_o_wcstoul
_o_wcstoull
__C_specific_handler
_o__invalid_parameter_noinfo_noreturn
_o__invalid_parameter_noinfo
_o__initialize_onexit_table
_o__initialize_narrow_environment
_o__get_errno
_o__execute_onexit_table
_o__errno
_o__crt_atexit
_o__configure_narrow_argv
_o__cexit
_o__callnewh
_CxxThrowException
__CxxFrameHandler3
wcschr
wcsstr
strchr
__std_type_info_compare
wcsrchr
_o___stdio_common_vswscanf
_o___stdio_common_vswprintf_s
_o___stdio_common_vswprintf
_o___stdio_common_vsprintf_s
_o___stdio_common_vsprintf
_o___stdio_common_vsnprintf_s
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
__std_terminate
__CxxFrameHandler4
memcmp
memcpy

api-ms-win-crt-string-l1-1-0

memset
wcscspn
wcsncmp
wcsspn

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls
FreeLibrary
GetProcAddress
FindStringOrdinal
LoadStringW
GetModuleFileNameA
GetModuleHandleW
GetModuleHandleExW
GetModuleFileNameW

api-ms-win-core-synch-l1-1-0

ResetEvent
ReleaseMutex
OpenSemaphoreW
CreateSemaphoreExW
CreateEventW
ReleaseSemaphore
CreateMutexExW
CreateEventExW
WaitForSingleObjectEx
InitializeCriticalSectionEx
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
InitializeCriticalSectionAndSpinCount
ReleaseSRWLockShared
AcquireSRWLockShared
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WaitForSingleObject
InitializeSRWLock
WaitForMultipleObjectsEx

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapAlloc
HeapFree

api-ms-win-core-errorhandling-l1-1-0

SetLastError
RaiseException
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError

api-ms-win-core-processthreads-l1-1-0

TerminateProcess
CreateThread
GetCurrentProcessId
GetCurrentProcess
OpenProcessToken
GetCurrentThreadId
ProcessIdToSessionId
GetProcessId
SetThreadToken
GetCurrentThread
OpenThreadToken

api-ms-win-core-localization-l1-2-0

GetGeoInfoW
GetUserGeoID
GetUserDefaultLCID
FormatMessageW

api-ms-win-core-debug-l1-1-0

DebugBreak
OutputDebugStringW
IsDebuggerPresent

api-ms-win-core-handle-l1-1-0

CloseHandle
DuplicateHandle

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError
RoFailFastWithErrorContext
SetRestrictedErrorInfo
RoTransformError
RoOriginateErrorW
GetRestrictedErrorInfo

oleaut32

SafeArrayGetDim
VariantInit
VariantChangeType
VariantClear
SysStringLen
SysAllocString
SysFreeString

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer
EventActivityIdControl
EventRegister
EventUnregister
EventSetInformation

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolTimer
TrySubmitThreadpoolCallback
WaitForThreadpoolTimerCallbacks
CreateThreadpoolTimer
SetThreadpoolTimer

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
CompareStringOrdinal

api-ms-win-core-winrt-string-l1-1-0

WindowsDuplicateString
WindowsCreateStringReference
WindowsCreateString
WindowsGetStringLen
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsCompareStringOrdinal
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsPromoteStringBuffer
WindowsDeleteStringBuffer
WindowsPreallocateStringBuffer
WindowsConcatString

api-ms-win-core-util-l1-1-0

DecodePointer
EncodePointer

api-ms-win-core-synch-l1-2-0

InitOnceComplete
InitOnceExecuteOnce
InitOnceBeginInitialize

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind

api-ms-win-core-processthreads-l1-1-1

OpenProcess
IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount64
GetSystemInfo
GetSystemTime
GetTickCount
GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead
InterlockedPushEntrySList
InterlockedFlushSList

api-ms-win-core-com-l1-1-0

CoUninitialize
CoGetMalloc
CoEnableCallCancellation
CoCancelCall
CoCreateGuid
PropVariantClear
CoInitializeEx
CoDisableCallCancellation
StringFromGUID2
IIDFromString
CoMarshalInterThreadInterfaceInStream
CoTaskMemAlloc
CoGetInterfaceAndReleaseStream
CoCreateFreeThreadedMarshaler
CoTaskMemFree
CoTaskMemRealloc
CoIncrementMTAUsage
CoWaitForMultipleHandles
CoGetApartmentType
CoReleaseMarshalData
CreateStreamOnHGlobal
CoGetCallContext
CoMarshalInterface
CoDecrementMTAUsage
CoCreateInstance
CoRevertToSelf
CoGetObjectContext
CoGetClassObject

api-ms-win-core-winrt-l1-1-0

RoUninitialize
RoInitialize
RoGetActivationFactory
RoActivateInstance

api-ms-win-core-shlwapi-legacy-l1-1-0

PathFindFileNameW
PathIsFileSpecW
PathGetDriveNumberW
PathUnExpandEnvStringsW
PathFindExtensionW
PathStripPathW
PathIsRelativeW
SHExpandEnvironmentStringsW
PathIsUNCW
PathFileExistsW

api-ms-win-core-com-l1-1-1

RoGetAgileReference

api-ms-win-core-winrt-error-l1-1-1

IsErrorPropagationEnabled
RoOriginateLanguageException
RoGetMatchingRestrictedErrorInfo
RoReportFailedDelegate

api-ms-win-shcore-taskpool-l1-1-0

SHTaskPoolQueueTask
SHTaskPoolAllowThreadReuse
SHTaskPoolGetUniqueContext

api-ms-win-security-base-l1-1-0

GetTokenInformation
RevertToSelf
GetAce
DuplicateTokenEx
ImpersonateLoggedOnUser
IsWellKnownSid
EqualSid

api-ms-win-core-heap-l2-1-0

LocalAlloc
LocalFree

api-ms-win-security-sddl-l1-1-0

ConvertSidToStringSidW

api-ms-win-core-file-l1-1-0

CreateFileW
GetFileAttributesW
GetFileSize
GetFileAttributesExW
ReadFile
SetEndOfFile
SetFilePointer
SetFileInformationByHandle
FileTimeToLocalFileTime
RemoveDirectoryW
GetFileSizeEx
CreateDirectoryW
CompareFileTime
FindClose
FindNextFileW
FindFirstFileW
GetDiskFreeSpaceExW
WriteFile
DeleteFileW

api-ms-win-core-kernel32-legacy-l1-1-0

MoveFileW

api-ms-win-core-registry-l1-1-0

RegDisablePredefinedCacheEx
RegGetValueW
RegCloseKey
RegQueryInfoKeyW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW

api-ms-win-core-shlwapi-obsolete-l1-1-0

StrStrIW
StrCmpICW

api-ms-win-core-path-l1-1-0

PathCchFindExtension
PathCchCombine
PathAllocCombine
PathCchRemoveFileSpec
PathCchAppend
PathCchRemoveExtension

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

userenv

GetDefaultUserProfileDirectoryW

api-ms-win-core-registry-l1-1-1

RegSetKeyValueW

ntdll

RtlAddAccessAllowedAce
RtlSetDaclSecurityDescriptor
NtSetSecurityObject
NtQueryInformationToken
RtlIsMultiSessionSku
RtlGetDeviceFamilyInfoEnum
RtlGetAce
RtlInitUnicodeString
RtlCreateAcl
RtlAllocateHeap
RtlFreeHeap
RtlCompareUnicodeString
RtlLengthSid
RtlQueryInformationAcl
RtlGetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
NtQuerySecurityObject
RtlGetCurrentServiceSessionId
NtQueryWnfStateData
RtlIsMultiUsersInSessionSku
RtlPublishWnfStateData
NtSetInformationFile
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlSubscribeWnfStateChangeNotification
RtlNtStatusToDosErrorNoTeb
RtlAddAce

api-ms-win-core-sysinfo-l1-2-0

VerSetConditionMask
GetProductInfo

rpcrt4

UuidCreate

api-ms-win-core-threadpool-legacy-l1-1-0

DeleteTimerQueueTimer
CreateTimerQueueTimer

api-ms-win-shcore-sysinfo-l1-1-0

IsOS

api-ms-win-core-file-l2-1-2

CopyFileW

api-ms-win-shell-shdirectory-l1-1-0

ord292

api-ms-win-core-string-l2-1-1

SHLoadIndirectString

api-ms-win-shcore-path-l1-1-0

ord170

api-ms-win-core-psapi-l1-1-0

QueryFullProcessImageNameW
K32QueryWorkingSetEx

api-ms-win-core-memory-l1-1-1

PrefetchVirtualMemory
VirtualUnlock

api-ms-win-core-file-l2-1-0

GetFileInformationByHandleEx

api-ms-win-core-memory-l1-1-0

MapViewOfFile
UnmapViewOfFile
FlushViewOfFile
CreateFileMappingW

api-ms-win-core-quirks-l1-1-0

QuirkIsEnabledForPackage

api-ms-win-security-capability-l1-1-0

CapabilityCheck

sspicli

GetUserNameExW

api-ms-win-shcore-unicodeansi-l1-1-0

SHAnsiToUnicode

api-ms-win-shcore-comhelpers-l1-1-0

IUnknown_SetSite

api-ms-win-core-localization-l1-2-3

GetUserDefaultGeoName

api-ms-win-eventing-controller-l1-1-0

StartTraceW
ControlTraceW
EnableTraceEx2

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime

api-ms-win-core-localization-obsolete-l1-2-0

GetUserDefaultUILanguage

api-ms-win-core-url-l1-1-0

PathIsURLW
ParseURLW

api-ms-win-core-normalization-l1-1-0

GetStringScripts

api-ms-win-appmodel-state-l1-2-0

GetStateFolder
OpenStateExplicit
CloseState

api-ms-win-shell-namespace-l1-1-0

SHCreateItemFromParsingName
SHBindToParent
ILFindLastID
ILClone
SHParseDisplayName
SHCreateItemFromIDList
SHGetIDListFromObject

api-ms-win-storage-exports-internal-l1-1-0

SHGetSpecialFolderLocation

api-ms-win-shlwapi-winrt-storage-l1-1-1

SHSendMessageBroadcastW
ord316
StrRetToStrW

coremessaging

CoreUICreate

api-ms-win-storage-exports-external-l1-1-0

STORAGE_ClearDestinationsForAllApps

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

msvcp_win

?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_Xout_of_range@std@@YAXPEBD@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
_Cnd_wait
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
_Mtx_lock
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?_XGetLastError@std@@YAXXZ
?__ExceptionPtrToBool@@YA_NPEBX@Z
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
_Cnd_broadcast
_Mtx_destroy_in_situ
_Cnd_destroy_in_situ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
??0task_continuation_context@Concurrency@@AEAA@XZ
?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ
_Cnd_init_in_situ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?is@?$ctype@G@std@@QEBA_NFG@Z
??1_Locinfo@std@@QEAA@XZ
??1_Lockit@std@@QEAA@XZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??0_Locinfo@std@@QEAA@PEBD@Z
??0_Lockit@std@@QEAA@H@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
??Bid@locale@std@@QEAA_KXZ
_Wcsxfrm
_Wcscoll
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?tolower@?$ctype@G@std@@QEBAGG@Z
?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@I@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?widen@?$ctype@G@std@@QEBAGD@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?classic@locale@std@@SAAEBV12@XZ
?id@?$numpunct@D@std@@2V0locale@2@A
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ
?in@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAG3AEAPEAG@Z
??1?$codecvt@GDU_Mbstatet@@@std@@MEAA@XZ
?out@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBG1AEAPEBGPEAD3AEAPEAD@Z
??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@_K@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z
?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ
?_Xbad_function_call@std@@YAXXZ
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z
?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
?swap@?$basic_iostream@GU?$char_traits@G@std@@@std@@IEAAXAEAV12@@Z
?swap@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXAEAV12@@Z
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z
?uncaught_exception@std@@YA_NXZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?id@?$collate@G@std@@2V0locale@2@A
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z
?id@?$ctype@G@std@@2V0locale@2@A
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
_Mtx_init_in_situ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z

bcp47langs

GetUserLanguages

combase

ord148
ord168
ord154
ord147

shcore

ord200
ord191
ord190
SHUnicodeToAnsi
IUnknown_QueryService
ord123
ord213
ord270
SHStrDupA

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

api-ms-win-crt-math-l1-1-0

ceilf

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
GetSetting
HasMigratedTDLData
TryMigrateTDLData

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fortnite Cheat/cfg/Windows.AI.MachineLearning.dll
.dll windows:6 windows x64 arch:x64

372d113682de847d64474ef61656edc6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

windows.ai.machinelearning.pdb

Imports

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress
GetModuleFileNameA
LoadLibraryExA
GetModuleHandleExW
FreeLibrary
DisableThreadLibraryCalls
GetModuleHandleW

api-ms-win-core-synch-l1-2-0

Sleep
InitOnceBeginInitialize
InitOnceComplete
SleepConditionVariableSRW
InitOnceExecuteOnce
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable

api-ms-win-core-synch-l1-1-0

ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ResetEvent
ReleaseSemaphore
InitializeCriticalSectionAndSpinCount
ReleaseSRWLockShared
CreateEventW
AcquireSRWLockShared
WaitForSingleObject
InitializeCriticalSectionEx
ReleaseMutex
InitializeSRWLock
CreateSemaphoreExW
InitializeCriticalSection
EnterCriticalSection
TryAcquireSRWLockExclusive
WaitForSingleObjectEx
DeleteCriticalSection
OpenSemaphoreW
CreateMutexExW
LeaveCriticalSection
SetEvent

api-ms-win-core-heap-l1-1-0

HeapFree
GetProcessHeap
HeapAlloc

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter
SetUnhandledExceptionFilter
RaiseException
GetLastError
SetLastError

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
GetCurrentThreadId
GetProcessTimes
GetCurrentProcess
TerminateProcess
GetExitCodeThread

api-ms-win-eventing-provider-l1-1-0

EventSetInformation
EventWriteTransfer
EventRegister
EventUnregister

api-ms-win-core-processthreads-l1-1-1

OpenProcess
IsProcessorFeaturePresent

api-ms-win-core-localization-l1-2-0

GetLocaleInfoEx
GetCPInfo
LCMapStringEx
FormatMessageW

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
OutputDebugStringA
DebugBreak
OutputDebugStringW

api-ms-win-core-psapi-l1-1-0

K32GetProcessMemoryInfo

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency
QueryPerformanceCounter

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-sysinfo-l1-1-0

GetTickCount64
GetLogicalProcessorInformation
GetSystemTimeAsFileTime
GetSystemInfo

api-ms-win-core-winrt-string-l1-1-0

WindowsDeleteString
WindowsCreateString
WindowsDuplicateString
WindowsCreateStringReference
WindowsGetStringLen
WindowsPromoteStringBuffer
WindowsStringHasEmbeddedNull
WindowsPreallocateStringBuffer
WindowsDeleteStringBuffer
WindowsIsStringEmpty
WindowsGetStringRawBuffer

api-ms-win-core-string-l1-1-0

CompareStringEx
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler
CoIncrementMTAUsage
CoTaskMemAlloc
CoCreateGuid
CoTaskMemFree

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError
RoOriginateErrorW
RoTransformError
SetRestrictedErrorInfo
GetRestrictedErrorInfo

api-ms-win-core-util-l1-1-0

DecodePointer
EncodePointer

api-ms-win-core-memory-l1-1-0

VirtualQuery
VirtualAlloc
VirtualProtect
VirtualFree

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryA
LoadLibraryW

api-ms-win-crt-string-l1-1-0

strcmp
_wcsdup
isalpha
isdigit
isupper
islower
_towlower_l
_towupper_l
__strncnt
wcsnlen
_stricmp
_wcsicmp
strcspn
memset
isspace
iswspace
tolower

api-ms-win-crt-runtime-l1-1-0

_set_errno
abort
_invalid_parameter_noinfo
_beginthreadex
strerror_s
fesetround
_initterm_e
_initterm
terminate
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_errno
_invalid_parameter_noinfo_noreturn
_get_errno

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vsprintf_s
ungetc
setvbuf
fsetpos
fread
fputc
_wsopen_s
_get_stream_buffer_pointers
__stdio_common_vsnprintf_s
__acrt_iob_func
_fsopen
fflush
_wfsopen
_fseeki64
fgetpos
__stdio_common_vfprintf
__stdio_common_vsprintf
_read
fgetc
_close
_sopen_s
fclose
fwrite

api-ms-win-crt-heap-l1-1-0

_malloc_base
_realloc_base
_aligned_malloc
_calloc_base
free
calloc
_free_base
malloc
_callnewh
_aligned_free

api-ms-win-crt-locale-l1-1-0

___lc_locale_name_func
___lc_collate_cp_func
___mb_cur_max_func
_create_locale
_lock_locales
_unlock_locales
localeconv
setlocale
_free_locale
___lc_codepage_func
__pctype_func

api-ms-win-crt-math-l1-1-0

powf
sinf
pow
sinhf
sqrt
logf
acoshf
ceil
atanf
sqrtf
atanhf
ldexp
tanf
asinf
acosf
tanhf
coshf
exp
expf
floorf
log2
tanh
roundf
fmod
fmodf
asinhf
nearbyintf
log
fmaxf
cosf
_fdtest
log2f
_dtest
ceilf
frexp

api-ms-win-crt-time-l1-1-0

wcsftime
_Wcsftime
_W_Getmonths
_mktime64
_localtime64_s
_gmtime64_s
_difftime64
_W_Getdays
_Getdays
_Strftime
_Getmonths
_Gettnames
_W_Gettnames

api-ms-win-crt-convert-l1-1-0

_strtoi64
strtoll
strtoul
strtof
strtoull
strtol
strtod

api-ms-win-crt-filesystem-l1-1-0

_unlock_file
_lock_file

api-ms-win-crt-private-l1-1-0

strchr
__std_type_info_destroy_list
__processing_throw
__AdjustPointer
__current_exception
__uncaught_exception
strstr
__RTtypeid
__std_type_info_name
__std_type_info_compare
__std_terminate
memchr
_purecall
__std_exception_copy
__std_exception_destroy
__CxxFrameHandler3
_CxxThrowException
memcpy
memmove
memcmp
__C_specific_handler

ext-ms-win-dxcore-l1-1-0

DXCoreCreateAdapterFactory

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlPcToFileHeader
RtlCaptureContext
RtlVirtualUnwind

api-ms-win-core-sysinfo-l1-2-0

GetNativeSystemInfo
GetSystemTimePreciseAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead
InterlockedPushEntrySList

api-ms-win-core-file-l1-1-0

CreateFileW
SetFilePointerEx
ReadFile
GetFileSizeEx

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolWork
WaitForThreadpoolWorkCallbacks
SubmitThreadpoolWork
CloseThreadpoolWork
TrySubmitThreadpoolCallback

oleaut32

SysFreeString
SysStringLen

api-ms-win-core-winrt-error-l1-1-1

RoOriginateLanguageException

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-com-l1-1-1

RoGetAgileReference

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
MLCreateOperatorRegistry

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fortnite Cheat/cfg/Windows.StateRepository.dll
.dll windows:10 windows x64 arch:x64

ea1b7bcae41239e54d525702fc6207c6

Code Sign

33:00:00:04:5f:f3:c9:6c:1a:7f:f7:da:1d:00:00:00:00:04:5f
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:20

Not After

14/11/2024, 19:20

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b8:b8:e3:6e:49:cc:16:78:11:d6:9d:1e:74:e4:6e:6a:1a:64:b8:2d:56:e9:f5:aa:a3:49:78:9a:89:b6:ab:2a
Signer

Actual PE Digest

b8:b8:e3:6e:49:cc:16:78:11:d6:9d:1e:74:e4:6e:6a:1a:64:b8:2d:56:e9:f5:aa:a3:49:78:9a:89:b6:ab:2a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Windows.StateRepository.pdb

Imports

msvcrt

realloc
_purecall
memmove_s
_ui64tow_s
_XcptFilter
_amsg_exit
malloc
_initterm
__C_specific_handler
wcschr
_unlock
__dllonexit
_onexit
__CxxFrameHandler3
memset
_vsnwprintf
toupper
memmove
_callnewh
wcsrchr
_vsnprintf
_lock
_stricmp
memcmp
memcpy
free
memcpy_s
strcmp

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary
LoadLibraryExW
GetProcAddress
GetModuleFileNameA
GetModuleHandleW
GetModuleHandleExW

api-ms-win-core-synch-l1-1-0

CreateMutexExW
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockShared
WaitForSingleObject
InitializeCriticalSectionEx
ReleaseSemaphore
ReleaseSRWLockExclusive
DeleteCriticalSection
CreateSemaphoreExW
CreateEventW
WaitForSingleObjectEx
OpenSemaphoreW
EnterCriticalSection
LeaveCriticalSection
SetEvent
InitializeSRWLock
ReleaseMutex

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapFree
HeapAlloc

api-ms-win-core-errorhandling-l1-1-0

SetLastError
SetUnhandledExceptionFilter
RaiseException
GetLastError
UnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
TerminateProcess
GetProcessId
OpenProcessToken
GetCurrentProcessId
GetCurrentThread
OpenThreadToken
ProcessIdToSessionId
SetThreadToken
GetCurrentProcess

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
DebugBreak
IsDebuggerPresent

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventRegister
EventSetInformation
EventActivityIdControl
EventProviderEnabled
EventWriteTransfer

api-ms-win-core-threadpool-legacy-l1-1-0

UnregisterWaitEx

api-ms-win-service-core-l1-1-0

RegisterServiceCtrlHandlerExW
SetServiceStatus

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-core-synch-l1-2-0

InitOnceComplete
InitOnceExecuteOnce
InitOnceBeginInitialize
Sleep

api-ms-win-core-threadpool-l1-2-0

WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolTimer
SetThreadpoolTimer

ntdll

RtlLookupElementGenericTableAvl
RtlDowncaseUnicodeString
RtlInsertElementGenericTableAvl
RtlAcquireSRWLockExclusive
RtlReleaseSRWLockExclusive
RtlAcquireSRWLockShared
RtlReleaseSRWLockShared
RtlCompareUnicodeString
RtlFreeUnicodeString
RtlInitUnicodeString
RtlConvertSidToUnicodeString
RtlCopySid
NtQueryInformationToken
RtlExpandEnvironmentStrings
NtSetInformationThread
NtQueryInformationThread
NtQueryInformationProcess
RtlNtStatusToDosErrorNoTeb
NtQueryInformationFile
RtlIsMultiUsersInSessionSku
RtlDeleteCriticalSection
RtlInitializeCriticalSection
RtlLeaveCriticalSection
RtlEnterCriticalSection
RtlAllocateHeap
RtlFreeHeap
NtAccessCheck
RtlLengthSid
RtlEqualSid
RtlValidSid
RtlDetermineDosPathNameType_U
RtlGetDeviceFamilyInfoEnum
RtlInitializeGenericTableAvl

api-ms-win-core-realtime-l1-1-0

QueryUnbiasedInterruptTime

api-ms-win-core-heap-l2-1-0

LocalAlloc
LocalFree

api-ms-win-security-sddl-l1-1-0

ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW
ConvertStringSidToSidW

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind
RtlCaptureStackBackTrace
RtlLookupFunctionEntry
RtlCaptureContext

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount
GetLocalTime

combase

ord66
ord68
ord69
ord67

staterepository.core

sqlite3_vfs_unregister
sqlite3_vfs_register
sqlite3_vfs_find
sqlite3_expanded_sql
sqlite3_snprintf
sqlite3_profile
sqlite3_trace
sqlite3_config
sqlite3_status
sqlite3_step
sqlite3_reset
sqlite3_finalize
sqlite3_sql
sqlite3_column_type
sqlite3_column_blob
sqlite3_column_text16
sqlite3_column_bytes
sqlite3_column_text
sqlite3_column_int64
sqlite3_column_int
sqlite3_bind_blob
sqlite3_bind_text16
sqlite3_bind_int64
sqlite3_bind_int
sqlite3_bind_null
sqlite3_clear_bindings
sqlite3_db_handle
sqlite3_exec
sqlite3_stmt_busy
sqlite3_prepare_v2
sqlite3_result_text16
sqlite3_value_int64
sqlite3_free
sqlite3_result_blob
sqlite3_malloc
sqlite3_value_bytes
sqlite3_value_blob
sqlite3_value_int
sqlite3_value_text16
sqlite3_value_type
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_error_code
sqlite3_result_error16
sqlite3_result_error_nomem
sqlite3_user_data
sqlite3_create_function_v2
sqlite3_errcode
sqlite3_next_stmt
sqlite3_db_status
sqlite3_busy_timeout
sqlite3_db_filename
sqlite3_last_insert_rowid
sqlite3_changes
sqlite3_wal_checkpoint_v2
sqlite3_wal_autocheckpoint
sqlite3_db_config
sqlite3_get_autocommit
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_extended_errcode
sqlite3_open_v2
sqlite3_log
sqlite3_errmsg
sqlite3_close
sqlite3_enable_shared_cache
sqlite3_shutdown
sqlite3_initialize

api-ms-win-appmodel-runtime-internal-l1-1-3

CouldMultiUserAppsBehaviorBePossibleForPackage

api-ms-win-appmodel-runtime-internal-l1-1-1

GetPackageFullNameFromToken

api-ms-win-security-base-l1-1-0

CopySid
GetLengthSid
EqualSid
GetTokenInformation
IsValidSid
CreateWellKnownSid

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
WideCharToMultiByte
CompareStringOrdinal

api-ms-win-security-accesshlpr-l1-1-0

FreeTransientObjectSecurityDescriptor
BuildSecurityDescriptorForSharingAccess

api-ms-win-core-string-l2-1-1

SHLoadIndirectString

api-ms-win-core-file-l1-1-0

GetFileAttributesW
WriteFile
CreateFileW
DeleteFileW

api-ms-win-core-file-l2-1-0

MoveFileExW
GetFileInformationByHandleEx

api-ms-win-core-registry-l1-1-0

RegDeleteTreeW
RegCloseKey
RegEnumKeyExW
RegCreateKeyExW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
RegQueryInfoKeyW
RegSetValueExW

api-ms-win-security-lsalookup-l1-1-0

LsaLookupGetDomainInfo
LsaLookupOpenLocalPolicy
LsaLookupFreeMemory
LsaLookupClose

api-ms-win-core-psapi-l1-1-0

QueryFullProcessImageNameW

api-ms-win-security-lsalookup-l2-1-0

LookupAccountSidW

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-core-windowserrorreporting-l1-1-1

WerRegisterCustomMetadata

api-ms-win-core-path-l1-1-0

PathCchCombine

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-appmodel-runtime-l1-1-0

GetCurrentApplicationUserModelId
GetCurrentPackageFamilyName
GetCurrentPackageFullName

api-ms-win-appmodel-runtime-l1-1-1

GetApplicationUserModelIdFromToken

Exports

Exports

ServiceMain
StateRepository_DataAccessLayer_DatabaseCache_Add
StateRepository_DataAccessLayer_DatabaseCache_Get
StateRepository_Initialize
StateRepository_Service_UpdateStatus
StateRepository_Shutdown
SvchostPushServiceGlobals

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fortnite Cheat/cfg/cdp.dll
.dll regsvr32 windows:10 windows x64 arch:x64

c7385eecd78b8e8427ef963ec0938f13

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

cdp.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm

api-ms-win-crt-private-l1-1-0

_o__localtime64_s
_o__mkgmtime64
_o__mktime64
_o__purecall
_o__register_onexit_function
_o__seh_filter_dll
_o__set_errno
_o__stricmp
_o__strnicmp
_o__strtoui64
_o__wcsicmp
_o_atoi
memmove
_o_free
_o_iswspace
_o_malloc
_o_modf
_o_pow
_o_rand
_o_realloc
_o_strcpy_s
_o_strftime
_o_strncpy_s
_o_strtol
_o_strtoul
_o_terminate
_o_tolower
_o_toupper
_o_wcstoul
__C_specific_handler
_o___std_type_info_destroy_list
_o__invalid_parameter_noinfo_noreturn
_o__invalid_parameter_noinfo
_o__initialize_onexit_table
_o__initialize_narrow_environment
_o__gmtime64_s
strstr
_o___std_exception_destroy
_o___std_exception_copy
_o__get_errno
_o__execute_onexit_table
_o__errno
_o__dtest
_o__difftime64
__CxxFrameHandler4
__std_terminate
__std_type_info_compare
strchr
wcschr
__CxxFrameHandler3
_CxxThrowException
_o__crt_atexit
_o__configure_narrow_argv
_o__cexit
_o__callnewh
_o__beginthreadex
_o___stdio_common_vswprintf_s
_o___stdio_common_vswprintf
_o___stdio_common_vsscanf
_o___stdio_common_vsprintf_s
_o___stdio_common_vsprintf
_o___stdio_common_vsnprintf_s
memchr
memcmp
memcpy

api-ms-win-crt-string-l1-1-0

strpbrk
strncmp
wcsncmp
memset

combase

ord4
ord12
ord6
ord14
ord17
ord2
CStdStubBuffer_DebugServerQueryInterface
ord10
ord13
ord11
CStdStubBuffer_Invoke
ord154
ord5
ord7
ord8
CStdStubBuffer_CountRefs
NdrCStdStubBuffer_Release
CStdStubBuffer_AddRef
ord24
ord16
ord9
CStdStubBuffer_QueryInterface
CStdStubBuffer_DebugServerRelease
ord15
CStdStubBuffer_Disconnect
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Connect
ord3
CStdStubBuffer2_CountRefs
ord21
ord26
ord27
ord19
ord22
CStdStubBuffer2_Disconnect
CStdStubBuffer2_QueryInterface
ord23
CStdStubBuffer2_Connect
NdrCStdStubBuffer2_Release
ord32
ord20
ord25
ord34
ord33
ord18

ntdll

RtlNtStatusToDosError
NtOpenSemaphore
RtlIsMultiUsersInSessionSku
RtlGetDeviceFamilyInfoEnum
NtCreateWnfStateName
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlSidDominates
RtlInitUnicodeString
NtCreateSemaphore
RtlGetTokenNamedObjectPath
RtlFreeUnicodeString
RtlPublishWnfStateData
NtOpenMutant
NtQueryWnfStateData
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlSubscribeWnfStateChangeNotification
NtDeleteWnfStateName

rpcrt4

IUnknown_AddRef_Proxy
NdrOleFree
UuidFromStringW
RpcServerInqCallAttributesW
IUnknown_Release_Proxy
NdrOleAllocate
NdrClientCall3
IUnknown_QueryInterface_Proxy
NdrStubCall3
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrDllRegisterProxy
NdrDllUnregisterProxy
NdrStubForwardingFunction

api-ms-win-core-libraryloader-l1-2-0

LockResource
FreeLibrary
FindStringOrdinal
LoadResource
DisableThreadLibraryCalls
GetModuleHandleW
GetModuleHandleA
GetProcAddress
GetModuleFileNameA
GetModuleHandleExW
FindResourceExW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentThread
OpenThreadToken
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
OpenProcessToken
GetCurrentThreadId
SetThreadToken

api-ms-win-core-sysinfo-l1-1-0

GetLocalTime
GetSystemTime
GetTickCount
GetComputerNameExW
GetSystemTimeAsFileTime
GetTickCount64
GetVersionExW

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
IsDebuggerPresent
DebugBreak

api-ms-win-core-errorhandling-l1-1-0

GetLastError
SetLastError
UnhandledExceptionFilter
RaiseException
SetUnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

shcore

SHCreateMemStream
IStream_Read
IStream_Size
IStream_ReadStr
IStream_Reset
IStream_WriteStr
IStream_Write
ord190

msvcp_win

_Thrd_sleep
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
?setf@ios_base@std@@QEAAHH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?setf@ios_base@std@@QEAAHHH@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
_Thrd_detach
_Cnd_wait
_Cnd_do_broadcast_at_thread_exit
_Cnd_broadcast
_Thrd_hardware_concurrency
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?is@?$ctype@D@std@@QEBA_NFD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?id@?$collate@D@std@@2V0locale@2@A
??Bid@locale@std@@QEAA_KXZ
?id@?$ctype@D@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??0_Lockit@std@@QEAA@H@Z
??0_Locinfo@std@@QEAA@PEBD@Z
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??1_Lockit@std@@QEAA@XZ
??1_Locinfo@std@@QEAA@XZ
_Mtx_trylock
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Incref@facet@locale@std@@UEAAXXZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
_Strcoll
_Thrd_id
_Thrd_join
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
_Unlock_shared_ptr_spin_lock
_Lock_shared_ptr_spin_lock
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
?_Syserror_map@std@@YAPEBDH@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Xbad_alloc@std@@YAXXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Xbad_function_call@std@@YAXXZ
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@K@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z
?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z
?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Random_device@std@@YAIXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Throw_C_error@std@@YAXH@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
_Cnd_register_at_thread_exit
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
_Mtx_lock
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
_Mtx_init_in_situ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z
??7ios_base@std@@QEBA_NXZ
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??1?$codecvt@GDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@_K@Z
?out@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBG1AEAPEBGPEAD3AEAPEAD@Z
?in@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAG3AEAPEAG@Z
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAK@Z
_Mtx_destroy_in_situ
?good@ios_base@std@@QEBA_NXZ
_Mtx_unlock
?_Xout_of_range@std@@YAXPEBD@Z
_Cnd_signal
_Query_perf_counter
_Query_perf_frequency
_Cnd_timedwait
?_Xlength_error@std@@YAXPEBD@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
_Cnd_unregister_at_thread_exit
_Thrd_yield
?uncaught_exception@std@@YA_NXZ
?width@ios_base@std@@QEAA_J_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEBA_JXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Xtime_get_ticks
_Mtx_current_owns
?_Throw_Cpp_error@std@@YAXH@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z
_Strxfrm

api-ms-win-crt-time-l1-1-0

clock
_time64

umpdc

Pdcv2ActivationClientUnregister
Pdcv2ActivationClientRegister
Pdcv2ActivationClientActivate
Pdcv2ActivationClientDeactivate

api-ms-win-core-winrt-string-l1-1-0

HSTRING_UserUnmarshal64
HSTRING_UserUnmarshal
HSTRING_UserMarshal64
HSTRING_UserFree
HSTRING_UserSize64
HSTRING_UserFree64
HSTRING_UserMarshal
HSTRING_UserSize
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer

api-ms-win-core-string-l1-1-0

CompareStringOrdinal

api-ms-win-core-winrt-error-l1-1-1

RoGetMatchingRestrictedErrorInfo

api-ms-win-core-localization-l1-2-0

FormatMessageW
GetLocaleInfoEx
GetSystemPreferredUILanguages

api-ms-win-core-com-l1-1-0

CoSetProxyBlanket
CLSIDFromString
CoCreateInstance
StringFromCLSID
CoTaskMemAlloc
CoTaskMemFree
CoWaitForMultipleHandles
CoCreateFreeThreadedMarshaler
CoTaskMemRealloc
CoSwitchCallContext
CoImpersonateClient
CoRevertToSelf
PropVariantClear

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError
SetRestrictedErrorInfo

api-ms-win-core-winrt-l1-1-0

RoInitialize
RoGetActivationFactory
RoUninitialize
RoActivateInstance

api-ms-win-core-synch-l1-1-0

EnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
CreateSemaphoreExW
CreateEventExW
SetEvent
ReleaseSemaphore
AcquireSRWLockExclusive
WaitForSingleObject
TryAcquireSRWLockExclusive
ReleaseSRWLockExclusive
CreateMutexW
OpenMutexW
InitializeSRWLock
ResetEvent
InitializeCriticalSectionAndSpinCount
CreateMutexExW
WaitForSingleObjectEx
OpenSemaphoreW
ReleaseSRWLockShared
ReleaseMutex
DeleteCriticalSection
AcquireSRWLockShared
CreateEventW

api-ms-win-core-heap-l1-1-0

HeapAlloc
HeapFree
GetProcessHeap

api-ms-win-core-threadpool-l1-2-0

FreeLibraryWhenCallbackReturns
SetThreadpoolTimer
SetThreadpoolThreadMaximum
CloseThreadpoolWait
SubmitThreadpoolWork
CreateThreadpoolWait
WaitForThreadpoolWaitCallbacks
SetThreadpoolWait
CreateThreadpoolTimer
CloseThreadpoolWork
CreateThreadpool
CreateThreadpoolWork
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
WaitForThreadpoolWorkCallbacks
CloseThreadpool
SetThreadpoolThreadMinimum

api-ms-win-core-registry-l1-1-0

RegSetValueExW
RegCloseKey
RegGetValueW
RegEnumKeyExA
RegNotifyChangeKeyValue
RegOpenKeyExA
RegCreateKeyExW
RegQueryInfoKeyA
RegGetValueA
RegCreateKeyExA

api-ms-win-eventing-provider-l1-1-0

EventSetInformation
EventWriteTransfer
EventUnregister
EventRegister
EventProviderEnabled

api-ms-win-appmodel-runtime-l1-1-0

GetCurrentPackageInfo

api-ms-win-appmodel-runtime-l1-1-1

GetPackageFamilyNameFromToken
GetApplicationUserModelIdFromToken

api-ms-win-core-sysinfo-l2-1-0

GetUserNameW

api-ms-win-security-base-l1-1-0

GetTokenInformation
ImpersonateLoggedOnUser
RevertToSelf
GetLengthSid
CreateWellKnownSid
CopySid

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize
InitOnceComplete
Sleep

api-ms-win-core-file-l1-1-0

FindFirstFileW
DeleteFileW
GetFullPathNameW
FindNextFileW
SetFilePointerEx
RemoveDirectoryW
ReadFile
CreateDirectoryW
GetFileSizeEx
WriteFile
SetFilePointer
SetEndOfFile
GetFileAttributesW
FindClose
CreateDirectoryA
FlushFileBuffers
CreateFileW

api-ms-win-core-file-l1-2-0

CreateFile2

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-security-sddl-l1-1-0

ConvertSidToStringSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW

api-ms-win-core-heap-l2-1-0

LocalAlloc
LocalFree

api-ms-win-core-file-l2-1-0

MoveFileExW
GetFileInformationByHandleEx

api-ms-win-core-path-l1-1-0

PathAllocCombine
PathCchSkipRoot

api-ms-win-core-com-l1-1-1

RoGetAgileReference

crypt32

CertOpenStore
CertCreateCertificateContext
CryptProtectData
CryptUnprotectData
CertGetCertificateContextProperty
CertGetNameStringW
CertDeleteCertificateFromStore
CertCreateSelfSignCertificate
CertFreeCertificateContext
CertAddCertificateContextToStore
CertSaveStore
CertDuplicateCertificateContext
CertCloseStore
CertFindCertificateInStore
CertStrToNameW

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime

api-ms-win-core-io-l1-1-0

PostQueuedCompletionStatus
GetQueuedCompletionStatus
CancelIoEx
CreateIoCompletionPort
DeviceIoControl

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-devices-query-l1-1-0

DevCloseObjectQuery
DevCreateObjectQuery

propsys

PSPropertyBag_WriteStr
PSCreateMemoryPropertyStore
PSPropertyBag_WriteUnknown

api-ms-win-core-heap-obsolete-l1-1-0

LocalSize

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

kernelbase

BaseFormatObjectAttributes

dsreg

DsrGetJoinInfo
DsrFreeJoinInfo

api-ms-win-security-capability-l1-1-0

CapabilityCheck
RpcClientCapabilityCheck

api-ms-win-crt-math-l1-1-0

ceilf

Exports

Exports

CDPAccountFromWebAccount
CDPAcquireNetworkingInternal
CDPCreateAFSRegistrationClientInternal
CDPCreateAFSUserSettingsInternal
CDPCreateAccountInternalForUser
CDPCreateAccountInternalWithStableUserId
CDPCreateAccountProviderInternal
CDPCreateActivity
CDPCreateActivityAsset
CDPCreateActivityInternal
CDPCreateActivityStoreInfoInternal
CDPCreateActivityStoreInfoWatcher
CDPCreateActivityStoreInfoWatcherForUser
CDPCreateActivityStoreInfoWatcherInternal
CDPCreateActivityStoreReader
CDPCreateActivityStoreReaderForUser
CDPCreateActivityStoreReaderInternal
CDPCreateAllDevicesQuery
CDPCreateAllDevicesQueryForUser
CDPCreateAnonymousAccount
CDPCreateAnonymousAccountInternal
CDPCreateAppControlClient
CDPCreateAppControlClientInternal
CDPCreateAppId
CDPCreateAppRegistrationManager
CDPCreateAppRegistrationManagerForUser
CDPCreateAppRegistrationManagerInternal
CDPCreateAzureActiveDirectoryAccount
CDPCreateBeaconControl
CDPCreateBeaconControlInternal
CDPCreateBinaryClient
CDPCreateBinaryClientInternal
CDPCreateBinaryHost
CDPCreateBinaryHostInternal
CDPCreateBinaryHostWithSettings
CDPCreateCallbackNotifierInternal
CDPCreateCloudNotification
CDPCreateComObjectInternal
CDPCreateCrossPlatformAppId
CDPCreateCrossPlatformAppIdFromAppId
CDPCreateCurrentCrossPlatformAppId
CDPCreateDedupedDevice
CDPCreateDedupedDeviceQuery
CDPCreateDedupedDeviceQueryForUser
CDPCreateDedupedDeviceQueryInternal
CDPCreateDedupedDeviceQueryParameters
CDPCreateDeviceInternal
CDPCreateDeviceQuery
CDPCreateDeviceQueryForSessionInternal
CDPCreateDeviceQueryForUser
CDPCreateDeviceQueryInternal
CDPCreateDeviceQueryWithIdentity
CDPCreateDirectNotificationHost
CDPCreateEmptyAccountSettings
CDPCreateEnvironmentManagerInternal
CDPCreateHttpRequestInternal
CDPCreateMessagingHost
CDPCreateMessagingHostInternal
CDPCreateMicrosoftAccount
CDPCreateOrGetDdsRegistrationUserObjectInternal
CDPCreatePlatformSettingsInternal
CDPCreateRemoteUserInternal
CDPCreateResource
CDPCreateResourceCollection
CDPCreateSettingsInteropInternal
CDPCreateTask
CDPCreateTaskInternal
CDPCreateTelemetryTask
CDPCreateTelemetryTaskInternal
CDPCreateTestActivityAsset
CDPCreateUserInternal
CDPCreateUserNotificationClientInternal
CDPCreateUserServiceNotificationClient
CDPCreateUserServiceNotificationClientForUser
CDPCreateUuid
CDPFixAccounts
CDPGetAFCInitializer
CDPGetAccountProviderInternal
CDPGetAccountsNeedAttention
CDPGetAccountsSettings
CDPGetActivityStore
CDPGetActivityStoreForAccount
CDPGetActivityStoreForAccountInternal
CDPGetActivityStoreForStoreInfo
CDPGetActivityStoreForStoreInfoAndUser
CDPGetActivityStoreForStoreInfoInternal
CDPGetActivityStoreForUser
CDPGetActivityStoreInternal
CDPGetCloudNotificationProviderInternal
CDPGetCoreInitializer
CDPGetDeviceCache
CDPGetDeviceCacheInternal
CDPGetHost
CDPGetLogger
CDPGetNearShareAuthorizationPolicyOfInteractiveUser
CDPGetRelayInitializer
CDPGetResourceHandler
CDPGetResourceManager
CDPGetSDKAuthorizationPolicyOfInteractiveUser
CDPGetSGSocket
CDPGetSystemAppId
CDPGetUserActivitySettings
CDPGetUserActivitySettingsForUser
CDPGetUserActivitySettingsInternal
CDPGetUserCollectionInternal
CDPInitialize
CDPInitializeForService
CDPInitializeSGPowerOnPacket
CDPInitializeUserService
CDPInitializeUserServicePhase2
CDPIsEnabled
CDPPreShutdown
CDPRegisterActivityConflictResolverInternal
CDPReleaseNetworkingInternal
CDPResume
CDPSetAccountProviderInternal
CDPSetAppControlHostCallback
CDPSetExtendedLocalDeviceStatus
CDPSetResourceConfigProvider
CDPSetServicePid
CDPShutdown
CDPShutdownBluetooth
CDPStartCCSPolling
CDPStopCCSPolling
CDPSuspend
CDPUninitializeUserService
CDPWriteAccountSettings
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 191KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fortnite Cheat/cfg/d2d1.dll
.dll windows:10 windows x64 arch:x64

27f7fb547267b1f94c425d9bbaae8b06

Code Sign

33:00:00:04:5f:f3:c9:6c:1a:7f:f7:da:1d:00:00:00:00:04:5f
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:20

Not After

14/11/2024, 19:20

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3b:c1:c4:9a:54:56:45:7a:07:41:1c:8b:e4:40:3c:90:cc:03:aa:12:29:f9:ca:c8:4e:7b:df:01:65:ae:97:6e
Signer

Actual PE Digest

3b:c1:c4:9a:54:56:45:7a:07:41:1c:8b:e4:40:3c:90:cc:03:aa:12:29:f9:ca:c8:4e:7b:df:01:65:ae:97:6e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d2d1.pdb

Imports

msvcrt

?terminate@@YAXXZ
??1type_info@@UEAA@XZ
_aligned_realloc
_aligned_free
??0exception@@QEAA@AEBQEBD@Z
??0exception@@QEAA@AEBQEBDH@Z
??1exception@@UEAA@XZ
?what@exception@@UEBAPEBDXZ
??0exception@@QEAA@AEBV0@@Z
tolower
wcstod
iswalpha
iswspace
_wcsicmp
wcsncmp
_isnan
_vsnprintf
sqrt
sqrtf
strcmp
_CxxThrowException
_aligned_malloc
time
strstr
_itow_s
_snprintf_s
swscanf_s
modff
wcschr
memcpy
memmove
tanf
_onexit
__dllonexit
_unlock
_lock
__CxxFrameHandler3
__C_specific_handler
_initterm
_amsg_exit
_XcptFilter
realloc
wcstol
memmove_s
memcpy_s
sinf
sin
powf
memset
memcmp
logf
log
fmodf
floorf
floor
expf
_vsnwprintf
_finite
_purecall
_callnewh
malloc
_wcsnicmp
free
cosf
cos
ceilf
ceil
atan2f
atan
acosf
wcscmp

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventRegister
EventSetInformation
EventWriteTransfer

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress
LoadLibraryExW
GetModuleFileNameA
GetModuleHandleW
GetModuleHandleExW
DisableThreadLibraryCalls
GetModuleFileNameW
FindResourceExW
LockResource
FreeLibrary
LoadResource
SizeofResource

api-ms-win-core-synch-l1-1-0

InitializeCriticalSectionEx
ReleaseSemaphore
WaitForSingleObject
LeaveCriticalSection
CreateMutexExW
CreateSemaphoreExW
InitializeCriticalSectionAndSpinCount
AcquireSRWLockShared
SetEvent
ReleaseMutex
ResetEvent
OpenSemaphoreW
DeleteCriticalSection
EnterCriticalSection
ReleaseSRWLockShared
ReleaseSRWLockExclusive
CreateEventW
AcquireSRWLockExclusive
WaitForSingleObjectEx

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-registry-l1-1-0

RegEnumKeyExW
RegGetValueW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetLastError
GetLastError

api-ms-win-core-heap-l1-1-0

HeapAlloc
HeapFree
GetProcessHeap

api-ms-win-core-threadpool-l1-2-0

SubmitThreadpoolWork
WaitForThreadpoolWorkCallbacks
CreateThreadpoolWork
CloseThreadpoolWork
CreateThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
SetThreadpoolTimer

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
DebugBreak
IsDebuggerPresent
OutputDebugStringA

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount64
GetTickCount
GetSystemInfo
GetVersionExW
GetSystemDirectoryW

api-ms-win-core-synch-l1-2-0

Sleep
WakeAllConditionVariable
SleepConditionVariableSRW

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureStackBackTrace
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency
QueryPerformanceCounter

ntdll

RtlSetBit
RtlAreBitsSet
RtlInitializeBitMap
EtwEventUnregister
EtwEventRegister
EtwEventSetInformation
vDbgPrintEx
RtlHashUnicodeString
WinSqmAddToStream
WinSqmAddToAverageDWORD
WinSqmIncrementDWORD
WinSqmIsOptedIn
WinSqmAddToStreamEx
DbgPrintEx
DbgPrint
EtwEventWriteTransfer
RtlClearBits

api-ms-win-core-heap-obsolete-l1-1-0

GlobalUnlock
GlobalReAlloc
GlobalHandle
GlobalSize
GlobalLock

api-ms-win-core-heap-l2-1-0

GlobalFree
GlobalAlloc

api-ms-win-core-file-l1-1-0

ReadFile
GetFileSize
CreateFileW

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

api-ms-win-core-windowserrorreporting-l1-1-0

WerRegisterMemoryBlock

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-memory-l1-1-0

MapViewOfFile
CreateFileMappingW
UnmapViewOfFile

Exports

Exports

D2D1ComputeMaximumScaleFactor
D2D1ConvertColorSpace
D2D1CreateDevice
D2D1CreateDeviceContext
D2D1CreateFactory
D2D1GetGradientMeshInteriorPointsFromCoonsPatch
D2D1InvertMatrix
D2D1IsMatrixInvertible
D2D1MakeRotateMatrix
D2D1MakeSkewMatrix
D2D1SinCos
D2D1Tan
D2D1Vec3Length

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

RT_CODE
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fortnite Cheat/cfg/d3dcsx_42.dll
.dll windows:6 windows x64 arch:x64

604c8458f033e1670243fe36581dddfe

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:27:81:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/10/2008, 21:24

Not After

22/01/2010, 21:34

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:49:7c:ed:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/09/2006, 01:55

Not After

16/09/2011, 02:05

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b3:bf:78:68:86:e5:a0:2e:85:81:b1:ca:e3:3a:a0:6f:67:d0:fa:c3
Signer

Actual PE Digest

b3:bf:78:68:86:e5:a0:2e:85:81:b1:ca:e3:3a:a0:6f:67:d0:fa:c3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d3dcsx_42.pdb

Imports

msvcrt

_iob
_purecall
malloc
free
system
??0exception@@QEAA@AEBQEBDH@Z
_CxxThrowException
_callnewh
memcpy
_XcptFilter
_vscprintf
_amsg_exit
__C_specific_handler
_mbsdec
_ismbblead
memset
memmove
??1type_info@@UEAA@XZ
_unlock
__dllonexit
_lock
_onexit
isleadbyte
_snprintf
_itoa
wctomb
__badioinfo
__pioinfo
_fileno
_lseeki64
_write
_isatty
_stat
??0exception@@QEAA@XZ
??0exception@@QEAA@AEBQEBD@Z
??1exception@@UEAA@XZ
?what@exception@@UEBAPEBDXZ
??0exception@@QEAA@AEBV0@@Z
_errno
_initterm
__CxxFrameHandler
log
ceil
memcmp

kernel32

UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
OutputDebugStringA
DeleteCriticalSection
InitializeCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
LeaveCriticalSection
EnterCriticalSection
Sleep
VirtualProtect
DisableThreadLibraryCalls
SetUnhandledExceptionFilter

Exports

Exports

D3DX11CreateFFT
D3DX11CreateFFT1DComplex
D3DX11CreateFFT1DReal
D3DX11CreateFFT2DComplex
D3DX11CreateFFT2DReal
D3DX11CreateFFT3DComplex
D3DX11CreateFFT3DReal
D3DX11CreateScan
D3DX11CreateSegmentedScan

Sections

.text
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 213KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fortnite Cheat/cfg/d3dx9_35.dll
.dll windows:7 windows x64 arch:x64

560005318768c5fbfa5db74017532e12

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/09/2006, 01:53

Not After

16/09/2011, 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:49:7c:ed:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/09/2006, 01:55

Not After

16/09/2011, 02:05

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

54:5b:fc:0c:bc:e9:eb:27:18:34:4c:3b:16:7d:74:c1:45:57:eb:85
Signer

Actual PE Digest

54:5b:fc:0c:bc:e9:eb:27:18:34:4c:3b:16:7d:74:c1:45:57:eb:85

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d3dx9_35.pdb

Imports

msvcrt

_vsnprintf
_finite
memmove
_purecall
qsort
_stricmp
modff
iswpunct
iswdigit
iswalpha
iswspace
??3@YAXPEAX@Z
malloc
??2@YAPEAX_K@Z
_clearfp
_strdup
setlocale
free
calloc
realloc
sscanf
_strtime
_isatty
_write
_lseeki64
_fileno
__pioinfo
__badioinfo
??1type_info@@UEAA@XZ
wctomb
_itoa
_snprintf
_iob
isleadbyte
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
_CxxThrowException
memset
memcpy
__C_specific_handler
_amsg_exit
_initterm
_XcptFilter
srand
strtod
fread
fwrite
fflush
abort
_tempnam
_ultoa
atol
wcstombs
rand
isxdigit
atof
_fpclass
_isnan
strncmp
strchr
isalnum
toupper
isalpha
atoi
tolower
isdigit
isspace
_errno
_controlfp
_strnicmp
modf
longjmp
ldexp
frexp
__CxxFrameHandler
_strdate
memcmp
acos
asin
atan
atan2
ceil
cos
cosh
exp
fmod
log
pow
floor
sin
sinh
sqrt
tan
tanh
powf
sqrtf
fmodf
sinf
cosf
floorf
ceilf
atan2f
logf
acosf
asinf
_setjmp

gdi32

MoveToEx
GetGlyphOutlineW
GetCurrentObject
GetOutlineTextMetricsA
TranslateCharsetInfo
ExtTextOutA
ExtTextOutW
CreateDIBSection
GetGlyphOutlineA
GetObjectW
GetObjectA
GetCharacterPlacementA
GetCharacterPlacementW
SetTextColor
SetBkColor
SetBkMode
GetTextMetricsA
GetTextMetricsW
GetFontLanguageInfo
CreateFontIndirectA
CreateFontIndirectW
SetTextAlign
SetMapMode
CreateCompatibleDC
DeleteDC
DeleteObject
SelectObject

kernel32

FindResourceW
TlsAlloc
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetProcessHeap
HeapFree
HeapAlloc
ReleaseMutex
WaitForSingleObject
CreateMutexA
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
ExpandEnvironmentStringsA
GlobalMemoryStatus
GetSystemInfo
SetEndOfFile
MoveFileW
GetTempFileNameW
MoveFileA
CompareStringA
SetFilePointer
DeleteFileW
FreeResource
UnmapViewOfFile
FindResourceA
LoadResource
LockResource
SizeofResource
GetFileSize
CreateFileMappingA
MapViewOfFile
CreateFileW
LocalFree
GetLastError
FormatMessageA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
lstrcmpiA
GetFileSizeEx
GetFullPathNameA
IsDBCSLeadByte
WriteFile
DeleteFileA
CloseHandle
ReadFile
CreateFileA
GetTempFileNameA
GetTempPathA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
GetACP
MultiByteToWideChar
WideCharToMultiByte
OutputDebugStringA
GetModuleHandleA
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
Sleep
VirtualProtect
DisableThreadLibraryCalls

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA

Exports

Exports

D3DXAssembleShader
D3DXAssembleShaderFromFileA
D3DXAssembleShaderFromFileW
D3DXAssembleShaderFromResourceA
D3DXAssembleShaderFromResourceW
D3DXBoxBoundProbe
D3DXCheckCubeTextureRequirements
D3DXCheckTextureRequirements
D3DXCheckVersion
D3DXCheckVolumeTextureRequirements
D3DXCleanMesh
D3DXColorAdjustContrast
D3DXColorAdjustSaturation
D3DXCompileShader
D3DXCompileShaderFromFileA
D3DXCompileShaderFromFileW
D3DXCompileShaderFromResourceA
D3DXCompileShaderFromResourceW
D3DXComputeBoundingBox
D3DXComputeBoundingSphere
D3DXComputeIMTFromPerTexelSignal
D3DXComputeIMTFromPerVertexSignal
D3DXComputeIMTFromSignal
D3DXComputeIMTFromTexture
D3DXComputeNormalMap
D3DXComputeNormals
D3DXComputeTangent
D3DXComputeTangentFrame
D3DXComputeTangentFrameEx
D3DXConcatenateMeshes
D3DXConvertMeshSubsetToSingleStrip
D3DXConvertMeshSubsetToStrips
D3DXCreateAnimationController
D3DXCreateBox
D3DXCreateBuffer
D3DXCreateCompressedAnimationSet
D3DXCreateCubeTexture
D3DXCreateCubeTextureFromFileA
D3DXCreateCubeTextureFromFileExA
D3DXCreateCubeTextureFromFileExW
D3DXCreateCubeTextureFromFileInMemory
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXCreateCubeTextureFromFileW
D3DXCreateCubeTextureFromResourceA
D3DXCreateCubeTextureFromResourceExA
D3DXCreateCubeTextureFromResourceExW
D3DXCreateCubeTextureFromResourceW
D3DXCreateCylinder
D3DXCreateEffect
D3DXCreateEffectCompiler
D3DXCreateEffectCompilerFromFileA
D3DXCreateEffectCompilerFromFileW
D3DXCreateEffectCompilerFromResourceA
D3DXCreateEffectCompilerFromResourceW
D3DXCreateEffectEx
D3DXCreateEffectFromFileA
D3DXCreateEffectFromFileExA
D3DXCreateEffectFromFileExW
D3DXCreateEffectFromFileW
D3DXCreateEffectFromResourceA
D3DXCreateEffectFromResourceExA
D3DXCreateEffectFromResourceExW
D3DXCreateEffectFromResourceW
D3DXCreateEffectPool
D3DXCreateFontA
D3DXCreateFontIndirectA
D3DXCreateFontIndirectW
D3DXCreateFontW
D3DXCreateFragmentLinker
D3DXCreateKeyframedAnimationSet
D3DXCreateLine
D3DXCreateMatrixStack
D3DXCreateMesh
D3DXCreateMeshFVF
D3DXCreateNPatchMesh
D3DXCreatePMeshFromStream
D3DXCreatePRTBuffer
D3DXCreatePRTBufferTex
D3DXCreatePRTCompBuffer
D3DXCreatePRTEngine
D3DXCreatePatchMesh
D3DXCreatePolygon
D3DXCreateRenderToEnvMap
D3DXCreateRenderToSurface
D3DXCreateSPMesh
D3DXCreateSkinInfo
D3DXCreateSkinInfoFVF
D3DXCreateSkinInfoFromBlendedMesh
D3DXCreateSphere
D3DXCreateSprite
D3DXCreateTeapot
D3DXCreateTextA
D3DXCreateTextW
D3DXCreateTexture
D3DXCreateTextureFromFileA
D3DXCreateTextureFromFileExA
D3DXCreateTextureFromFileExW
D3DXCreateTextureFromFileInMemory
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateTextureFromFileW
D3DXCreateTextureFromResourceA
D3DXCreateTextureFromResourceExA
D3DXCreateTextureFromResourceExW
D3DXCreateTextureFromResourceW
D3DXCreateTextureGutterHelper
D3DXCreateTextureShader
D3DXCreateTorus
D3DXCreateVolumeTexture
D3DXCreateVolumeTextureFromFileA
D3DXCreateVolumeTextureFromFileExA
D3DXCreateVolumeTextureFromFileExW
D3DXCreateVolumeTextureFromFileInMemory
D3DXCreateVolumeTextureFromFileInMemoryEx
D3DXCreateVolumeTextureFromFileW
D3DXCreateVolumeTextureFromResourceA
D3DXCreateVolumeTextureFromResourceExA
D3DXCreateVolumeTextureFromResourceExW
D3DXCreateVolumeTextureFromResourceW
D3DXDebugMute
D3DXDeclaratorFromFVF
D3DXDisassembleEffect
D3DXDisassembleShader
D3DXFVFFromDeclarator
D3DXFileCreate
D3DXFillCubeTexture
D3DXFillCubeTextureTX
D3DXFillTexture
D3DXFillTextureTX
D3DXFillVolumeTexture
D3DXFillVolumeTextureTX
D3DXFilterTexture
D3DXFindShaderComment
D3DXFloat16To32Array
D3DXFloat32To16Array
D3DXFrameAppendChild
D3DXFrameCalculateBoundingSphere
D3DXFrameDestroy
D3DXFrameFind
D3DXFrameNumNamedMatrices
D3DXFrameRegisterNamedMatrices
D3DXFresnelTerm
D3DXGatherFragments
D3DXGatherFragmentsFromFileA
D3DXGatherFragmentsFromFileW
D3DXGatherFragmentsFromResourceA
D3DXGatherFragmentsFromResourceW
D3DXGenerateOutputDecl
D3DXGeneratePMesh
D3DXGetDeclLength
D3DXGetDeclVertexSize
D3DXGetDriverLevel
D3DXGetFVFVertexSize
D3DXGetImageInfoFromFileA
D3DXGetImageInfoFromFileInMemory
D3DXGetImageInfoFromFileW
D3DXGetImageInfoFromResourceA
D3DXGetImageInfoFromResourceW
D3DXGetPixelShaderProfile
D3DXGetShaderConstantTable
D3DXGetShaderInputSemantics
D3DXGetShaderOutputSemantics
D3DXGetShaderSamplers
D3DXGetShaderSize
D3DXGetShaderVersion
D3DXGetVertexShaderProfile
D3DXIntersect
D3DXIntersectSubset
D3DXIntersectTri
D3DXLoadMeshFromXA
D3DXLoadMeshFromXInMemory
D3DXLoadMeshFromXResource
D3DXLoadMeshFromXW
D3DXLoadMeshFromXof
D3DXLoadMeshHierarchyFromXA
D3DXLoadMeshHierarchyFromXInMemory
D3DXLoadMeshHierarchyFromXW
D3DXLoadPRTBufferFromFileA
D3DXLoadPRTBufferFromFileW
D3DXLoadPRTCompBufferFromFileA
D3DXLoadPRTCompBufferFromFileW
D3DXLoadPatchMeshFromXof
D3DXLoadSkinMeshFromXof
D3DXLoadSurfaceFromFileA
D3DXLoadSurfaceFromFileInMemory
D3DXLoadSurfaceFromFileW
D3DXLoadSurfaceFromMemory
D3DXLoadSurfaceFromResourceA
D3DXLoadSurfaceFromResourceW
D3DXLoadSurfaceFromSurface
D3DXLoadVolumeFromFileA
D3DXLoadVolumeFromFileInMemory
D3DXLoadVolumeFromFileW
D3DXLoadVolumeFromMemory
D3DXLoadVolumeFromResourceA
D3DXLoadVolumeFromResourceW
D3DXLoadVolumeFromVolume
D3DXMatrixAffineTransformation
D3DXMatrixAffineTransformation2D
D3DXMatrixDecompose
D3DXMatrixDeterminant
D3DXMatrixInverse
D3DXMatrixLookAtLH
D3DXMatrixLookAtRH
D3DXMatrixMultiply
D3DXMatrixMultiplyTranspose
D3DXMatrixOrthoLH
D3DXMatrixOrthoOffCenterLH
D3DXMatrixOrthoOffCenterRH
D3DXMatrixOrthoRH
D3DXMatrixPerspectiveFovLH
D3DXMatrixPerspectiveFovRH
D3DXMatrixPerspectiveLH
D3DXMatrixPerspectiveOffCenterLH
D3DXMatrixPerspectiveOffCenterRH
D3DXMatrixPerspectiveRH
D3DXMatrixReflect
D3DXMatrixRotationAxis
D3DXMatrixRotationQuaternion
D3DXMatrixRotationX
D3DXMatrixRotationY
D3DXMatrixRotationYawPitchRoll
D3DXMatrixRotationZ
D3DXMatrixScaling
D3DXMatrixShadow
D3DXMatrixTransformation
D3DXMatrixTransformation2D
D3DXMatrixTranslation
D3DXMatrixTranspose
D3DXOptimizeFaces
D3DXOptimizeVertices
D3DXPlaneFromPointNormal
D3DXPlaneFromPoints
D3DXPlaneIntersectLine
D3DXPlaneNormalize
D3DXPlaneTransform
D3DXPlaneTransformArray
D3DXPreprocessShader
D3DXPreprocessShaderFromFileA
D3DXPreprocessShaderFromFileW
D3DXPreprocessShaderFromResourceA
D3DXPreprocessShaderFromResourceW
D3DXQuaternionBaryCentric
D3DXQuaternionExp
D3DXQuaternionInverse
D3DXQuaternionLn
D3DXQuaternionMultiply
D3DXQuaternionNormalize
D3DXQuaternionRotationAxis
D3DXQuaternionRotationMatrix
D3DXQuaternionRotationYawPitchRoll
D3DXQuaternionSlerp
D3DXQuaternionSquad
D3DXQuaternionSquadSetup
D3DXQuaternionToAxisAngle
D3DXRectPatchSize
D3DXSHAdd
D3DXSHDot
D3DXSHEvalConeLight
D3DXSHEvalDirection
D3DXSHEvalDirectionalLight
D3DXSHEvalHemisphereLight
D3DXSHEvalSphericalLight
D3DXSHMultiply2
D3DXSHMultiply3
D3DXSHMultiply4
D3DXSHMultiply5
D3DXSHMultiply6
D3DXSHPRTCompSplitMeshSC
D3DXSHPRTCompSuperCluster
D3DXSHProjectCubeMap
D3DXSHRotate
D3DXSHRotateZ
D3DXSHScale
D3DXSaveMeshHierarchyToFileA
D3DXSaveMeshHierarchyToFileW
D3DXSaveMeshToXA
D3DXSaveMeshToXW
D3DXSavePRTBufferToFileA
D3DXSavePRTBufferToFileW
D3DXSavePRTCompBufferToFileA
D3DXSavePRTCompBufferToFileW
D3DXSaveSurfaceToFileA
D3DXSaveSurfaceToFileInMemory
D3DXSaveSurfaceToFileW
D3DXSaveTextureToFileA
D3DXSaveTextureToFileInMemory
D3DXSaveTextureToFileW
D3DXSaveVolumeToFileA
D3DXSaveVolumeToFileInMemory
D3DXSaveVolumeToFileW
D3DXSimplifyMesh
D3DXSphereBoundProbe
D3DXSplitMesh
D3DXTessellateNPatches
D3DXTessellateRectPatch
D3DXTessellateTriPatch
D3DXTriPatchSize
D3DXUVAtlasCreate
D3DXUVAtlasPack
D3DXUVAtlasPartition
D3DXValidMesh
D3DXValidPatchMesh
D3DXVec2BaryCentric
D3DXVec2CatmullRom
D3DXVec2Hermite
D3DXVec2Normalize
D3DXVec2Transform
D3DXVec2TransformArray
D3DXVec2TransformCoord
D3DXVec2TransformCoordArray
D3DXVec2TransformNormal
D3DXVec2TransformNormalArray
D3DXVec3BaryCentric
D3DXVec3CatmullRom
D3DXVec3Hermite
D3DXVec3Normalize
D3DXVec3Project
D3DXVec3ProjectArray
D3DXVec3Transform
D3DXVec3TransformArray
D3DXVec3TransformCoord
D3DXVec3TransformCoordArray
D3DXVec3TransformNormal
D3DXVec3TransformNormalArray
D3DXVec3Unproject
D3DXVec3UnprojectArray
D3DXVec4BaryCentric
D3DXVec4CatmullRom
D3DXVec4Cross
D3DXVec4Hermite
D3DXVec4Normalize
D3DXVec4Transform
D3DXVec4TransformArray
D3DXWeldVertices

Sections

.text
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 95KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fortnite Cheat/cfg/d3dx9_36.dll
.dll windows:6 windows x64 arch:x64

560005318768c5fbfa5db74017532e12

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:0f:78:4d:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/08/2007, 00:23

Not After

23/02/2009, 00:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/09/2006, 01:53

Not After

16/09/2011, 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:49:7c:ed:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/09/2006, 01:55

Not After

16/09/2011, 02:05

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a9:77:86:1c:cd:8c:c6:56:57:1f:33:ec:2b:09:11:51:79:8e:3b:db
Signer

Actual PE Digest

a9:77:86:1c:cd:8c:c6:56:57:1f:33:ec:2b:09:11:51:79:8e:3b:db

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d3dx9_36.pdb

Imports

msvcrt

_vsnprintf
_finite
memmove
_purecall
qsort
_stricmp
modff
iswpunct
iswdigit
iswalpha
iswspace
??3@YAXPEAX@Z
malloc
??2@YAPEAX_K@Z
_clearfp
_strdup
setlocale
free
calloc
realloc
sscanf
_strtime
_isatty
_write
_lseeki64
_fileno
__pioinfo
__badioinfo
??1type_info@@UEAA@XZ
wctomb
_itoa
_snprintf
_iob
isleadbyte
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
_CxxThrowException
memset
memcpy
__C_specific_handler
_amsg_exit
_initterm
_XcptFilter
srand
strtod
fread
fwrite
fflush
abort
_tempnam
_ultoa
atol
wcstombs
rand
isxdigit
atof
_fpclass
_isnan
strncmp
strchr
isalnum
toupper
isalpha
atoi
tolower
isdigit
isspace
_errno
_controlfp
_strnicmp
modf
longjmp
ldexp
frexp
__CxxFrameHandler
_strdate
memcmp
acos
asin
atan
atan2
ceil
cos
cosh
exp
fmod
log
pow
floor
sin
sinh
sqrt
tan
tanh
powf
sqrtf
fmodf
sinf
cosf
floorf
ceilf
atan2f
logf
acosf
asinf
_setjmp

gdi32

MoveToEx
GetGlyphOutlineW
GetCurrentObject
GetOutlineTextMetricsA
TranslateCharsetInfo
ExtTextOutA
ExtTextOutW
CreateDIBSection
GetGlyphOutlineA
GetObjectW
GetObjectA
GetCharacterPlacementA
GetCharacterPlacementW
SetTextColor
SetBkColor
SetBkMode
GetTextMetricsA
GetTextMetricsW
GetFontLanguageInfo
CreateFontIndirectA
CreateFontIndirectW
SetTextAlign
SetMapMode
CreateCompatibleDC
DeleteDC
DeleteObject
SelectObject

kernel32

FindResourceW
TlsAlloc
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetProcessHeap
HeapFree
HeapAlloc
ReleaseMutex
WaitForSingleObject
CreateMutexA
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
ExpandEnvironmentStringsA
GlobalMemoryStatus
GetSystemInfo
SetEndOfFile
MoveFileW
GetTempFileNameW
MoveFileA
CompareStringA
SetFilePointer
DeleteFileW
FreeResource
UnmapViewOfFile
FindResourceA
LoadResource
LockResource
SizeofResource
GetFileSize
CreateFileMappingA
MapViewOfFile
CreateFileW
LocalFree
GetLastError
FormatMessageA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
lstrcmpiA
GetFileSizeEx
GetFullPathNameA
IsDBCSLeadByte
WriteFile
DeleteFileA
CloseHandle
ReadFile
CreateFileA
GetTempFileNameA
GetTempPathA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
GetACP
MultiByteToWideChar
WideCharToMultiByte
OutputDebugStringA
GetModuleHandleA
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
Sleep
VirtualProtect
DisableThreadLibraryCalls

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA

Exports

Exports

D3DXAssembleShader
D3DXAssembleShaderFromFileA
D3DXAssembleShaderFromFileW
D3DXAssembleShaderFromResourceA
D3DXAssembleShaderFromResourceW
D3DXBoxBoundProbe
D3DXCheckCubeTextureRequirements
D3DXCheckTextureRequirements
D3DXCheckVersion
D3DXCheckVolumeTextureRequirements
D3DXCleanMesh
D3DXColorAdjustContrast
D3DXColorAdjustSaturation
D3DXCompileShader
D3DXCompileShaderFromFileA
D3DXCompileShaderFromFileW
D3DXCompileShaderFromResourceA
D3DXCompileShaderFromResourceW
D3DXComputeBoundingBox
D3DXComputeBoundingSphere
D3DXComputeIMTFromPerTexelSignal
D3DXComputeIMTFromPerVertexSignal
D3DXComputeIMTFromSignal
D3DXComputeIMTFromTexture
D3DXComputeNormalMap
D3DXComputeNormals
D3DXComputeTangent
D3DXComputeTangentFrame
D3DXComputeTangentFrameEx
D3DXConcatenateMeshes
D3DXConvertMeshSubsetToSingleStrip
D3DXConvertMeshSubsetToStrips
D3DXCreateAnimationController
D3DXCreateBox
D3DXCreateBuffer
D3DXCreateCompressedAnimationSet
D3DXCreateCubeTexture
D3DXCreateCubeTextureFromFileA
D3DXCreateCubeTextureFromFileExA
D3DXCreateCubeTextureFromFileExW
D3DXCreateCubeTextureFromFileInMemory
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXCreateCubeTextureFromFileW
D3DXCreateCubeTextureFromResourceA
D3DXCreateCubeTextureFromResourceExA
D3DXCreateCubeTextureFromResourceExW
D3DXCreateCubeTextureFromResourceW
D3DXCreateCylinder
D3DXCreateEffect
D3DXCreateEffectCompiler
D3DXCreateEffectCompilerFromFileA
D3DXCreateEffectCompilerFromFileW
D3DXCreateEffectCompilerFromResourceA
D3DXCreateEffectCompilerFromResourceW
D3DXCreateEffectEx
D3DXCreateEffectFromFileA
D3DXCreateEffectFromFileExA
D3DXCreateEffectFromFileExW
D3DXCreateEffectFromFileW
D3DXCreateEffectFromResourceA
D3DXCreateEffectFromResourceExA
D3DXCreateEffectFromResourceExW
D3DXCreateEffectFromResourceW
D3DXCreateEffectPool
D3DXCreateFontA
D3DXCreateFontIndirectA
D3DXCreateFontIndirectW
D3DXCreateFontW
D3DXCreateFragmentLinker
D3DXCreateFragmentLinkerEx
D3DXCreateKeyframedAnimationSet
D3DXCreateLine
D3DXCreateMatrixStack
D3DXCreateMesh
D3DXCreateMeshFVF
D3DXCreateNPatchMesh
D3DXCreatePMeshFromStream
D3DXCreatePRTBuffer
D3DXCreatePRTBufferTex
D3DXCreatePRTCompBuffer
D3DXCreatePRTEngine
D3DXCreatePatchMesh
D3DXCreatePolygon
D3DXCreateRenderToEnvMap
D3DXCreateRenderToSurface
D3DXCreateSPMesh
D3DXCreateSkinInfo
D3DXCreateSkinInfoFVF
D3DXCreateSkinInfoFromBlendedMesh
D3DXCreateSphere
D3DXCreateSprite
D3DXCreateTeapot
D3DXCreateTextA
D3DXCreateTextW
D3DXCreateTexture
D3DXCreateTextureFromFileA
D3DXCreateTextureFromFileExA
D3DXCreateTextureFromFileExW
D3DXCreateTextureFromFileInMemory
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateTextureFromFileW
D3DXCreateTextureFromResourceA
D3DXCreateTextureFromResourceExA
D3DXCreateTextureFromResourceExW
D3DXCreateTextureFromResourceW
D3DXCreateTextureGutterHelper
D3DXCreateTextureShader
D3DXCreateTorus
D3DXCreateVolumeTexture
D3DXCreateVolumeTextureFromFileA
D3DXCreateVolumeTextureFromFileExA
D3DXCreateVolumeTextureFromFileExW
D3DXCreateVolumeTextureFromFileInMemory
D3DXCreateVolumeTextureFromFileInMemoryEx
D3DXCreateVolumeTextureFromFileW
D3DXCreateVolumeTextureFromResourceA
D3DXCreateVolumeTextureFromResourceExA
D3DXCreateVolumeTextureFromResourceExW
D3DXCreateVolumeTextureFromResourceW
D3DXDebugMute
D3DXDeclaratorFromFVF
D3DXDisassembleEffect
D3DXDisassembleShader
D3DXFVFFromDeclarator
D3DXFileCreate
D3DXFillCubeTexture
D3DXFillCubeTextureTX
D3DXFillTexture
D3DXFillTextureTX
D3DXFillVolumeTexture
D3DXFillVolumeTextureTX
D3DXFilterTexture
D3DXFindShaderComment
D3DXFloat16To32Array
D3DXFloat32To16Array
D3DXFrameAppendChild
D3DXFrameCalculateBoundingSphere
D3DXFrameDestroy
D3DXFrameFind
D3DXFrameNumNamedMatrices
D3DXFrameRegisterNamedMatrices
D3DXFresnelTerm
D3DXGatherFragments
D3DXGatherFragmentsFromFileA
D3DXGatherFragmentsFromFileW
D3DXGatherFragmentsFromResourceA
D3DXGatherFragmentsFromResourceW
D3DXGenerateOutputDecl
D3DXGeneratePMesh
D3DXGetDeclLength
D3DXGetDeclVertexSize
D3DXGetDriverLevel
D3DXGetFVFVertexSize
D3DXGetImageInfoFromFileA
D3DXGetImageInfoFromFileInMemory
D3DXGetImageInfoFromFileW
D3DXGetImageInfoFromResourceA
D3DXGetImageInfoFromResourceW
D3DXGetPixelShaderProfile
D3DXGetShaderConstantTable
D3DXGetShaderConstantTableEx
D3DXGetShaderInputSemantics
D3DXGetShaderOutputSemantics
D3DXGetShaderSamplers
D3DXGetShaderSize
D3DXGetShaderVersion
D3DXGetVertexShaderProfile
D3DXIntersect
D3DXIntersectSubset
D3DXIntersectTri
D3DXLoadMeshFromXA
D3DXLoadMeshFromXInMemory
D3DXLoadMeshFromXResource
D3DXLoadMeshFromXW
D3DXLoadMeshFromXof
D3DXLoadMeshHierarchyFromXA
D3DXLoadMeshHierarchyFromXInMemory
D3DXLoadMeshHierarchyFromXW
D3DXLoadPRTBufferFromFileA
D3DXLoadPRTBufferFromFileW
D3DXLoadPRTCompBufferFromFileA
D3DXLoadPRTCompBufferFromFileW
D3DXLoadPatchMeshFromXof
D3DXLoadSkinMeshFromXof
D3DXLoadSurfaceFromFileA
D3DXLoadSurfaceFromFileInMemory
D3DXLoadSurfaceFromFileW
D3DXLoadSurfaceFromMemory
D3DXLoadSurfaceFromResourceA
D3DXLoadSurfaceFromResourceW
D3DXLoadSurfaceFromSurface
D3DXLoadVolumeFromFileA
D3DXLoadVolumeFromFileInMemory
D3DXLoadVolumeFromFileW
D3DXLoadVolumeFromMemory
D3DXLoadVolumeFromResourceA
D3DXLoadVolumeFromResourceW
D3DXLoadVolumeFromVolume
D3DXMatrixAffineTransformation
D3DXMatrixAffineTransformation2D
D3DXMatrixDecompose
D3DXMatrixDeterminant
D3DXMatrixInverse
D3DXMatrixLookAtLH
D3DXMatrixLookAtRH
D3DXMatrixMultiply
D3DXMatrixMultiplyTranspose
D3DXMatrixOrthoLH
D3DXMatrixOrthoOffCenterLH
D3DXMatrixOrthoOffCenterRH
D3DXMatrixOrthoRH
D3DXMatrixPerspectiveFovLH
D3DXMatrixPerspectiveFovRH
D3DXMatrixPerspectiveLH
D3DXMatrixPerspectiveOffCenterLH
D3DXMatrixPerspectiveOffCenterRH
D3DXMatrixPerspectiveRH
D3DXMatrixReflect
D3DXMatrixRotationAxis
D3DXMatrixRotationQuaternion
D3DXMatrixRotationX
D3DXMatrixRotationY
D3DXMatrixRotationYawPitchRoll
D3DXMatrixRotationZ
D3DXMatrixScaling
D3DXMatrixShadow
D3DXMatrixTransformation
D3DXMatrixTransformation2D
D3DXMatrixTranslation
D3DXMatrixTranspose
D3DXOptimizeFaces
D3DXOptimizeVertices
D3DXPlaneFromPointNormal
D3DXPlaneFromPoints
D3DXPlaneIntersectLine
D3DXPlaneNormalize
D3DXPlaneTransform
D3DXPlaneTransformArray
D3DXPreprocessShader
D3DXPreprocessShaderFromFileA
D3DXPreprocessShaderFromFileW
D3DXPreprocessShaderFromResourceA
D3DXPreprocessShaderFromResourceW
D3DXQuaternionBaryCentric
D3DXQuaternionExp
D3DXQuaternionInverse
D3DXQuaternionLn
D3DXQuaternionMultiply
D3DXQuaternionNormalize
D3DXQuaternionRotationAxis
D3DXQuaternionRotationMatrix
D3DXQuaternionRotationYawPitchRoll
D3DXQuaternionSlerp
D3DXQuaternionSquad
D3DXQuaternionSquadSetup
D3DXQuaternionToAxisAngle
D3DXRectPatchSize
D3DXSHAdd
D3DXSHDot
D3DXSHEvalConeLight
D3DXSHEvalDirection
D3DXSHEvalDirectionalLight
D3DXSHEvalHemisphereLight
D3DXSHEvalSphericalLight
D3DXSHMultiply2
D3DXSHMultiply3
D3DXSHMultiply4
D3DXSHMultiply5
D3DXSHMultiply6
D3DXSHPRTCompSplitMeshSC
D3DXSHPRTCompSuperCluster
D3DXSHProjectCubeMap
D3DXSHRotate
D3DXSHRotateZ
D3DXSHScale
D3DXSaveMeshHierarchyToFileA
D3DXSaveMeshHierarchyToFileW
D3DXSaveMeshToXA
D3DXSaveMeshToXW
D3DXSavePRTBufferToFileA
D3DXSavePRTBufferToFileW
D3DXSavePRTCompBufferToFileA
D3DXSavePRTCompBufferToFileW
D3DXSaveSurfaceToFileA
D3DXSaveSurfaceToFileInMemory
D3DXSaveSurfaceToFileW
D3DXSaveTextureToFileA
D3DXSaveTextureToFileInMemory
D3DXSaveTextureToFileW
D3DXSaveVolumeToFileA
D3DXSaveVolumeToFileInMemory
D3DXSaveVolumeToFileW
D3DXSimplifyMesh
D3DXSphereBoundProbe
D3DXSplitMesh
D3DXTessellateNPatches
D3DXTessellateRectPatch
D3DXTessellateTriPatch
D3DXTriPatchSize
D3DXUVAtlasCreate
D3DXUVAtlasPack
D3DXUVAtlasPartition
D3DXValidMesh
D3DXValidPatchMesh
D3DXVec2BaryCentric
D3DXVec2CatmullRom
D3DXVec2Hermite
D3DXVec2Normalize
D3DXVec2Transform
D3DXVec2TransformArray
D3DXVec2TransformCoord
D3DXVec2TransformCoordArray
D3DXVec2TransformNormal
D3DXVec2TransformNormalArray
D3DXVec3BaryCentric
D3DXVec3CatmullRom
D3DXVec3Hermite
D3DXVec3Normalize
D3DXVec3Project
D3DXVec3ProjectArray
D3DXVec3Transform
D3DXVec3TransformArray
D3DXVec3TransformCoord
D3DXVec3TransformCoordArray
D3DXVec3TransformNormal
D3DXVec3TransformNormalArray
D3DXVec3Unproject
D3DXVec3UnprojectArray
D3DXVec4BaryCentric
D3DXVec4CatmullRom
D3DXVec4Cross
D3DXVec4Hermite
D3DXVec4Normalize
D3DXVec4Transform
D3DXVec4TransformArray
D3DXWeldVertices

Sections

.text
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 95KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fortnite Cheat/cfg/jscript9.dll
.dll regsvr32 windows:10 windows x64 arch:x64

069b9b3149c7a82e43cb53a3a54f50ea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

jscript9.pdb

Imports

ntdll

RtlCaptureContext

msvcrt

memcmp
qsort
isdigit
isalpha
_wcslwr_s
_wasctime_s
_vscwprintf
qsort_s
modf
_tzset
_ui64tow_s
_itow_s
_snwprintf_s
_beginthreadex
fwprintf
_flushall
fflush
fwprintf_s
atan
rand
srand
wcstok_s
wcsrchr
_wfsopen
_wsplitpath_s
acos
wcstoul
_stricmp
vswprintf_s
_i64tow_s
_wcsicmp
_localtime64_s
swprintf_s
_ltow
wcscat_s
_vsnwprintf_s
_ltow_s
_ultow_s
_controlfp_s
__C_specific_handler
_wcsnicmp
wcsncmp
wcsncpy_s
realloc
_wcsdup
wcschr
free
malloc
wcscpy_s
memmove_s
_vsnprintf_s
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@XZ
??1exception@@UEAA@XZ
atan2
wcsstr
asin
cos
exp
log
sin
tan
strncmp
wcsncat_s
iswalpha
_callnewh
_XcptFilter
_amsg_exit
_initterm
?terminate@@YAXXZ
_lock
_unlock
__dllonexit
_onexit
??1type_info@@UEAA@XZ
sqrt
wcscmp
_purecall
memcpy_s
_vsnwprintf
__iob_func
bsearch
_CxxThrowException
memmove
memset
tolower
__CxxFrameHandler3
sqrtf
fclose
ceil
floor
fmod
memcpy
pow

api-ms-win-downlevel-advapi32-l1-1-0

RegDeleteKeyExW
RegSetValueExW
EventRegister
RegCreateKeyExW
RegOpenKeyExW
EventWriteTransfer
EventUnregister
RegQueryValueExW
RegGetValueW
EventWrite
RegCloseKey

api-ms-win-downlevel-shlwapi-l1-1-0

PathGetDriveNumberW
PathIsUNCW
PathIsLFNFileSpecW
PathIsFileSpecW
PathFindFileNameW
StrTrimW
PathFileExistsW
StrCmpLogicalW
PathRemoveFileSpecW
StrCmpICW

api-ms-win-downlevel-version-l1-1-0

GetFileVersionInfoSizeExW
GetFileVersionInfoExW
VerQueryValueW

kernel32

ResumeThread
LoadLibraryExA
GetCurrentProcessId
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
CreateFileW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
SearchPathW
SleepConditionVariableSRW
WakeAllConditionVariable
SetUnhandledExceptionFilter
LocalFree
LocalAlloc
MultiByteToWideChar
FlushInstructionCache
ResetEvent
SetThreadStackGuarantee
GetSystemTimeAdjustment
QueryPerformanceFrequency
CompareStringEx
GetUserDefaultLocaleName
ResolveLocaleName
QueryThreadCycleTime
GetProcessIoCounters
Sleep
GetNumberFormatW
GetTimeFormatW
GetDateFormatW
GetSystemTime
LCMapStringW
CompareStringW
RtlVirtualUnwind
RtlLookupFunctionEntry
GetTimeZoneInformation
GetStringTypeW
SizeofResource
LockResource
LoadResource
FindResourceExW
UnhandledExceptionFilter
TerminateProcess
RtlAddFunctionTable
RtlDeleteFunctionTable
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
VirtualAlloc
VirtualFree
GlobalMemoryStatusEx
ResetWriteWatch
FreeLibraryAndExitThread
SetThreadPriority
WaitForMultipleObjectsEx
GetWriteWatch
GetCurrentThread
GetThreadContext
SetEvent
CreateEventW
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
GetTimeZoneInformationForYear
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
GetStdHandle
GetVersionExW
GetSystemInfo
EncodeSystemPointer
QueryPerformanceCounter
WerGetFlags
VirtualProtect
WerSetFlags
LoadLibraryExW
GetSystemDirectoryW
RaiseException
IsValidCodePage
GetLocaleInfoW
IsValidLocale
VirtualQuery
GetEnvironmentVariableW
GetACP
GetUserDefaultLCID
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
GetSystemTimeAsFileTime
RaiseFailFastException
DeleteAtom
TryEnterCriticalSection
FreeLibrary
AddAtomW
FindAtomW
InitializeCriticalSectionAndSpinCount
GetTickCount
InitializeCriticalSection
GetModuleFileNameW
GetCurrentProcess
K32GetModuleInformation
IsDebuggerPresent
DebugBreak
GetModuleHandleW
GetProcessHeap
DeleteCriticalSection
AcquireSRWLockShared
CreateMutexExW
GetProcAddress
HeapAlloc
CreateThreadpoolTimer
ReleaseSRWLockShared
GetModuleFileNameA
CreateSemaphoreExW
HeapFree
SetLastError
EnterCriticalSection
ReleaseSemaphore
GetModuleHandleExW
LeaveCriticalSection
InitializeCriticalSectionEx
WaitForThreadpoolTimerCallbacks
WaitForSingleObject
GetCurrentThreadId
ReleaseMutex
FormatMessageW
GetLastError
ReleaseSRWLockExclusive
OutputDebugStringW
CloseThreadpoolTimer
AcquireSRWLockExclusive
WaitForSingleObjectEx
OpenSemaphoreW
CloseHandle
SetThreadpoolTimer
DelayLoadFailureHook

bcrypt

BCryptGenRandom

rpcrt4

CStdStubBuffer_QueryInterface
CStdStubBuffer_Invoke
IUnknown_AddRef_Proxy
CStdStubBuffer_DebugServerQueryInterface
NdrOleFree
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_AddRef
IUnknown_Release_Proxy
NdrDllUnregisterProxy
CStdStubBuffer_CountRefs
NdrDllCanUnloadNow
CStdStubBuffer_Connect
NdrCStdStubBuffer_Release
CStdStubBuffer_Disconnect
NdrDllGetClassObject
IUnknown_QueryInterface_Proxy
NdrOleAllocate
CStdStubBuffer_DebugServerRelease
NdrDllRegisterProxy

advapi32

CryptReleaseContext

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JsAddRef
JsBoolToBoolean
JsBooleanToBool
JsCallFunction
JsCollectGarbage
JsConstructObject
JsConvertValueToBoolean
JsConvertValueToNumber
JsConvertValueToObject
JsConvertValueToString
JsCreateArray
JsCreateContext
JsCreateError
JsCreateExternalObject
JsCreateExternalType
JsCreateFunction
JsCreateObject
JsCreateRangeError
JsCreateReferenceError
JsCreateRuntime
JsCreateSyntaxError
JsCreateTypeError
JsCreateTypedExternalObject
JsCreateURIError
JsDefineProperty
JsDeleteIndexedProperty
JsDeleteProperty
JsDisableRuntimeExecution
JsDisposeRuntime
JsDoubleToNumber
JsEnableRuntimeExecution
JsEnumerateHeap
JsEquals
JsGetAndClearException
JsGetCurrentContext
JsGetDefaultTypeDescription
JsGetExtensionAllowed
JsGetExternalData
JsGetExternalType
JsGetFalseValue
JsGetGlobalObject
JsGetIndexedProperty
JsGetNullValue
JsGetOwnPropertyDescriptor
JsGetOwnPropertyNames
JsGetProperty
JsGetPropertyIdFromName
JsGetPropertyNameFromId
JsGetPrototype
JsGetRuntime
JsGetRuntimeMemoryLimit
JsGetRuntimeMemoryUsage
JsGetStringLength
JsGetTrueValue
JsGetUndefinedValue
JsGetValueType
JsHasException
JsHasExternalData
JsHasIndexedProperty
JsHasProperty
JsIdle
JsIntToNumber
JsIsEnumeratingHeap
JsIsRuntimeExecutionDisabled
JsNumberToDouble
JsParseScript
JsParseSerializedScript
JsPointerToString
JsPreventExtension
JsRelease
JsRunScript
JsRunSerializedScript
JsSerializeScript
JsSetCurrentContext
JsSetException
JsSetExternalData
JsSetIndexedProperty
JsSetProperty
JsSetPrototype
JsSetRuntimeBeforeCollectCallback
JsSetRuntimeMemoryAllocationCallback
JsSetRuntimeMemoryLimit
JsStartDebugging
JsStartProfiling
JsStopProfiling
JsStrictEquals
JsStringToPointer
JsValueToVariant
JsVarAddRef
JsVarRelease
JsVarToExtension
JsVarToScriptDirect
JsVariantToValue

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 926KB - Virtual size: 926KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 235KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fortnite Cheat/cfg/mfc120.dll
.dll windows:6 windows x64 arch:x64

b467d8bbeff5c4ab5049cb04c1fe3e38

Code Sign

33:00:00:00:b5:ac:7d:6d:87:6b:26:11:47:00:00:00:00:00:b5
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:8e:87:91:a4:57:1a:5f:ca:3e:00:00:00:00:00:8e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 22:09

Not After

17/02/2018, 22:09

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

df:12:49:bc:93:71:8e:95:94:57:4b:f5:18:dd:a3:ff:95:53:8b:9d:cc:d0:83:21:53:47:a9:72:f8:89:fd:b3
Signer

Actual PE Digest

df:12:49:bc:93:71:8e:95:94:57:4b:f5:18:dd:a3:ff:95:53:8b:9d:cc:d0:83:21:53:47:a9:72:f8:89:fd:b3

Digest Algorithm

sha256

PE Digest Matches

true

81:21:be:6f:3d:65:ff:1b:10:2a:66:cc:7b:e7:99:a4:4d:18:fa:3d
Signer

Actual PE Digest

81:21:be:6f:3d:65:ff:1b:10:2a:66:cc:7b:e7:99:a4:4d:18:fa:3d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

mfc120.amd64.pdb

Imports

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegEnumValueA
RegQueryValueExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegEnumKeyA
RegQueryValueA
RegSetValueA
GetFileSecurityA
SetFileSecurityA
RegOpenKeyExW
IsTextUnicode

kernel32

GetEnvironmentVariableA
GetLastError
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
MultiByteToWideChar
WideCharToMultiByte
SetLastError
DeactivateActCtx
LoadLibraryW
GetProcAddress
ActivateActCtx
FindActCtxSectionStringW
CreateActCtxW
GetModuleFileNameW
GetModuleHandleExW
QueryActCtxW
OutputDebugStringA
lstrcpyA
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentThreadId
InitializeCriticalSection
GetACP
DeleteFileA
GetModuleHandleA
GetCPInfo
GetOEMCP
MulDiv
VerSetConditionMask
VerifyVersionInfoA
FreeLibrary
CloseHandle
GetTempPathA
GetTempFileNameA
CreateFileA
SetFilePointer
Sleep
GetCurrentDirectoryA
lstrcmpA
GetSystemDirectoryW
LoadLibraryExW
DecodePointer
EncodePointer
GetModuleHandleW
FindResourceA
GlobalFree
GetTickCount
GetWindowsDirectoryA
lstrcmpiA
SetThreadPriority
GetModuleFileNameA
LocalAlloc
LocalFree
TlsAlloc
TlsFree
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalReAlloc
TlsSetValue
GetFileSize
GetFileAttributesA
GlobalSize
GetLocaleInfoW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetCurrentThread
GetVersionExA
CompareStringA
GlobalDeleteAtom
SetErrorMode
GetCurrentProcessId
GlobalAddAtomA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
FindResourceExW
GetUserDefaultLCID
IsDBCSLeadByte
GetVersion
lstrcmpW
lstrcpyW
RaiseException
VirtualProtect
GetDiskFreeSpaceA
GetFullPathNameA
GetFileTime
SetFileTime
ReplaceFileA
SystemTimeToFileTime
GetProfileIntA
DuplicateHandle
GetCurrentProcess
ReadFile
WriteFile
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileA
LoadLibraryExA
GetVolumeInformationA
FindFirstFileA
FindClose
GetThreadLocale
GetStringTypeExA
GetShortPathNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileA
GetFileSizeEx
GetFileAttributesExA
LocalFileTimeToFileTime
SetFileAttributesA
FormatMessageA
WaitForSingleObject
CreateSemaphoreA
ReleaseSemaphore
CreateMutexA
ReleaseMutex
CreateEventA
WaitForMultipleObjects
CopyFileA
SetEvent
ResumeThread
SuspendThread
GetAtomNameA
GlobalGetAtomNameA
LocalLock
LocalUnlock
GetSystemTime
GlobalFindAtomA
GlobalFlags
LoadLibraryA
GetEnvironmentVariableW
SearchPathA
IsDebuggerPresent
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
ExpandEnvironmentStringsA
OutputDebugStringW
GetSystemTimeAsFileTime
QueryPerformanceCounter

msvcr120

__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
__crtCapturePreviousContext
__crtCaptureCurrentContext
__crtTerminateProcess
__crtUnhandledException
__crt_debugger_hook
?terminate@@YAXXZ
_onexit
__C_specific_handler
__dllonexit
_calloc_crt
_unlock
_lock
iswspace
_wcsrev
wcspbrk
_wcsicoll
wcsstr
_wcsupr_s
_wcslwr_s
vswprintf_s
_mbsrev
wcscoll
memmove
_vscwprintf
wcschr
_expand
_msize
strncpy_s
_beginthreadex
_endthreadex
wcsncpy_s
_ultoa_s
fclose
fflush
ftell
fseek
fgets
fputs
fwrite
clearerr_s
ferror
feof
fread
__doserrno
_fdopen
_open_osfhandle
_fileno
_get_osfhandle
_fullpath
_mbsdec
realloc
strtoul
strtol
_snprintf_s
_vsnprintf_s
_snscanf_s
wcscmp
_mktime64
_mbsnbicmp
_ltoa_s
_itoa_s
wcsrchr
sprintf_s
_mbsnbcpy_s
_ismbblead
_strnicmp
__argv
__argc
strcat_s
_snwprintf_s
_errno
_recalloc
strtod
_time64
_makepath_s
_strdup
_beginthread
_endthread
_localtime64_s
wcstombs_s
wcsnlen
wcscat_s
sscanf_s
memcmp
atol
_mbctolower
_mbctoupper
_ismbcprint
_ismbcalnum
_ismbcalpha
_ismbcdigit
strcpy_s
wcscpy_s
_mbsnbcmp
_mbsicoll
_mbscoll
_splitpath_s
exp
ceil
fabs
floor
sin
cos
abs
memcpy
clock
_mbsspn
_mbscspn
_mbsrchr
_mbspbrk
_mbsicmp
__CxxFrameHandler3
atan2
sqrt
calloc
_mbsupr_s
atoi
ldiv
labs
malloc
free
_mbsstr
_ismbcspace
_mbsinc
_mbschr
_vscprintf
vsprintf_s
_mbscmp
_wcsicmp
wcsspn
wcscspn
wmemcpy_s
wcslen
_purecall
strnlen
toupper
_mbslwr_s
memset
strlen
memmove_s
memcpy_s
abort
_CxxThrowException
_resetstkoflw

user32

SetWindowPlacement
TrackPopupMenuEx
RegisterClassA
WinHelpA
GetScrollRange
SetScrollInfo
GetScrollInfo
ScrollWindow
MonitorFromWindow
SendDlgItemMessageA
LoadAcceleratorsA
LoadMenuA
UnpackDDElParam
ReuseDDElParam
InsertMenuItemA
GetMenuBarInfo
GetWindowDC
BeginPaint
EndPaint
DefFrameProcA
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
ScrollWindowEx
RealChildWindowFromPoint
OemToCharBuffA
CharToOemBuffA
FrameRect
GetWindowRgn
ReleaseDC
GetDC
GetDoubleClickTime
GetWindowTextA
EnumChildWindows
InvertRect
HideCaret
SetMenuDefaultItem
GetMenuDefaultItem
GetScrollPos
EnableScrollBar
UpdateLayeredWindow
GetMessageA
GetLastActivePopup
SubtractRect
DrawFrameControl
GetMenuItemInfoA
SetFocus
CheckMenuItem
GetMenuState
SetWindowTextA
LoadIconW
LoadImageW
CharUpperA
MapVirtualKeyA
ToAsciiEx
GetKeyboardState
CopyAcceleratorTableA
CreateAcceleratorTableA
DestroyCursor
GetClassLongPtrA
GetSysColor
EnumDisplayMonitors
DestroyWindow
GetTopWindow
DestroyAcceleratorTable
NotifyWinEvent
SetWindowRgn
DeleteMenu
ModifyMenuA
IsZoomed
IsMenu
GetSystemMenu
GetNextDlgTabItem
EnableMenuItem
SetScrollPos
IntersectRect
CreatePopupMenu
AppendMenuA
EndDeferWindowPos
BeginDeferWindowPos
GetKeyState
LockWindowUpdate
SetWindowPos
UnionRect
GetUpdateRect
UnhookWindowsHookEx
SetWindowsHookExA
CreateWindowExA
SetLayeredWindowAttributes
ValidateRect
LoadCursorA
SystemParametersInfoA
MonitorFromPoint
GetMonitorInfoA
DrawIcon
GetForegroundWindow
IsIconic
GetMenuItemID
GetMenuItemCount
GetWindow
DefWindowProcA
GetClassInfoA
PostThreadMessageA
GetSubMenu
LoadMenuW
DestroyMenu
GetSystemMetrics
TranslateAcceleratorA
LoadAcceleratorsW
GetCapture
DrawStateA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetAsyncKeyState
GetDesktopWindow
WaitMessage
DispatchMessageA
TranslateMessage
PeekMessageA
SetForegroundWindow
LoadCursorW
GetFocus
IsChild
TrackPopupMenu
LoadIconA
GetNextDlgGroupItem
DrawFocusRect
SetCursor
GetWindowLongA
CopyImage
GetIconInfo
FillRect
LoadImageA
CopyRect
LoadBitmapW
MapWindowPoints
MessageBeep
SetCursorPos
WindowFromPoint
ClientToScreen
SetCapture
ReleaseCapture
CopyIcon
BringWindowToTop
RegisterWindowMessageA
DestroyIcon
GetClassNameA
SetParent
ShowWindow
GetWindowPlacement
IsRectEmpty
GetDlgCtrlID
PostMessageA
DeferWindowPos
EqualRect
GetSysColorBrush
SetClassLongPtrA
GetParent
DrawIconEx
InflateRect
OffsetRect
PtInRect
UpdateWindow
SetTimer
TrackMouseEvent
ScreenToClient
GetCursorPos
IsWindowVisible
GetClientRect
KillTimer
MapVirtualKeyExA
GetKeyboardLayout
GetKeyNameTextA
IsCharLowerA
EnableWindow
SetRect
IsWindow
RedrawWindow
InvalidateRect
SendMessageA
GetWindowRect
SetRectEmpty
GetWindowLongPtrA
GetClassInfoExA
GetClassLongA
SetMenu
GetMenu
LoadBitmapA
CountClipboardFormats
GetTabbedTextExtentA
SetScrollRange
AdjustWindowRectEx
WindowFromDC
GetMenuStringA
InSendMessage
SendNotifyMessageA
ClipCursor
IsDialogMessageA
SetWindowContextHelpId
CharNextA
MsgWaitForMultipleObjectsEx
RemoveMenu
GetDCEx
GetDialogBaseUnits
GetMessagePos
GetMessageTime
MapDialogRect
SetPropA
RemovePropA
GetPropA
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
GetDlgItem
GetTabbedTextExtentW
GetWindowTextLengthA
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
InvalidateRgn
MoveWindow
CreateMenu
SetActiveWindow
CallWindowProcA
SetWindowLongPtrA
GetMenuCheckMarkDimensions
SetMenuItemInfoA
SetMenuItemBitmaps
SetWindowLongA
MessageBoxA
GetWindowThreadProcessId
ShowOwnedPopups
UnregisterClassA
PostQuitMessage
DrawEdge
CharUpperBuffA
GetComboBoxInfo
RegisterClipboardFormatA
InsertMenuA
IsWindowEnabled
CallNextHookEx
ShowScrollBar
IsClipboardFormatAvailable

gdi32

GetTextMetricsA
GetTextExtentPoint32A
GetObjectA
CreateSolidBrush
CreateCompatibleDC
DeleteObject
SelectObject
GetObjectType
GetTextColor
Polygon
Rectangle
GetStockObject
GetPaletteEntries
CreatePalette
RealizePalette
GetNearestPaletteIndex
GetSystemPaletteEntries
GetPixel
CreatePolygonRgn
PtInRegion
FrameRgn
CreateCompatibleBitmap
SetPixelV
BitBlt
GetRgnBox
CreateRectRgnIndirect
OffsetRgn
CreateDIBSection
SetPixel
Ellipse
GetBkColor
CreateFontIndirectA
GetDeviceCaps
GetTextCharsetInfo
EnumFontFamiliesA
CreatePen
CreatePatternBrush
CreateDIBitmap
SetPaletteEntries
ExtFloodFill
StartPage
EndPage
EndDoc
GetCurrentObject
PatBlt
CreateRectRgn
CombineRgn
GetBoundsRect
FillRgn
SetRectRgn
CreateRoundRectRgn
EnumFontFamiliesExA
StretchBlt
SetDIBColorTable
CreateBitmap
SetBkColor
SelectPalette
GetDIBits
Polyline
ExtTextOutA
CreateHatchBrush
CreateEllipticRgn
RoundRect
StretchDIBits
CreateFontA
GetCharWidthA
LPtoDP
CreateMetaFileA
CloseMetaFile
DeleteMetaFile
GetViewportOrgEx
PtVisible
RectVisible
TextOutA
Escape
GetClipBox
GetTextAlign
GetCurrentPositionEx
MoveToEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SaveDC
RestoreDC
GetROP2
GetBkMode
GetPolyFillMode
GetStretchBltMode
GetNearestColor
GetTextFaceA
GetWindowExtEx
GetViewportExtEx
SetTextColor
SetMapMode
SetWindowExtEx
ScaleWindowExtEx
GetTextExtentPoint32W
GetTextExtentPointA
GetWindowOrgEx
SetWindowOrgEx
IntersectClipRect
CreateDCA
SetBrushOrgEx
SetAbortProc
StartDocA
DPtoLP
AbortDoc
CopyMetaFileA
UnrealizeObject
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
OffsetWindowOrgEx
SelectClipRgn
ExcludeClipRect
OffsetClipRgn
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetLayout
SetLayout
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
SelectClipPath
GetClipRgn
ExtSelectClipRgn
PlayMetaFileRecord
PlayMetaFile
EnumMetaFile
ExtCreatePen
CreateDIBPatternBrushPt
GetMapMode
DeleteDC

ole32

OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
CoRegisterClassObject
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
DoDragDrop
CoGetMalloc
StgOpenStorage
StgIsStorageFile
StgCreateDocfile
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
OleGetClipboard
OleRegGetUserType
GetClassFile
CreateBindCtx
CreateFileMoniker
OleRun
OleIsRunning
OleQueryLinkFromData
OleQueryCreateFromData
OleSetMenuDescriptor
CreateGenericComposite
CreateItemMoniker
WriteClassStm
OleGetIconOfClass
IsAccelerator
ReadClassStg
OleLoad
OleSave
OleCreate
OleCreateLinkToFile
OleCreateFromFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleSetContainedObject
StringFromCLSID
OleLockRunning
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
PropVariantCopy
CoInitializeEx
StringFromGUID2
ReadFmtUserTypeStg
OleLoadFromStream
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
ReadClassStm
OleSaveToStream
CreateOleAdviseHolder
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
ReleaseStgMedium
CreateDataAdviseHolder
CoTaskMemAlloc
OleTranslateAccelerator
GetRunningObjectTable
OleDraw
OleRegGetMiscStatus
OleRegEnumVerbs
CoDisconnectObject
CoRegisterMessageFilter
CoTreatAsClass
SetConvertStg
WriteFmtUserTypeStg
OleDuplicateData
GetHGlobalFromILockBytes
CreateDataCache
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
PropVariantClear
CoCreateGuid
CoTaskMemFree
CoCreateInstance
WriteClassStg

oleaut32

SysAllocStringLen
SysStringLen
SysFreeString
VariantChangeType
VariantClear
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
OleCreatePropertyFrame
OleTranslateColor
OleCreateFontIndirect
OleCreatePictureIndirect
OleLoadPicture
LoadTypeLi
RegisterTypeLi
LoadRegTypeLi
VariantInit
DispCallFunc
VarBstrCmp
VariantCopy
SafeArrayDestroy
SysAllocStringByteLen
SysStringByteLen
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayCreate
SafeArrayRedim
SysReAllocStringLen
VarCyFromStr
VarBstrFromCy
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VarDateFromStr
VarDecFromStr
VarBstrFromDec
SafeArrayCreateVector
VarParseNumFromStr
SysAllocString

shlwapi

SHStrDupW
PathFindExtensionA
PathFindFileNameA
PathRemoveExtensionA
PathRemoveFileSpecW
PathIsUNCA
PathStripToRootA
UrlUnescapeA
StrFormatKBSizeA

imm32

ImmGetOpenStatus
ImmGetContext
ImmReleaseContext

uxtheme

GetThemePartSize
IsThemeBackgroundPartiallyTransparent
DrawThemeText
GetThemeSysColor
GetWindowTheme
GetCurrentThemeName
CloseThemeData
OpenThemeData
GetThemeColor
DrawThemeBackground
DrawThemeParentBackground
IsAppThemed

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fortnite Cheat/cfg/mfc120u.dll
.dll windows:6 windows x64 arch:x64

764029fe56bbbc1b420a49e2381983f8

Code Sign

33:00:00:00:cc:cb:b8:13:eb:5d:72:2d:45:00:00:00:00:00:cc
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:148C-C4B9-2066,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:8e:87:91:a4:57:1a:5f:ca:3e:00:00:00:00:00:8e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 22:09

Not After

17/02/2018, 22:09

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

68:0b:10:5c:f8:9d:81:22:cf:97:d1:7d:ad:48:2d:45:e5:62:e5:57:b9:e8:5d:72:7b:ce:69:d3:f5:ef:9d:c6
Signer

Actual PE Digest

68:0b:10:5c:f8:9d:81:22:cf:97:d1:7d:ad:48:2d:45:e5:62:e5:57:b9:e8:5d:72:7b:ce:69:d3:f5:ef:9d:c6

Digest Algorithm

sha256

PE Digest Matches

true

20:35:69:d8:16:9c:62:73:af:87:84:e4:6a:40:c3:de:70:15:6a:2d
Signer

Actual PE Digest

20:35:69:d8:16:9c:62:73:af:87:84:e4:6a:40:c3:de:70:15:6a:2d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

mfc120u.amd64.pdb

Imports

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumValueW
RegQueryValueExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumKeyW
RegQueryValueW
RegSetValueW
GetFileSecurityW
SetFileSecurityW
IsTextUnicode
RegOpenKeyExA
RegQueryValueExA

kernel32

LeaveCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
SetLastError
DeactivateActCtx
LoadLibraryW
GetProcAddress
ActivateActCtx
FindActCtxSectionStringW
CreateActCtxW
GetModuleFileNameW
GetModuleHandleExW
QueryActCtxW
OutputDebugStringA
MultiByteToWideChar
lstrcpyW
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentThreadId
InitializeCriticalSection
DeleteFileW
GetModuleHandleW
MulDiv
VerSetConditionMask
VerifyVersionInfoW
FreeLibrary
CloseHandle
GetTempPathW
GetTempFileNameW
CreateFileW
SetFilePointer
Sleep
GetCurrentDirectoryW
lstrcmpW
GetSystemDirectoryW
LoadLibraryExW
DecodePointer
EncodePointer
GlobalFree
GetTickCount
GetWindowsDirectoryW
lstrcmpiW
SetThreadPriority
LocalAlloc
LocalFree
TlsAlloc
TlsFree
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalReAlloc
TlsSetValue
GetFileSize
GetFileAttributesW
GlobalSize
SearchPathW
GetLocaleInfoW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
CompareStringW
GetCurrentThread
GetVersionExW
WideCharToMultiByte
lstrcmpA
CompareStringA
GlobalDeleteAtom
SetErrorMode
GetCurrentProcessId
GlobalAddAtomW
EnterCriticalSection
GetPrivateProfileStringW
WritePrivateProfileStringW
FindResourceExW
GetUserDefaultLCID
IsDBCSLeadByte
GetVersion
lstrcpyA
RaiseException
VirtualProtect
GetDiskFreeSpaceW
GetFullPathNameW
GetFileTime
SetFileTime
ReplaceFileW
SystemTimeToFileTime
GetProfileIntW
DuplicateHandle
GetCurrentProcess
ReadFile
WriteFile
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileW
GetVolumeInformationW
FindFirstFileW
FindClose
GetThreadLocale
GetStringTypeExW
GetShortPathNameW
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileW
GetFileSizeEx
GetFileAttributesExW
LocalFileTimeToFileTime
SetFileAttributesW
FormatMessageW
WaitForSingleObject
CreateSemaphoreW
ReleaseSemaphore
CreateMutexW
ReleaseMutex
CreateEventW
WaitForMultipleObjects
CopyFileW
SetEvent
ResumeThread
SuspendThread
GetAtomNameW
GlobalGetAtomNameW
LocalLock
LocalUnlock
GetSystemTime
GlobalFindAtomW
GlobalFlags
GetEnvironmentVariableW
FormatMessageA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
LoadLibraryExA
OutputDebugStringW
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DeleteCriticalSection
GetLastError
GetPrivateProfileIntW
InitializeCriticalSectionAndSpinCount

msvcr120

_CxxThrowException
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
__crtCapturePreviousContext
__crtCaptureCurrentContext
__crtTerminateProcess
__crtUnhandledException
__crt_debugger_hook
?terminate@@YAXXZ
_onexit
__C_specific_handler
__dllonexit
_calloc_crt
_unlock
_lock
_mbscspn
_vscprintf
_mbsinc
_mbsupr_s
_wcsrev
_mbsspn
_mbscoll
_mbsrchr
_mbschr
vsprintf_s
_ismbcspace
_mbsstr
_mbsicoll
_mbsrev
memmove
_mbsicmp
_mbslwr_s
_mbspbrk
_expand
_msize
_beginthreadex
_endthreadex
strcpy_s
_ultow_s
fclose
fflush
ftell
fseek
fgetws
fputws
fwrite
clearerr_s
ferror
feof
fread
__doserrno
_fdopen
_open_osfhandle
_fileno
_get_osfhandle
_wfullpath
realloc
wcstoul
wcstol
_vsnwprintf_s
_snwscanf_s
_mbscmp
_mktime64
strnlen
_wcsnicmp
_ltow_s
abort
swprintf_s
wcsncpy_s
_strnicmp
__wargv
__argc
_snwprintf_s
_errno
_recalloc
_resetstkoflw
wcstod
_time64
_wmakepath_s
strlen
_wcsdup
_beginthread
_endthread
_localtime64_s
wcscat_s
swscanf_s
memcmp
_wtol
towlower
towupper
iswprint
iswalnum
iswalpha
iswdigit
wcscpy_s
wcsncmp
_wcsicoll
wcscoll
_wsplitpath_s
exp
ceil
fabs
floor
sin
cos
abs
memcpy
clock
wcsrchr
wcspbrk
__CxxFrameHandler3
atan2
sqrt
calloc
_wcsupr_s
_wtoi
ldiv
labs
malloc
free
wcsstr
iswspace
wcschr
_vscwprintf
vswprintf_s
wcscmp
_wcsicmp
wcsspn
wcscspn
wmemcpy_s
_purecall
wcsnlen
toupper
_wcslwr_s
memset
wcslen
memmove_s
memcpy_s
_itow_s

user32

ScrollWindow
MonitorFromWindow
SendDlgItemMessageA
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
GetMenuBarInfo
GetWindowDC
BeginPaint
EndPaint
DefFrameProcW
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextW
SendDlgItemMessageW
SetDlgItemInt
SetDlgItemTextW
IsDlgButtonChecked
ScrollWindowEx
RealChildWindowFromPoint
OemToCharBuffA
CharToOemBuffA
RegisterClipboardFormatW
GetActiveWindow
InsertMenuW
IsWindowEnabled
ShowScrollBar
FrameRect
GetWindowRgn
ReleaseDC
GetDC
GetDoubleClickTime
GetWindowTextW
EnumChildWindows
InvertRect
HideCaret
SetMenuDefaultItem
GetMenuDefaultItem
GetScrollPos
EnableScrollBar
UpdateLayeredWindow
GetMessageW
GetLastActivePopup
SubtractRect
DrawFrameControl
GetMenuItemInfoW
SetFocus
CheckMenuItem
GetMenuState
SetWindowTextW
MapVirtualKeyW
ToUnicodeEx
GetKeyboardState
CopyAcceleratorTableW
CreateAcceleratorTableW
DestroyCursor
IsClipboardFormatAvailable
GetClassLongPtrW
GetSysColor
EnumDisplayMonitors
DestroyWindow
GetTopWindow
DestroyAcceleratorTable
NotifyWinEvent
SetWindowRgn
DeleteMenu
ModifyMenuW
IsZoomed
IsMenu
GetSystemMenu
GetNextDlgTabItem
EnableMenuItem
SetScrollPos
IntersectRect
CreatePopupMenu
AppendMenuW
EndDeferWindowPos
BeginDeferWindowPos
GetKeyState
LockWindowUpdate
SetWindowPos
UnionRect
GetUpdateRect
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
SetLayeredWindowAttributes
GetScrollInfo
SystemParametersInfoW
MonitorFromPoint
GetMonitorInfoW
DrawIcon
GetForegroundWindow
IsIconic
GetMenuItemID
GetMenuItemCount
GetWindow
DefWindowProcW
GetClassInfoW
PostThreadMessageW
GetSubMenu
LoadMenuW
DestroyMenu
GetSystemMetrics
TranslateAcceleratorW
LoadAcceleratorsW
GetCapture
DrawStateW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetAsyncKeyState
GetDesktopWindow
WaitMessage
DispatchMessageW
TranslateMessage
PeekMessageW
SetForegroundWindow
LoadCursorW
GetFocus
IsChild
TrackPopupMenu
LoadIconW
GetNextDlgGroupItem
DrawFocusRect
SetCursor
GetWindowLongW
CopyImage
GetIconInfo
FillRect
LoadImageW
CopyRect
LoadBitmapW
MapWindowPoints
MessageBeep
SetCursorPos
WindowFromPoint
ClientToScreen
SetCapture
ReleaseCapture
CopyIcon
BringWindowToTop
RegisterWindowMessageW
DestroyIcon
GetClassNameW
SetParent
ShowWindow
GetWindowPlacement
IsRectEmpty
GetDlgCtrlID
PostMessageW
DeferWindowPos
EqualRect
GetSysColorBrush
SetClassLongPtrW
GetParent
DrawIconEx
InflateRect
OffsetRect
PtInRect
UpdateWindow
SetTimer
TrackMouseEvent
ScreenToClient
GetCursorPos
MapVirtualKeyExW
GetKeyboardLayout
GetKeyNameTextW
IsCharLowerW
EnableWindow
SetRect
IsWindow
RedrawWindow
InvalidateRect
SendMessageW
GetWindowRect
SetRectEmpty
KillTimer
GetClientRect
IsWindowVisible
SetScrollInfo
GetScrollRange
WinHelpW
RegisterClassW
TrackPopupMenuEx
SetWindowPlacement
CreateWindowExW
GetWindowLongPtrW
GetClassInfoExW
SetMenu
GetMenu
CountClipboardFormats
AdjustWindowRectEx
SetScrollRange
WindowFromDC
GetMenuStringW
InSendMessage
SendNotifyMessageW
ClipCursor
IsDialogMessageW
SetWindowContextHelpId
CharNextW
MsgWaitForMultipleObjectsEx
RemoveMenu
GetDCEx
GetDialogBaseUnits
GetMessagePos
GetMessageTime
MapDialogRect
SetPropW
RemovePropW
GetPropW
EndDialog
CreateDialogIndirectParamW
GetDlgItem
GetTabbedTextExtentW
GetWindowTextLengthW
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
InvalidateRgn
MoveWindow
CreateMenu
SetActiveWindow
CallWindowProcW
SetWindowLongPtrW
GetMenuCheckMarkDimensions
SetMenuItemInfoW
SetMenuItemBitmaps
SetWindowLongW
MessageBoxW
GetWindowThreadProcessId
ShowOwnedPopups
UnregisterClassW
PostQuitMessage
DrawEdge
CharUpperBuffW
ValidateRect
GetComboBoxInfo
CharUpperW

gdi32

GetObjectW
CreateSolidBrush
CreateCompatibleDC
DeleteObject
SelectObject
GetObjectType
GetTextColor
Polygon
Rectangle
GetStockObject
GetPaletteEntries
CreatePalette
RealizePalette
GetNearestPaletteIndex
GetSystemPaletteEntries
GetPixel
CreatePolygonRgn
PtInRegion
FrameRgn
CreateCompatibleBitmap
SetPixelV
BitBlt
GetRgnBox
CreateRectRgnIndirect
OffsetRgn
CreateDIBSection
SetPixel
Ellipse
GetBkColor
CreateFontIndirectW
GetDeviceCaps
GetTextCharsetInfo
EnumFontFamiliesW
CreatePen
CreatePatternBrush
CreateDIBitmap
SetPaletteEntries
ExtFloodFill
StartPage
EndPage
EndDoc
GetCurrentObject
PatBlt
CreateRectRgn
CombineRgn
GetBoundsRect
FillRgn
SetRectRgn
CreateRoundRectRgn
EnumFontFamiliesExW
StretchBlt
SetDIBColorTable
CreateBitmap
SetBkColor
SelectPalette
GetDIBits
Polyline
ExtTextOutW
CreateHatchBrush
CreateEllipticRgn
RoundRect
StretchDIBits
GetTextExtentPoint32W
GetCharWidthW
LPtoDP
CreateMetaFileW
CloseMetaFile
DeleteMetaFile
GetViewportOrgEx
PtVisible
RectVisible
TextOutW
Escape
GetClipBox
GetTextAlign
GetCurrentPositionEx
MoveToEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SaveDC
RestoreDC
GetROP2
GetBkMode
GetPolyFillMode
GetStretchBltMode
GetNearestColor
GetTextFaceW
GetWindowExtEx
GetViewportExtEx
SetTextColor
SetMapMode
SetWindowExtEx
ScaleWindowExtEx
GetWindowOrgEx
SetWindowOrgEx
IntersectClipRect
CreateDCW
SetBrushOrgEx
SetAbortProc
StartDocW
DPtoLP
AbortDoc
CopyMetaFileW
UnrealizeObject
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
OffsetWindowOrgEx
SelectClipRgn
ExcludeClipRect
OffsetClipRgn
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetLayout
SetLayout
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
SelectClipPath
GetClipRgn
ExtSelectClipRgn
PlayMetaFileRecord
PlayMetaFile
EnumMetaFile
ExtCreatePen
CreateDIBPatternBrushPt
GetMapMode
GetTextMetricsW
CreateFontW
DeleteDC

ole32

OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
CoRegisterClassObject
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
DoDragDrop
CoGetMalloc
StgOpenStorage
StgIsStorageFile
StgCreateDocfile
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
OleGetClipboard
OleRegGetUserType
GetClassFile
CreateBindCtx
CreateFileMoniker
OleRun
OleIsRunning
OleQueryLinkFromData
OleQueryCreateFromData
OleSetMenuDescriptor
CreateGenericComposite
CreateItemMoniker
WriteClassStm
IsAccelerator
GetHGlobalFromILockBytes
ReadClassStg
OleLoad
OleSave
OleCreate
OleCreateLinkToFile
OleCreateFromFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleSetContainedObject
StringFromCLSID
OleLockRunning
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
PropVariantCopy
CoInitializeEx
StringFromGUID2
ReadFmtUserTypeStg
OleLoadFromStream
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
ReadClassStm
OleSaveToStream
CreateOleAdviseHolder
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleTranslateAccelerator
GetRunningObjectTable
WriteClassStg
OleDuplicateData
WriteFmtUserTypeStg
OleDraw
OleRegGetMiscStatus
OleRegEnumVerbs
CoDisconnectObject
CoRegisterMessageFilter
CoTreatAsClass
OleGetIconOfClass
ReleaseStgMedium
CreateDataAdviseHolder
CoTaskMemAlloc
CreateDataCache
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
PropVariantClear
CoCreateGuid
CoTaskMemFree
CoCreateInstance
SetConvertStg

oleaut32

SysAllocStringLen
SysStringLen
SysFreeString
VariantChangeType
VariantClear
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
OleCreatePropertyFrame
OleTranslateColor
OleCreateFontIndirect
OleCreatePictureIndirect
OleLoadPicture
LoadTypeLi
RegisterTypeLi
LoadRegTypeLi
VariantInit
DispCallFunc
VarBstrCmp
VariantCopy
SafeArrayDestroy
SysStringByteLen
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayCreate
SafeArrayRedim
SysAllocStringByteLen
SysReAllocStringLen
VarCyFromStr
VarBstrFromCy
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VarDateFromStr
VarDecFromStr
VarBstrFromDec
SafeArrayCreateVector
VarParseNumFromStr
SysAllocString

shlwapi

SHStrDupW
PathFindExtensionW
PathFindFileNameW
PathRemoveExtensionW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
UrlUnescapeW
StrFormatKBSizeW

imm32

ImmGetOpenStatus
ImmGetContext
ImmReleaseContext

uxtheme

GetThemePartSize
IsThemeBackgroundPartiallyTransparent
DrawThemeText
GetThemeSysColor
GetWindowTheme
GetCurrentThemeName
CloseThemeData
OpenThemeData
GetThemeColor
DrawThemeBackground
DrawThemeParentBackground
IsAppThemed

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fortnite Cheat/cfg/mfc140.dll
.dll windows:6 windows x64 arch:x64

1c4f22ba069a8f7a4a7a4ba19320ebc6

Code Sign

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:33

Not After

01/09/2022, 18:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:ae:28:25:b0:21:39:46:c4:ba:39:ec:52:06:a0:78:f5:9b:34:ab:db:3b:86:b0:8f:c8:04:ff:0c:6e:a0:28
Signer

Actual PE Digest

09:ae:28:25:b0:21:39:46:c4:ba:39:ec:52:06:a0:78:f5:9b:34:ab:db:3b:86:b0:8f:c8:04:ff:0c:6e:a0:28

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\\binaries\amd64ret\bin\amd64\\mfc140.amd64.pdb

Imports

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegEnumValueA
RegQueryValueExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegEnumKeyA
RegQueryValueA
RegSetValueA
GetFileSecurityA
SetFileSecurityA
RegOpenKeyExW
IsTextUnicode

kernel32

WideCharToMultiByte
VirtualQuery
GetSystemInfo
ExpandEnvironmentStringsA
OutputDebugStringW
InitializeSListHead
GetSystemTimeAsFileTime
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
QueryPerformanceCounter
GetEnvironmentVariableA
SizeofResource
LockResource
LoadResource
FindResourceW
GetLastError
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
MultiByteToWideChar
SetLastError
DeactivateActCtx
LoadLibraryW
GetProcAddress
ActivateActCtx
FindActCtxSectionStringW
GetEnvironmentVariableW
GetModuleFileNameW
GetModuleHandleExW
QueryActCtxW
OutputDebugStringA
lstrcpyA
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentThreadId
InitializeCriticalSection
GetACP
DeleteFileA
GetModuleHandleA
GetCPInfo
GetOEMCP
MulDiv
VerSetConditionMask
VerifyVersionInfoA
FreeLibrary
CloseHandle
GetTempPathA
CreateFileA
SetFilePointer
Sleep
GetCurrentDirectoryA
lstrcmpA
GetSystemDirectoryW
LoadLibraryExW
DecodePointer
EncodePointer
GetModuleHandleW
FindResourceA
GlobalFree
GetTickCount
GetWindowsDirectoryA
lstrcmpiA
SetThreadPriority
GetModuleFileNameA
LocalAlloc
LocalFree
TlsAlloc
TlsFree
CreateActCtxW
LoadLibraryA
GlobalFlags
GlobalFindAtomA
GetSystemTime
LocalUnlock
LocalLock
GlobalGetAtomNameA
GetAtomNameA
SuspendThread
ResumeThread
SetEvent
CopyFileA
GetTickCount64
WaitForMultipleObjects
CreateEventA
ReleaseMutex
CreateMutexA
ReleaseSemaphore
CreateSemaphoreA
WaitForSingleObject
FormatMessageA
SetFileAttributesA
LocalFileTimeToFileTime
GetFileAttributesExA
GetFileSizeEx
FindNextFileA
SystemTimeToTzSpecificLocalTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetShortPathNameA
GetStringTypeExA
GetThreadLocale
FindClose
FindFirstFileA
GetVolumeInformationA
LoadLibraryExA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
GetProfileIntA
SystemTimeToFileTime
ReplaceFileA
SetFileTime
GetFileTime
GetFullPathNameA
GetDiskFreeSpaceA
GetTempFileNameA
VirtualProtect
RaiseException
lstrcpyW
lstrcmpW
IsDBCSLeadByte
GetUserDefaultLCID
FindResourceExW
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalAddAtomA
GetCurrentProcessId
SetErrorMode
GlobalDeleteAtom
CompareStringA
GetVersionExA
GetCurrentThread
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
SearchPathA
GlobalSize
GetFileAttributesA
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalReAlloc
TlsSetValue
GetFileSize

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception_context
__current_exception
wcsstr
wcschr
wcsrchr
memcmp
__C_specific_handler
_purecall
memmove
memset
memcpy
__std_terminate
__std_type_info_destroy_list
_CxxThrowException

api-ms-win-crt-runtime-l1-1-0

_errno
_invalid_parameter_noinfo
abort
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_register_onexit_function
_crt_atexit
__p___argc
__p___argv
_cexit
_beginthreadex
_endthreadex
_initterm_e
_resetstkoflw
terminate
_initterm
__doserrno
_initialize_onexit_table
_endthread
_beginthread
_execute_onexit_table

api-ms-win-crt-string-l1-1-0

_wcsrev
iswspace
wcspbrk
_wcsicoll
_strdup
strncpy_s
wcsncpy_s
_wcsicmp
wcscmp
_wcsupr_s
_strnicmp
strcat_s
wcscspn
wcscoll
_wcslwr_s
wcsspn
strlen
toupper
strnlen
wmemcpy_s
wcsnlen
wcscpy_s
wcslen
strcpy_s
wcscat_s

api-ms-win-crt-multibyte-l1-1-0

_mbscspn
_mbsrchr
_mbsnbcmp
_mbsspn
_mbsnbicmp
_mbsicmp
_mbsdec
_mbsnbcpy_s
_ismbblead
_ismbcalpha
_ismbcalnum
_mbsupr_s
_ismbcprint
_mbsicoll
_mbctoupper
_mbctolower
_mbscmp
_mbsrev
_mbscoll
_mbsstr
_ismbcspace
_mbsinc
_mbschr
_ismbcdigit
_mbspbrk
_mbslwr_s

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s
__stdio_common_vsprintf
__stdio_common_vsnwprintf_s
fclose
__stdio_common_vsnprintf_s
fflush
ftell
_get_osfhandle
_fileno
_open_osfhandle
fread
feof
__stdio_common_vswprintf_s
__stdio_common_vsscanf
ferror
clearerr_s
fwrite
fputs
fgets
fseek
__stdio_common_vswprintf

api-ms-win-crt-utility-l1-1-0

ldiv
labs
abs
rand_s

api-ms-win-crt-heap-l1-1-0

_expand
calloc
free
_msize
_recalloc
realloc
malloc

api-ms-win-crt-convert-l1-1-0

wcstombs_s
strtod
atol
_ultoa_s
atoi
strtoul
strtol
_itoa_s
_ltoa_s

api-ms-win-crt-math-l1-1-0

sin
_fdopen
floor
fabs
exp
sqrt
atan2
ceil
cos

api-ms-win-crt-time-l1-1-0

_time64
_mktime64
clock
_localtime64_s

api-ms-win-crt-filesystem-l1-1-0

_splitpath_s
_makepath_s
_fullpath

user32

GetDesktopWindow
GetAsyncKeyState
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
DrawStateA
GetCapture
LoadAcceleratorsW
TranslateAcceleratorA
IsWindow
DestroyMenu
LoadMenuW
GetSubMenu
PostThreadMessageA
GetClassInfoA
DefWindowProcA
GetWindow
GetMenuItemCount
GetMenuItemID
IsIconic
GetForegroundWindow
DrawIcon
GetMonitorInfoA
MonitorFromPoint
SystemParametersInfoA
LoadCursorA
ValidateRect
SetLayeredWindowAttributes
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
GetUpdateRect
UnionRect
SetWindowPos
LockWindowUpdate
GetKeyState
BeginDeferWindowPos
EndDeferWindowPos
AppendMenuA
CreatePopupMenu
IntersectRect
SetScrollPos
EnableMenuItem
GetNextDlgTabItem
GetSystemMenu
IsMenu
IsZoomed
ModifyMenuA
DeleteMenu
SetWindowRgn
DestroyAcceleratorTable
GetTopWindow
DestroyWindow
MonitorFromRect
EnumDisplayMonitors
GetSysColor
GetClassLongPtrA
IsClipboardFormatAvailable
DestroyCursor
CreateAcceleratorTableA
CopyAcceleratorTableA
GetKeyboardState
ToAsciiEx
MapVirtualKeyA
CharUpperA
LoadImageW
LoadIconW
SetWindowTextA
GetMenuState
CheckMenuItem
SetFocus
GetMenuItemInfoA
DrawFrameControl
SubtractRect
GetLastActivePopup
GetMessageA
UpdateLayeredWindow
EnableScrollBar
GetScrollPos
GetMenuDefaultItem
SetMenuDefaultItem
HideCaret
InvertRect
EnumChildWindows
GetWindowTextA
GetDoubleClickTime
GetDC
ReleaseDC
GetWindowRgn
FrameRect
ShowScrollBar
IsWindowEnabled
InsertMenuA
RegisterClipboardFormatA
WaitMessage
CharUpperBuffA
DrawEdge
PostQuitMessage
UnregisterClassA
ShowOwnedPopups
GetWindowThreadProcessId
MessageBoxA
SetWindowLongA
SetMenuItemBitmaps
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetWindowLongPtrA
CallWindowProcA
SetActiveWindow
CreateMenu
MoveWindow
InvalidateRgn
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
GetWindowTextLengthA
GetTabbedTextExtentW
GetDlgItem
CreateDialogIndirectParamA
GetActiveWindow
EndDialog
GetPropA
RemovePropA
SetPropA
MapDialogRect
GetMessageTime
GetMessagePos
GetDialogBaseUnits
GetDCEx
RemoveMenu
MsgWaitForMultipleObjectsEx
CharNextA
SetWindowContextHelpId
IsDialogMessageA
ClipCursor
SendNotifyMessageA
InSendMessage
GetMenuStringA
WindowFromDC
SetScrollRange
AdjustWindowRectEx
GetTabbedTextExtentA
CountClipboardFormats
LoadBitmapA
GetMenu
SetMenu
GetClassLongA
GetClassInfoExA
GetWindowLongPtrA
CreateWindowExA
SetWindowPlacement
TrackPopupMenuEx
RegisterClassA
WinHelpA
GetScrollRange
SetScrollInfo
GetScrollInfo
ScrollWindow
MonitorFromWindow
BeginPaint
EndPaint
SendDlgItemMessageA
LoadAcceleratorsA
LoadMenuA
UnpackDDElParam
ReuseDDElParam
InsertMenuItemA
GetMenuBarInfo
GetWindowDC
DefFrameProcA
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
ScrollWindowEx
RealChildWindowFromPoint
CharToOemBuffA
OemToCharBuffA
SetRect
EnableWindow
IsCharLowerA
GetKeyNameTextA
GetKeyboardLayout
MapVirtualKeyExA
DispatchMessageA
TranslateMessage
PeekMessageA
SetForegroundWindow
LoadCursorW
GetFocus
IsChild
TrackPopupMenu
LoadIconA
GetNextDlgGroupItem
DrawFocusRect
SetCursor
GetWindowLongA
LoadImageA
CopyImage
GetIconInfo
FillRect
NotifyWinEvent
CopyRect
LoadBitmapW
MapWindowPoints
MessageBeep
SetCursorPos
WindowFromPoint
ClientToScreen
SetCapture
ReleaseCapture
CopyIcon
BringWindowToTop
RegisterWindowMessageA
DestroyIcon
GetClassNameA
SetParent
ShowWindow
GetWindowPlacement
IsRectEmpty
GetDlgCtrlID
PostMessageA
DeferWindowPos
EqualRect
GetSysColorBrush
SetClassLongPtrA
GetParent
DrawIconEx
InflateRect
OffsetRect
PtInRect
UpdateWindow
SetTimer
TrackMouseEvent
ScreenToClient
GetCursorPos
IsWindowVisible
GetClientRect
KillTimer
SetRectEmpty
GetWindowRect
SendMessageA
InvalidateRect
GetComboBoxInfo
RedrawWindow
GetSystemMetrics

gdi32

CreateFontA
StretchDIBits
RoundRect
CreateEllipticRgn
CreateHatchBrush
ExtTextOutA
Polyline
SetDIBColorTable
GetDIBits
SelectPalette
StretchBlt
SetBkColor
CreateBitmap
EnumFontFamiliesExA
CreateRoundRectRgn
SetRectRgn
FillRgn
GetBoundsRect
CombineRgn
CreateRectRgn
PatBlt
DeleteDC
GetCurrentObject
EndDoc
EndPage
StartPage
ExtFloodFill
SetPaletteEntries
CreateDIBitmap
CreatePatternBrush
CreatePen
EnumFontFamiliesA
GetTextCharsetInfo
GetDeviceCaps
CreateFontIndirectA
GetBkColor
SetPixel
Ellipse
CreateDIBSection
OffsetRgn
CreateRectRgnIndirect
GetRgnBox
BitBlt
SetPixelV
CreateCompatibleBitmap
FrameRgn
PtInRegion
CreatePolygonRgn
GetPixel
GetSystemPaletteEntries
GetNearestPaletteIndex
RealizePalette
CreatePalette
GetPaletteEntries
GetStockObject
Rectangle
Polygon
GetTextColor
GetObjectType
DeleteObject
SelectObject
CreateCompatibleDC
GetObjectA
CreateSolidBrush
GetTextExtentPoint32A
GetTextMetricsA
LPtoDP
CreateMetaFileA
CloseMetaFile
DeleteMetaFile
GetViewportOrgEx
PtVisible
RectVisible
TextOutA
Escape
GetClipBox
GetTextAlign
GetCurrentPositionEx
MoveToEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SaveDC
RestoreDC
GetROP2
GetBkMode
GetPolyFillMode
GetStretchBltMode
GetNearestColor
GetTextFaceA
GetWindowExtEx
GetViewportExtEx
SetTextColor
SetMapMode
SetWindowExtEx
ScaleWindowExtEx
GetTextExtentPoint32W
GetTextExtentPointA
GetWindowOrgEx
SetWindowOrgEx
IntersectClipRect
CreateDCA
SetBrushOrgEx
SetAbortProc
StartDocA
DPtoLP
AbortDoc
CopyMetaFileA
UnrealizeObject
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
OffsetWindowOrgEx
SelectClipRgn
ExcludeClipRect
OffsetClipRgn
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetLayout
SetLayout
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
SelectClipPath
GetClipRgn
ExtSelectClipRgn
PlayMetaFileRecord
PlayMetaFile
EnumMetaFile
ExtCreatePen
CreateDIBPatternBrushPt
GetMapMode
GetCharWidthA

ole32

OleDraw
CreateFileMoniker
OleRun
OleIsRunning
OleQueryLinkFromData
OleQueryCreateFromData
OleSetMenuDescriptor
CreateGenericComposite
CreateItemMoniker
WriteClassStm
OleRegGetMiscStatus
OleRegEnumVerbs
OleGetIconOfClass
CoDisconnectObject
GetHGlobalFromILockBytes
ReadClassStg
OleLoad
OleSave
OleCreate
OleCreateLinkToFile
OleCreateFromFile
CoRegisterMessageFilter
OleCreateLinkFromData
OleCreateFromData
OleFlushClipboard
CoTreatAsClass
OleSetContainedObject
StringFromCLSID
OleLockRunning
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleSetClipboard
CoInitializeEx
StringFromGUID2
ReadFmtUserTypeStg
OleLoadFromStream
OleGetClipboard
OleRegGetUserType
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
ReadClassStm
OleSaveToStream
CreateOleAdviseHolder
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
SetConvertStg
WriteFmtUserTypeStg
ReleaseStgMedium
OleDuplicateData
CreateDataAdviseHolder
CreateDataCache
CreateStreamOnHGlobal
WriteClassStg
GetRunningObjectTable
OleTranslateAccelerator
IsAccelerator
CoUninitialize
CoInitialize
PropVariantClear
CoTaskMemAlloc
CoCreateGuid
CoTaskMemFree
CoCreateInstance
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
CoRegisterClassObject
PropVariantCopy
RevokeDragDrop
OleIsCurrentClipboard
CoLockObjectExternal
DoDragDrop
CoGetMalloc
GetClassFile
StgOpenStorage
StgIsStorageFile
OleCreateStaticFromData
StgCreateDocfile
RegisterDragDrop
CreateBindCtx

oleaut32

SysAllocString
SysStringLen
SysFreeString
VariantChangeType
VariantClear
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
OleCreatePropertyFrame
VarParseNumFromStr
SafeArrayCreateVector
VarBstrFromDec
VarDecFromStr
VarDateFromStr
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCopy
VarBstrFromCy
VarCyFromStr
SysReAllocStringLen
SafeArrayRedim
SafeArrayCreate
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SysStringByteLen
SysAllocStringByteLen
SafeArrayDestroy
VariantCopy
VarBstrCmp
DispCallFunc
VariantInit
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
OleLoadPicture
OleCreatePictureIndirect
OleCreateFontIndirect
OleTranslateColor
SysAllocStringLen

shlwapi

PathFindFileNameA
PathRemoveExtensionA
StrFormatKBSizeA
PathIsUNCA
PathStripToRootA
UrlUnescapeA
PathRemoveFileSpecW
PathFindExtensionA

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

uxtheme

DrawThemeParentBackground
GetWindowTheme
DrawThemeBackground
GetThemeColor
OpenThemeData
CloseThemeData
GetCurrentThemeName
GetThemeSysColor
DrawThemeText
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
IsAppThemed

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 928KB - Virtual size: 927KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fortnite Cheat/cfg/mfc140u.dll
.dll windows:6 windows x64 arch:x64

a3853309d9f95ee1500e9b4c16ec8cc3

Code Sign

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:33

Not After

01/09/2022, 18:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:e1:a5:fb:f8:a6:20:ba:5e:d8:6d:74:30:d4:89:cd:fb:2d:b1:0e:a0:e4:2a:32:f1:97:b8:94:43:20:e0:51
Signer

Actual PE Digest

0f:e1:a5:fb:f8:a6:20:ba:5e:d8:6d:74:30:d4:89:cd:fb:2d:b1:0e:a0:e4:2a:32:f1:97:b8:94:43:20:e0:51

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\\binaries\amd64ret\bin\amd64\\mfc140u.amd64.pdb

Imports

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumValueW
RegQueryValueExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumKeyW
RegQueryValueW
RegSetValueW
GetFileSecurityW
SetFileSecurityW
IsTextUnicode
RegQueryValueExA
RegOpenKeyExA

kernel32

OutputDebugStringW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
FormatMessageA
ExpandEnvironmentStringsA
GetSystemInfo
VirtualQuery
TerminateProcess
LockResource
LoadResource
FindResourceW
GetLastError
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetLastError
DeactivateActCtx
LoadLibraryW
GetProcAddress
ActivateActCtx
FindActCtxSectionStringW
CreateActCtxW
GetModuleFileNameW
GetModuleHandleExW
QueryActCtxW
OutputDebugStringA
MultiByteToWideChar
lstrcpyW
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentThreadId
InitializeCriticalSection
DeleteFileW
GetModuleHandleW
MulDiv
VerSetConditionMask
VerifyVersionInfoW
FreeLibrary
CloseHandle
GetTempPathW
CreateFileW
SetFilePointer
Sleep
GetCurrentDirectoryW
lstrcmpW
GetSystemDirectoryW
LoadLibraryExW
DecodePointer
EncodePointer
GlobalFree
GetTickCount
GetWindowsDirectoryW
lstrcmpiW
SetThreadPriority
LocalAlloc
LocalFree
TlsAlloc
TlsFree
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalReAlloc
TlsSetValue
GetFileSize
GetFileAttributesW
SizeofResource
GetEnvironmentVariableA
GetEnvironmentVariableW
GlobalFlags
GlobalFindAtomW
GetSystemTime
LocalUnlock
LocalLock
GlobalGetAtomNameW
GetAtomNameW
SuspendThread
ResumeThread
SetEvent
CopyFileW
GetTickCount64
WaitForMultipleObjects
CreateEventW
ReleaseMutex
CreateMutexW
ReleaseSemaphore
CreateSemaphoreW
WaitForSingleObject
FormatMessageW
SetFileAttributesW
LocalFileTimeToFileTime
GetFileAttributesExW
GetFileSizeEx
FindNextFileW
SystemTimeToTzSpecificLocalTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetShortPathNameW
GetStringTypeExW
GetThreadLocale
FindClose
FindFirstFileW
GetVolumeInformationW
MoveFileW
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
GetProfileIntW
SystemTimeToFileTime
ReplaceFileW
SetFileTime
GetFileTime
GetFullPathNameW
GetDiskFreeSpaceW
GetTempFileNameW
VirtualProtect
RaiseException
lstrcpyA
CompareStringW
IsDBCSLeadByte
GetUserDefaultLCID
FindResourceExW
WritePrivateProfileStringW
GlobalSize
SearchPathW
GetLocaleInfoW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetCurrentThread
GetPrivateProfileStringW
GetVersionExW
WideCharToMultiByte
lstrcmpA
CompareStringA
GlobalDeleteAtom
SetErrorMode
GetCurrentProcessId
GlobalAddAtomW
GetPrivateProfileIntW

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception_context
__current_exception
memcmp
wcsrchr
__C_specific_handler
wcsstr
wcschr
_purecall
memmove
memset
memcpy
__std_terminate
__std_type_info_destroy_list
_CxxThrowException

api-ms-win-crt-runtime-l1-1-0

_resetstkoflw
_beginthreadex
_endthreadex
__p___argc
_initterm_e
_initterm
terminate
_beginthread
abort
_invalid_parameter_noinfo
_errno
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_endthread
__doserrno
__p___wargv

api-ms-win-crt-string-l1-1-0

_wcsrev
wcscoll
strcpy_s
wcslen
_wcslwr_s
toupper
wcsnlen
wmemcpy_s
wcscmp
iswspace
_wcsupr_s
_wcsicmp
wcspbrk
wcscspn
wcsspn
_wcsicoll
wcsncmp
wcscpy_s
iswdigit
iswalpha
iswalnum
iswprint
towupper
towlower
wcscat_s
_wcsdup
strlen
_strnicmp
wcsncpy_s
strnlen
_wcsnicmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf_s
__stdio_common_vswprintf
fgetws
fputws
fwrite
clearerr_s
ferror
feof
fread
ftell
_open_osfhandle
_fileno
_get_osfhandle
__stdio_common_vswscanf
fflush
fclose
__stdio_common_vsprintf_s
__stdio_common_vsnwprintf_s
__stdio_common_vsprintf
fseek

api-ms-win-crt-utility-l1-1-0

rand_s
labs
ldiv
abs

api-ms-win-crt-heap-l1-1-0

_recalloc
malloc
_msize
_expand
realloc
free
calloc

api-ms-win-crt-convert-l1-1-0

wcstoul
_itow_s
wcstol
_wtoi
_ltow_s
_ultow_s
_wtol
wcstod

api-ms-win-crt-math-l1-1-0

exp
ceil
sqrt
atan2
cos
sin
_fdopen
floor
fabs

api-ms-win-crt-time-l1-1-0

clock
_localtime64_s
_mktime64
_time64

api-ms-win-crt-filesystem-l1-1-0

_wmakepath_s
_wsplitpath_s
_wfullpath

api-ms-win-crt-multibyte-l1-1-0

_mbsupr_s
_mbscspn
_mbsicmp
_mbsrchr
_mbscmp
_mbsstr
_mbscoll
_ismbcspace
_mbspbrk
_mbsspn
_mbsicoll
_mbsrev
_mbslwr_s
_mbsinc
_mbschr

user32

TranslateAcceleratorW
GetSystemMetrics
DestroyMenu
LoadMenuW
GetSubMenu
PostThreadMessageW
GetClassInfoW
DefWindowProcW
GetWindow
ScreenToClient
GetMenuItemID
IsIconic
GetForegroundWindow
DrawIcon
GetMonitorInfoW
MonitorFromPoint
SystemParametersInfoW
ValidateRect
SetLayeredWindowAttributes
CallNextHookEx
SetWindowsHookExW
UnhookWindowsHookEx
GetUpdateRect
UnionRect
SetWindowPos
LockWindowUpdate
GetKeyState
BeginDeferWindowPos
EndDeferWindowPos
AppendMenuW
CreatePopupMenu
IntersectRect
SetScrollPos
EnableMenuItem
GetNextDlgTabItem
GetSystemMenu
IsMenu
IsZoomed
ModifyMenuW
DeleteMenu
SetWindowRgn
DestroyAcceleratorTable
GetTopWindow
DestroyWindow
MonitorFromRect
EnumDisplayMonitors
GetSysColor
GetClassLongPtrW
IsClipboardFormatAvailable
DestroyCursor
CreateAcceleratorTableW
CopyAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyW
CharUpperW
SetWindowTextW
GetMenuState
CheckMenuItem
SetFocus
GetMenuItemInfoW
DrawFrameControl
SubtractRect
GetLastActivePopup
GetMessageW
UpdateLayeredWindow
EnableScrollBar
GetScrollPos
GetMenuDefaultItem
SetMenuDefaultItem
HideCaret
InvertRect
EnumChildWindows
GetWindowTextW
GetDoubleClickTime
GetDC
ReleaseDC
GetWindowRgn
FrameRect
ShowScrollBar
IsWindowEnabled
InsertMenuW
GetActiveWindow
RegisterClipboardFormatW
GetComboBoxInfo
CharUpperBuffW
DrawEdge
PostQuitMessage
UnregisterClassW
ShowOwnedPopups
GetWindowThreadProcessId
MessageBoxW
LoadAcceleratorsW
SetMenuItemBitmaps
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetWindowLongPtrW
CallWindowProcW
SetActiveWindow
CreateMenu
MoveWindow
InvalidateRgn
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
GetWindowTextLengthW
GetTabbedTextExtentW
GetDlgItem
CreateDialogIndirectParamW
EndDialog
GetPropW
RemovePropW
SetPropW
MapDialogRect
GetMessageTime
GetMessagePos
GetDialogBaseUnits
GetDCEx
RemoveMenu
MsgWaitForMultipleObjectsEx
CharNextW
SetWindowContextHelpId
IsDialogMessageW
ClipCursor
SendNotifyMessageW
InSendMessage
GetMenuStringW
WindowFromDC
SetScrollRange
AdjustWindowRectEx
CountClipboardFormats
GetMenu
SetMenu
GetClassInfoExW
GetWindowLongPtrW
CreateWindowExW
SetWindowPlacement
TrackPopupMenuEx
RegisterClassW
WinHelpW
GetScrollRange
SetScrollInfo
GetScrollInfo
ScrollWindow
MonitorFromWindow
BeginPaint
EndPaint
SendDlgItemMessageA
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
GetMenuBarInfo
GetWindowDC
DefFrameProcW
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextW
SendDlgItemMessageW
SetDlgItemInt
SetDlgItemTextW
IsDlgButtonChecked
ScrollWindowEx
RealChildWindowFromPoint
CharToOemBuffA
OemToCharBuffA
GetCursorPos
IsWindowVisible
GetClientRect
KillTimer
SetRectEmpty
GetWindowRect
SendMessageW
InvalidateRect
RedrawWindow
SetRect
EnableWindow
IsCharLowerW
GetKeyNameTextW
GetKeyboardLayout
MapVirtualKeyExW
GetCapture
DrawStateW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetAsyncKeyState
GetDesktopWindow
WaitMessage
DispatchMessageW
TranslateMessage
PeekMessageW
SetForegroundWindow
LoadCursorW
GetFocus
IsChild
TrackPopupMenu
LoadIconW
GetNextDlgGroupItem
DrawFocusRect
SetCursor
GetWindowLongW
LoadImageW
CopyImage
GetIconInfo
FillRect
NotifyWinEvent
CopyRect
LoadBitmapW
MapWindowPoints
MessageBeep
SetCursorPos
WindowFromPoint
ClientToScreen
SetCapture
ReleaseCapture
CopyIcon
BringWindowToTop
RegisterWindowMessageW
DestroyIcon
GetClassNameW
SetParent
ShowWindow
GetWindowPlacement
IsRectEmpty
GetDlgCtrlID
PostMessageW
DeferWindowPos
EqualRect
GetSysColorBrush
SetClassLongPtrW
GetParent
DrawIconEx
InflateRect
OffsetRect
PtInRect
UpdateWindow
SetTimer
SetWindowLongW
TrackMouseEvent
GetMenuItemCount
IsWindow

gdi32

PtVisible
GetViewportOrgEx
DeleteMetaFile
CloseMetaFile
CreateMetaFileW
LPtoDP
GetCharWidthW
CreateFontW
StretchDIBits
RoundRect
CreateEllipticRgn
CreateHatchBrush
ExtTextOutW
Polyline
SetDIBColorTable
GetDIBits
SelectPalette
StretchBlt
SetBkColor
CreateBitmap
EnumFontFamiliesExW
CreateRoundRectRgn
SetRectRgn
FillRgn
GetBoundsRect
CombineRgn
CreateRectRgn
PatBlt
DeleteDC
GetCurrentObject
EndDoc
EndPage
StartPage
ExtFloodFill
SetPaletteEntries
CreateDIBitmap
CreatePatternBrush
CreatePen
EnumFontFamiliesW
GetTextCharsetInfo
GetDeviceCaps
CreateFontIndirectW
GetBkColor
SetPixel
Ellipse
CreateDIBSection
OffsetRgn
CreateRectRgnIndirect
GetRgnBox
BitBlt
SetPixelV
CreateCompatibleBitmap
FrameRgn
PtInRegion
CreatePolygonRgn
GetPixel
GetSystemPaletteEntries
GetNearestPaletteIndex
RealizePalette
CreatePalette
GetPaletteEntries
GetStockObject
TextOutW
Polygon
GetTextColor
GetObjectType
DeleteObject
SelectObject
CreateCompatibleDC
GetObjectW
CreateSolidBrush
GetTextExtentPoint32W
GetTextMetricsW
GetClipBox
Escape
GetTextAlign
GetCurrentPositionEx
MoveToEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SaveDC
RestoreDC
GetROP2
GetBkMode
GetPolyFillMode
GetStretchBltMode
GetNearestColor
GetTextFaceW
GetWindowExtEx
GetViewportExtEx
SetTextColor
SetMapMode
SetWindowExtEx
ScaleWindowExtEx
GetWindowOrgEx
SetWindowOrgEx
IntersectClipRect
CreateDCW
SetBrushOrgEx
SetAbortProc
StartDocW
DPtoLP
AbortDoc
CopyMetaFileW
UnrealizeObject
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
OffsetWindowOrgEx
SelectClipRgn
ExcludeClipRect
OffsetClipRgn
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetLayout
SetLayout
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
SelectClipPath
GetClipRgn
ExtSelectClipRgn
PlayMetaFileRecord
PlayMetaFile
EnumMetaFile
ExtCreatePen
CreateDIBPatternBrushPt
GetMapMode
RectVisible
Rectangle

ole32

CoCreateGuid
OleRegGetMiscStatus
OleRegEnumVerbs
CreateFileMoniker
OleRun
CoTaskMemAlloc
CoDisconnectObject
OleIsRunning
CoTaskMemFree
CoCreateInstance
CoRegisterMessageFilter
CoTreatAsClass
SetConvertStg
WriteFmtUserTypeStg
OleDuplicateData
WriteClassStg
GetRunningObjectTable
OleTranslateAccelerator
IsAccelerator
OleSetClipboard
CreateBindCtx
PropVariantClear
OleQueryLinkFromData
OleQueryCreateFromData
OleSetMenuDescriptor
CreateGenericComposite
CreateItemMoniker
GetClassFile
OleRegGetUserType
CreateDataCache
CoFreeUnusedLibraries
OleInitialize
OleGetClipboard
WriteClassStm
OleGetIconOfClass
GetHGlobalFromILockBytes
CoRegisterClassObject
ReadClassStg
OleLoad
OleSave
OleDraw
CreateStreamOnHGlobal
RevokeDragDrop
OleCreate
OleCreateLinkToFile
RegisterDragDrop
CoLockObjectExternal
DoDragDrop
CoGetMalloc
StgOpenStorage
StgIsStorageFile
OleCreateFromFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleSetContainedObject
StringFromCLSID
OleLockRunning
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
PropVariantCopy
CoInitializeEx
StringFromGUID2
ReadFmtUserTypeStg
OleLoadFromStream
StgCreateDocfileOnILockBytes
StgCreateDocfile
CreateILockBytesOnHGlobal
ReadClassStm
OleSaveToStream
CreateOleAdviseHolder
CoInitialize
CreateDataAdviseHolder
CoRevokeClassObject
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleFlushClipboard
CoUninitialize
ReleaseStgMedium
OleUninitialize
OleIsCurrentClipboard

oleaut32

SafeArrayCreate
SysAllocString
SysStringLen
SysFreeString
VariantChangeType
VariantClear
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
VarParseNumFromStr
SafeArrayCreateVector
VarBstrFromDec
VarDecFromStr
VarDateFromStr
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCopy
VarBstrFromCy
VarCyFromStr
SysReAllocStringLen
SysAllocStringByteLen
SafeArrayRedim
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SysStringByteLen
SafeArrayDestroy
VariantCopy
VarBstrCmp
DispCallFunc
VariantInit
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
OleLoadPicture
OleCreatePictureIndirect
OleCreateFontIndirect
OleTranslateColor
OleCreatePropertyFrame

shlwapi

StrFormatKBSizeW
PathFindExtensionW
PathFindFileNameW
PathRemoveExtensionW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
UrlUnescapeW

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

uxtheme

DrawThemeParentBackground
GetWindowTheme
DrawThemeBackground
GetThemeColor
OpenThemeData
CloseThemeData
GetCurrentThemeName
GetThemeSysColor
DrawThemeText
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
IsAppThemed

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 950KB - Virtual size: 949KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fortnite Cheat/cfg/mfcore.dll
.dll regsvr32 windows:10 windows x64 arch:x64

bb755df87764d426164a520063f1c78e

Code Sign

33:00:00:04:5f:f3:c9:6c:1a:7f:f7:da:1d:00:00:00:00:04:5f
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:20

Not After

14/11/2024, 19:20

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

38:3a:4e:88:c7:23:78:7a:7d:e9:01:91:0d:d9:54:77:e7:8a:79:39:d0:62:a2:d6:92:69:35:e3:18:8e:d7:4d
Signer

Actual PE Digest

38:3a:4e:88:c7:23:78:7a:7d:e9:01:91:0d:d9:54:77:e7:8a:79:39:d0:62:a2:d6:92:69:35:e3:18:8e:d7:4d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

mfcore.pdb

Imports

msvcrt

_unlock
wcsncmp
_lock
strnlen
sqrt
sin
strncpy_s
_ultow_s
wcsstr
isprint
qsort
swscanf_s
__dllonexit
_wcslwr_s
towlower
srand
time
rand
_wcsicmp
_ui64tow_s
_wcsnicmp
towupper
sqrtf
_wsplitpath_s
?terminate@@YAXXZ
_onexit
_initterm
_amsg_exit
_XcptFilter
_gcvt_s
_ultoa_s
__C_specific_handler
realloc
_errno
_ltoa_s
__CxxFrameHandler3
memmove_s
_callnewh
_vsnprintf
_i64toa_s
_vsnwprintf
wcsncpy_s
iswdigit
iswalpha
malloc
free
_purecall
memset
memmove
memcpy
memcmp
wcscat_s
wcscpy_s
memcpy_s
_vscprintf
ceil
cos
floor
wcscmp

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameW
FreeLibrary
GetModuleHandleExW
GetModuleHandleA
LoadLibraryExW
LoadLibraryExA
GetProcAddress
LoadResource
GetModuleFileNameA
FindResourceExW
DisableThreadLibraryCalls
GetModuleHandleW
SizeofResource

api-ms-win-core-synch-l1-1-0

InitializeCriticalSection
TryEnterCriticalSection
InitializeSRWLock
ReleaseMutex
WaitForSingleObject
OpenEventW
AcquireSRWLockExclusive
DeleteCriticalSection
CreateEventW
SetEvent
ReleaseSemaphore
WaitForMultipleObjectsEx
CreateSemaphoreExW
LeaveCriticalSection
ReleaseSRWLockShared
CreateMutexExW
EnterCriticalSection
ReleaseSRWLockExclusive
ResetEvent
CreateEventExW
AcquireSRWLockShared
WaitForSingleObjectEx
OpenSemaphoreW

api-ms-win-core-registry-l1-1-0

RegGetValueW
RegQueryValueExW
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExW
RegDeleteValueW
RegCloseKey
RegEnumKeyExW
RegSetValueExW

api-ms-win-eventing-provider-l1-1-0

EventEnabled
EventWriteTransfer
EventUnregister
EventSetInformation
EventRegister

api-ms-win-eventing-classicprovider-l1-1-0

TraceMessage
RegisterTraceGuidsW
GetTraceEnableLevel
GetTraceLoggerHandle
GetTraceEnableFlags
UnregisterTraceGuids

api-ms-win-core-string-l2-1-0

CharNextW

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
CompareStringOrdinal
MultiByteToWideChar

api-ms-win-core-errorhandling-l1-1-0

SetLastError
SetUnhandledExceptionFilter
GetLastError
RaiseException
UnhandledExceptionFilter

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiW

api-ms-win-core-synch-l1-2-0

WakeAllConditionVariable
InitOnceExecuteOnce
SleepConditionVariableSRW
Sleep

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-core-memory-l1-1-0

OpenFileMappingW
VirtualQueryEx
CreateFileMappingW
MapViewOfFile
VirtualAlloc
VirtualFree
UnmapViewOfFile
MapViewOfFileEx

api-ms-win-core-processthreads-l1-1-0

CreateThread
GetCurrentThread
GetCurrentProcess
OpenProcessToken
GetExitCodeProcess
TerminateProcess
ProcessIdToSessionId
CreateProcessW
TlsSetValue
GetCurrentThreadId
TlsGetValue
GetCurrentProcessId

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlDeleteFunctionTable
RtlAddFunctionTable

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-handle-l1-1-0

CloseHandle
DuplicateHandle

api-ms-win-core-processthreads-l1-1-1

GetProcessMitigationPolicy

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapFree
HeapAlloc
HeapSize

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CreateThreadpoolTimer
SetThreadpoolTimer

api-ms-win-core-localization-l1-2-0

FormatMessageW
IsValidLocaleName

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
OutputDebugStringA
DebugBreak
OutputDebugStringW

api-ms-win-security-sddl-l1-1-0

ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertStringSidToSidW

api-ms-win-core-heap-l2-1-0

LocalFree
GlobalFree
LocalAlloc
GlobalAlloc

api-ms-win-core-sysinfo-l1-1-0

GetTickCount
GetVersionExA
GetSystemDirectoryW
GetTickCount64
GetSystemTimeAsFileTime

api-ms-win-core-psapi-l1-1-0

K32GetProcessMemoryInfo

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter
QueryPerformanceFrequency

api-ms-win-core-heap-obsolete-l1-1-0

GlobalLock
GlobalUnlock

crypt32

CryptBinaryToStringA

api-ms-win-power-base-l1-1-0

CallNtPowerInformation

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW
GetEnvironmentVariableW

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-wow64-l1-1-1

IsWow64Process2

api-ms-win-core-wow64-l1-1-0

Wow64RevertWow64FsRedirection
IsWow64Process
Wow64DisableWow64FsRedirection

api-ms-win-core-file-l1-1-0

GetFileSize
ReadFile
CreateFileA
CreateFileW
GetFinalPathNameByHandleW
GetFullPathNameW

api-ms-win-core-kernel32-legacy-l1-1-0

GetSystemPowerStatus

api-ms-win-core-threadpool-legacy-l1-1-0

QueueUserWorkItem

api-ms-win-security-base-l1-1-0

FreeSid
CheckTokenMembership
AllocateAndInitializeSid
EqualSid
PrivilegeCheck

api-ms-win-core-debug-l1-1-1

CheckRemoteDebuggerPresent

api-ms-win-core-io-l1-1-0

CancelIoEx
DeviceIoControl
GetOverlappedResult

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-core-largeinteger-l1-1-0

MulDiv

ntdll

RtlNtStatusToDosError
NtQuerySystemInformation
NtQueryInformationProcess

cfgmgr32

CM_Get_Device_Interface_AliasW

ksuser

KsCreateClock2
KsCreatePin2

api-ms-win-appmodel-runtime-l1-1-2

AppPolicyGetLifecycleManagement
AppPolicyGetWindowingModel
AppPolicyGetMediaFoundationCodecLoading

api-ms-win-security-systemfunctions-l1-1-0

SystemFunction036

bcrypt

BCryptDestroyHash
BCryptHashData
BCryptCreateHash
BCryptFinishHash
BCryptOpenAlgorithmProvider
BCryptGetProperty
BCryptDestroyKey
BCryptVerifySignature
BCryptImportKeyPair
BCryptCloseAlgorithmProvider

api-ms-win-security-lsalookup-l2-1-0

LookupPrivilegeValueW

api-ms-win-core-file-l2-1-0

CopyFileExW

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

Exports

Exports

AppendPropVariant
ConvertPropVariant
CopyPropertyStore
CreateNamedPropertyStore
DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ExtractPropVariant
MFCopyMFMetadata
MFCopyPropertyStore
MFCopyStreamMetadata
MFCreateAggregateSource
MFCreateAppSourceProxy
MFCreateAudioRenderer
MFCreateAudioRendererActivate
MFCreateDeviceSource
MFCreateDeviceSourceActivate
MFCreateEncryptedMediaExtensionsStoreActivate
MFCreateExtendedCameraIntrinsicModel
MFCreateExtendedCameraIntrinsics
MFCreateFileSchemePlugin
MFCreateMFMetadataOnPropertyStore
MFCreateMediaProcessor
MFCreateMediaSession
MFCreatePMPHost
MFCreatePMPMediaSession
MFCreatePMPServer
MFCreatePresentationClock
MFCreateSampleCopierMFT
MFCreateSampleGrabberSinkActivate
MFCreateSequencerSegmentOffset
MFCreateSequencerSource
MFCreateSequencerSourceRemoteStream
MFCreateSimpleTypeHandler
MFCreateSoundEventSchemePlugin
MFCreateStandardQualityManager
MFCreateTopoLoader
MFCreateTopology
MFCreateTopologyNode
MFCreateTransformWrapper
MFCreateWMAEncoderActivate
MFCreateWMVEncoderActivate
MFEnumDeviceSources
MFGetMultipleServiceProviders
MFGetService
MFGetTopoNodeCurrentType
MFReadSequencerSegmentOffset
MFRequireProtectedEnvironment
MFShutdownObject
MergePropertyStore

Sections

.text
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

?g_Encry
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

?g_Encry
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 407KB - Virtual size: 407KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 156KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fortnite Cheat/cfg/prm0009.dll
.dll windows:10 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Fortnite Cheat/cfg/rtmpltfm.dll
.dll windows:6 windows x64 arch:x64

e74ce553ad6e540050de22c665dfee4b

Code Sign

33:00:00:01:45:10:eb:f8:9a:d7:99:40:e7:00:00:00:00:01:45
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

27/03/2019, 19:27

Not After

27/03/2020, 19:27

Subject

CN=Skype Software Sarl,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

82:cc:77:6c:22:1f:f8:6d:56:45:c5:ee:d3:6a:af:d1:cf:dc:48:5b:cb:1d:be:ea:97:4c:10:e5:c7:76:f3:7f
Signer

Actual PE Digest

82:cc:77:6c:22:1f:f8:6d:56:45:c5:ee:d3:6a:af:d1:cf:dc:48:5b:cb:1d:be:ea:97:4c:10:e5:c7:76:f3:7f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\MSRTC\msrtc\build.d\output\release\RTMPLTFM.pdb

Imports

api-ms-win-eventing-classicprovider-l1-1-0

TraceMessage

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError

oleaut32

SysFreeString
SysAllocString
SysStringLen
SysStringByteLen
SysAllocStringByteLen
VariantClear
SysAllocStringLen

api-ms-win-core-string-l1-1-0

WideCharToMultiByte

api-ms-win-core-synch-l1-1-0

LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionEx
InitializeSRWLock
WaitForSingleObjectEx
TryEnterCriticalSection
DeleteCriticalSection
TryAcquireSRWLockExclusive

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls
GetProcAddress

api-ms-win-crt-string-l1-1-0

strncpy_s
strncmp
__strncnt
wcslen
wcscpy_s
isupper
_wcsdup
_strnicmp
isdigit
islower
wcsncmp
isalnum
strtok_s
strcmp
memset
strcspn
wcscmp
wcsncpy_s
tolower
strcpy_s
_strdup
isspace
strlen

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_execute_onexit_table
_initialize_onexit_table
_crt_atexit
_beginthreadex
_initialize_narrow_environment
_errno
_invalid_parameter_noinfo
_cexit
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
terminate
abort
_invoke_watson
_configure_narrow_argv
_seh_filter_dll

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf
fgetc
fflush
__stdio_common_vsnprintf_s
__stdio_common_vsprintf_s
fclose
_get_stream_buffer_pointers
fsetpos
__stdio_common_vswscanf
_fseeki64
__acrt_iob_func
fwrite
__stdio_common_vsnwprintf_s
fputc
setvbuf
ungetc
__stdio_common_vswprintf
__stdio_common_vswprintf_s
__stdio_common_vsprintf
fgetpos

api-ms-win-crt-utility-l1-1-0

_byteswap_ushort
llabs
srand
abs
_abs64
qsort
_byteswap_ulong
rand

api-ms-win-crt-heap-l1-1-0

_malloc_base
_callnewh
_calloc_base
free
_get_heap_handle
malloc
_free_base
calloc
realloc
_aligned_free
_aligned_malloc

rtmcodecs

RtcPalVideoPlatformCloseSource
RtcPalVideoPlatformQuerySourceList
RtcPalVideoPlatformOpenSource
RtcPalVideoPlatformGetMediaExtension
RtcPalVideoPlatformClose
RtcPalVideoPlatformOpen
RtmCodecsVscaGetManager
RtcPalVideoSourceStop
RtcPalVideoSourceRestart
RtcPalVideoSourceGetStatistics
RtcPalVideoPreviewStart
RtcPalVideoPreviewStop
RtcPalVideoSourceCreatePreview
RtcPalVideoSourceDeletePreview
RtcPalVideoSourceGetSupportedFormatList
RtcPalVideoSourceStart
RtmCodecsVscaCreatePacsiGenerator
RtmCodecGetFrameCountersFromPacsi
RtmCodecsVscaCreateFecUtility
RtmCodecsVscaGetPacsiInfo
RtcPalVideoConfigurationSetInteger
RtcPalVideoConfigurationSetBoolean
RtcPalVideoConfigurationReset
RtcPalGetComponentStateTrackerBlob
RtmCodecsGetGfxMetrics
RtmCodecsVscaGetEncodingMetrics
RtmCodecsVscaGetDecodingMetrics
RtmCodecsVscaGetStreamCountStatistics

rtmpal

?fileFlush@spl@@YA_NPEAX@Z
?fileWrite@spl@@YA_JPEAXPEBX_K@Z
?isGood@Event@auf@@QEBA_NXZ
?isGood@ThreadRef@auf@@QEBA_NXZ
?fileRead@spl@@YA_JPEAX0_K@Z
?fileSize@spl@@YA_JPEAX@Z
RtcPalIsLaptop
?pathInitFromLocation@spl@@YA?AW4FileError@1@AEAVPath@1@AEBUPathLocation@1@@Z
?fileClose@spl@@YAXPEAX@Z
?pathStringValue@spl@@YAPEBDAEBVPath@1@@Z
?pathAppendComponent@spl@@YA_NAEAVPath@1@PEBD1@Z
?directoryCreateRecursive@spl@@YA?AW4FileError@1@AEBVPath@1@H@Z
__imp_?PL_TEMP_DIR@spl@@3UPathLocation@1@A
auf_internal_log_obfuscated
?size@SimpleBuffer@rtnet@@QEBA_KXZ
?atomicAddI@spl@@YAHPECHH@Z
?atomicAddL@spl@@YAJPECJJ@Z
?compareExchangeL@spl@@YA_NPECJJJ@Z
RtcPalCreateEvent
RtcPalSetEvent
RtcPalCloseWaitableHandle
RtcPalWaitForSingleObject
RtcPalGetTimeLongIn100ns
RtcPalInitializeCriticalSection
?destroyCert@rtnet@@YAXPEAUX509Cert@1@@Z
RtcPalSecureZeroMemory
rtcpal_inet_addr
rtcpal_getaddrinfo
rtcpal_freeaddrinfo
RtcPalNetAddressToStringA
RtcPalNetAddressToStringW
RtcPalNetStringToIPv4AddressW
RtcPalNetStringToIPv6AddressW
RtcPalCreateThread
RtcPalCryptGenRandom
?compareExchangePI@spl@@YA_NPEC_J_J1@Z
?exchangePI@spl@@YA_JPEC_J_J@Z
?post@Event@auf@@QEAAXXZ
?wait@Event@auf@@QEAA_N_K@Z
?intrusive_ptr_release@auf@@YAXPEBVIReferenceCountable@1@@Z
?intrusive_ptr_add_ref@auf@@YAXPEBVIReferenceCountable@1@@Z
?createStrand@auf@@YA?AV?$IntrusivePtr@VThreadPoolTransport@auf@@@1@W4ThreadPoolPriority@spl@@@Z
RtcPalEnableEtwTracing
RtcPalIsEtwTracingEnabled
RtcPalIsTracingEnabled
RtcPalEnableTracing
RtcPalGetEcsSetting
??0Event@auf@@QEAA@XZ
??1Event@auf@@QEAA@XZ
InitializeSListHead
IsDebuggerPresent
QueryPerformanceCounter
InterlockedPushEntrySList
RaiseException
SetLastError
MultiByteToWideChar
RtcPalGetSystemMetricsTemplate
RtcPalGetTimeLongIn100nsFast
RtcPalCreateSocketIOCP
RtcPalCloseSocketIOCP
RtcPalPostSocketIOCPQueuedCompletionStatus
RtcPalGetSocketIOCPQueuedCompletionStatus
RtcPalGetLastError
?encodeUtf8@spl@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBX_K1@Z
RtcPalInitializeCriticalSectionAndSpinCount
?utcTimestamp@spl@@YA_JXZ
?x509NameEncode@rtnet@@YAPEAUX509CertName@1@PEBD@Z
?x509NameDestroy@rtnet@@YAXPEAUX509CertName@1@@Z
?getSelfSignedCert@rtnet@@YAPEAUX509Cert@1@PEBUX509CertName@1@_J1W4HashAlgorithm@spl@@PEAX@Z
?getCertHash@rtnet@@YA_NPEAUX509Cert@1@W4HashAlgorithm@spl@@PEAUCertHash@1@@Z
UnregisterTraceGuids
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
EventRegister
EventUnregister
RtcPalRegisterTraceGuids
RtcPalIsAutomaticProxyTraversalSupported
RtcPalGetIfAddrs
RtcPalFreeIfAddrs
??0IPv4@rtnet@@QEAA@XZ
??1IPv4@rtnet@@QEAA@XZ
?fromBytes@IPv4@rtnet@@QEAA_NPEBE@Z
??0IPv6@rtnet@@QEAA@XZ
??1IPv6@rtnet@@QEAA@XZ
??AIPv6@rtnet@@QEAAAEAE_K@Z
?embedIPv4@IPv6@rtnet@@QEAA_NAEBVIPv4@2@_K@Z
?asIPv6@Address@rtnet@@QEBA_NAEAVIPv6@2@@Z
?address@InterfaceAddress@rtnet@@QEBA?AV?$IntrusivePtr@VAddress@rtnet@@@auf@@XZ
?prefixLength@InterfaceAddress@rtnet@@QEBA_KXZ
?getNat64Prefixes@rtnet@@YA_NV?$duration@_JU?$ratio@$00$0PECEA@@std@@@chrono@std@@AEAV?$vector@V?$IntrusivePtr@VInterfaceAddress@rtnet@@@auf@@V?$allocator@V?$IntrusivePtr@VInterfaceAddress@rtnet@@@auf@@@std@@@4@@Z
?memset_s@spl@@YAHPECX_KH1@Z
?memFree@spl@@YAXPEAX@Z
RtcPalNetStartup
RtcPalNetCleanup
RtcPalRegisterSocket
RtcPalSetLastError
RtcPalInitThreadAttr
RtcPalResetEvent
RtcPalSetSchedulerPolicy
RtcPalWaitForAllThreads
?encryptWithTempKey@spl@@YA?AV?$vector@DU?$secure_allocator@D@internal@spl@@@std@@PEBX_K@Z
?decryptWithTempKey@spl@@YA?AV?$vector@DU?$secure_allocator@D@internal@spl@@@std@@PEBD_K@Z
AcquireCredentialsHandleW
FreeCredentialsHandle
InitializeSecurityContextW
DeleteSecurityContext
FreeContextBuffer
EnumerateSecurityPackagesW
RtcPalCryptMD5Create
RtcPalCryptMD5Update
RtcPalCryptMD5Final
RtcPalCryptMD5Destroy
EventWrite
RtcPalInitializeSlimLock
RtcPalDeleteSlimLock
RtcPalAcquireSlimLock
RtcPalReleaseSlimLock
?sysInfoCPUInfo@spl@@YAXIAEAUCPUInfo@1@@Z
RtcPalGetOSName
RtcPalGetMachineInfo
RtcPalGetComputerNameW
?g_CPUTopology@spl@@3UCPUTopology@1@A
?g_sysInfo@spl@@3USysinfo@1@A
OutputDebugStringA
RtcPalGetAssertRecords
RtcPalClearAssertRecords
RtcPalEnableRDTSCTime
RtcPalTaskQueueCreate
RtcPalTaskQueueDestroy
RtcPalTaskQueueEnqueue
RtcPalTaskQueueDequeue
RtcPalAllocateWorkItem
RtcPalQueueWorkItem
RtcPalFreeWorkItem
RtcPalGetADSPConfig
?lock@MutexCore@internal@auf@@QEAAXXZ
?unlock@MutexCore@internal@auf@@QEAAXXZ
??0CheckedMutex@auf@@QEAA@PEBD_N@Z
??1CheckedMutex@auf@@QEAA@XZ
?decodeToUtf16@spl@@YA?AV?$basic_string@_SU?$char_traits@_S@std@@V?$allocator@_S@2@@std@@PEBD_K@Z
RtcPalGetSystemConfigurationInfo
RtcPalGetTimeDouble
RtcPalTraceLoggingWrite
RtcPalPopulateNetworkInterfaceIdForTraceLoggingEvent
RtcPalSetPlatformProfile
RtcPalInitTracing
RtcPalDeinitTracing
RtcPalCryptStartup
RtcPalCryptCleanup
RtcPalStartup
RtcPalCleanup
RtcPalSetEcsSetting
RtcPalGetAllEcsSettings
RtcPalWaitForAnyObject
RtcPalInitCollectSystemMetrics
RtcPalUninitCollectSystemMetrics
RtcPalStartCollectSystemMetrics
RtcPalStopCollectSystemMetrics
??0Flag@auf@@QEAA@XZ
??1Flag@auf@@QEAA@XZ
?raise@Flag@auf@@QEAA_NXZ
?release@Flag@auf@@QEAAXXZ
?wait@Flag@auf@@QEAA_NV?$duration@_JU?$ratio@$00$0PECEA@@std@@@chrono@std@@@Z
?advance@SimpleBuffer@rtnet@@QEAAX_K@Z
DecodePointer
?memcpy_s@spl@@YAHPEAX_KPEBX1@Z
?log@LogComponent@auf@@QEAAXPEBXIIAEBVLogArgs@2@@Z
?setLogComponentSafe@internal@auf@@YA_NPEBD_N@Z
?setLogComponentDescription@internal@auf@@YAPEBDPEBD0@Z
?instantiateLogComponent@internal@auf@@YAPEAVLogComponent@2@PEBD@Z
EncodePointer
?isGood@MutexCore@internal@auf@@QEBA_NXZ
?strcpy_s@spl@@YAHPEAD_KPEBD@Z
?strnlen_s@spl@@YA_KPEBD_K@Z
?exchangeI@spl@@YAHPECHH@Z
RtcPalRegOpenKeyExW
RtcPalRegQueryValueExW
RtcPalRegCloseKey
RtcPalLoadLibrary
GetSystemInfo
RtcPalCreateSemaphore
RtcPalReleaseSemaphore
?dataBarrier@spl@@YAXXZ
RtcPalTryAcquireSlimLock
?localTimestamp@spl@@YA?AUHidingSystemTime@1@XZ
?localTime@spl@@YAHAEBUHidingSystemTime@1@PEAUtm@@@Z
?highPrecisionTimestamp@spl@@YA_KXZ
?msFromHp@spl@@YA_K_J@Z
?log@LogComponent@auf@@QEAAXPEBXIIPEBDAEBVLogArgs@2@@Z
??0XorshiftRNG@auf@@QEAA@I@Z
??1XorshiftRNG@auf@@QEAA@XZ
?randomUInt@XorshiftRNG@auf@@QEAAIXZ
??0LockfreeStackPool@auf@@QEAA@I@Z
??1LockfreeStackPool@auf@@QEAA@XZ
?allocate@LockfreeStackPool@auf@@QEAAPEAX_K@Z
?lockfreeStackPoolDeallocate@auf@@YAXPEAX@Z
?isGood@LockfreeStackPool@auf@@QEBA_NXZ
??0LockfreeQueue@auf@@QEAA@AEAVLockfreeStackPool@1@@Z
??1LockfreeQueue@auf@@QEAA@XZ
?isGood@LockfreeQueue@auf@@QEBA_NXZ
?enqueue@LockfreeQueue@auf@@QEAA_NPEAX@Z
?dequeue@LockfreeQueue@auf@@QEAAPEAXPEA_N@Z
?empty@LockfreeQueue@auf@@QEAA_NXZ
?snprintf_s@spl@@YAHPEAD_KPEBDZZ
?vsnprintf_s@spl@@YAHPEAD_KPEBD0@Z
?strlcpy@spl@@YA_KPEADPEBD_K@Z
?memMalloc@spl@@YAPEAX_K@Z
?io@StreamSocket@rtnet@@QEAA?AV?$IntrusivePtr@VISocketIO@rtnet@@@auf@@XZ
?compareExchangeI@spl@@YA_NPECHHH@Z
?wait@Event@auf@@QEAA_NV?$duration@_JU?$ratio@$00$0PECEA@@std@@@chrono@std@@@Z
??0UncheckedMutex@auf@@QEAA@PEBD_N@Z
??1UncheckedMutex@auf@@QEAA@XZ
?initInternal@auf@@YA_NPEAUAufInitTag@1@PEBDI_K@Z
?stopInternal@auf@@YAXPEAUAufInitTag@1@PEBD@Z
?g_aufUp@auf@@3HA
?g_configMaxObjectWaitUs@auf@@3_KA
?g_logObjectCountChanges@auf@@3DA
?g_objectCheckDisabled@auf@@3DA
?g_nextObjectId@auf@@3IC
?g_nextCallId@auf@@3IC
?data@SimpleBuffer@rtnet@@QEAAPEAXXZ
?createWithSize@SimpleBuffer@rtnet@@SA?AV?$IntrusivePtr@VSimpleBuffer@rtnet@@@auf@@_K@Z
?port@Address@rtnet@@QEBAHXZ
?asIPv4@Address@rtnet@@QEBA_NAEAVIPv4@2@@Z
??1PortSpecification@rtnet@@QEAA@XZ
??0PortSpecification@rtnet@@QEAA@AEBU?$pair@HH@std@@@Z
??AIPv4@rtnet@@QEAAAEAE_K@Z
?createStrandWithTransport@auf@@YA?AV?$IntrusivePtr@VThreadPoolTransport@auf@@@1@AEBV21@@Z
?globalThreadPoolTransport2@auf@@YA?AV?$IntrusivePtr@VThreadPoolTransport@auf@@@1@W4ThreadPoolPriority@spl@@@Z
RtcPalWlanEnterMediaStreamingMode
RtcPalCryptHMACSHA256Destroy
RtcPalCryptHMACSHA256Final
RtcPalCryptHMACSHA256Update
RtcPalCryptHMACSHA256Create
RtcPalCryptHMACSHA256DestroyKey
RtcPalCryptHMACSHA256CreateKey
?weak_intrusive_ptr_release@auf@@YAXPEAVWeakAuxiliary@1@@Z
?weak_intrusive_ptr_add_ref@auf@@YAXPEAVWeakAuxiliary@1@@Z
?weak_intrusive_ptr_create@auf@@YAPEAVWeakAuxiliary@1@PEBVIReferenceCountable@1@@Z
RtcPalSocketEnableLowLatency
RtcPalSocketSetQoSDSCP
RtcPalSocketSetRecvBufSize
RtcPalSocketSetSendBufSize
RtcPalRecvFrom
RtcPalRecv
RtcPalSendTo
RtcPalSend
RtcPalGetPeerName
RtcPalGetSockName
?tlsGetPeerCert@rtnet@@YAPEAUX509Cert@1@PEAUTlsSession@1@@Z
?dtlsAccept@rtnet@@YAHPEAUTlsSession@1@PEAUTlsBuf@1@1PEAX@Z
?dtlsConnect@rtnet@@YAHPEAUTlsSession@1@PEAUTlsBuf@1@1@Z
?dtlsDestroy@rtnet@@YAXPEAUTlsSession@1@@Z
?dtlsCreate@rtnet@@YAPEAUTlsSession@1@_NPEBUX509Cert@1@@Z
?tlsBufInit@rtnet@@YAXPEAUTlsBuf@1@@Z
?tlsBufAlloc@rtnet@@YA_NPEAUTlsBuf@1@K@Z
?dtlsSrtpParametersFreeMkiBuffer@rtnet@@YAXPEAUDtlsSrtpParameters@1@@Z
?getDtlsSrtpParameters@rtnet@@YA_NPEAUTlsSession@1@PEAUDtlsSrtpParameters@1@@Z
RtcPalNetStringToIPAddressW
?encode@BASE64@spl@@SAXPEADPEBX_K@Z
?encodedLength@BASE64@spl@@SA_K_K@Z
RtcPalSocketSetTcpNoDelay
RtcPalSocketSetLinger
RtcPalConnectToHostname
RtcPalConnect
?fileOpen@spl@@YAPEAXAEBVPath@1@W4FileSemantics@1@HAEAW4FileError@1@@Z
?tlsBufFree@rtnet@@YAXPEAUTlsBuf@1@@Z
RtcPalGetBestSourceAddress
RtcPalWlanLeaveMediaStreamingMode
spl_pii_OmitW
spl_pii_OmitS
RtcPalDestroyAesKey
?pathFromFilename@spl@@YA_NAEAVPath@1@PEBD@Z
??1Path@spl@@QEAA@XZ
??0Path@spl@@QEAA@XZ
?utcHpTimestamp@spl@@YA_KXZ
?startImp@auf@@YAXPEAUSplOpaqueUpperLayerThread@@PEAUVarBase@spl@@@Z
?getImp@ThreadRef@auf@@AEBAPEAUSplOpaqueUpperLayerThread@@XZ
?setDone@ThreadRef@auf@@QEAAX_N@Z
?done@ThreadRef@auf@@QEBA_NXZ
?stop@ThreadRef@auf@@QEAA_NV?$duration@_JU?$ratio@$00$0PECEA@@std@@@chrono@std@@PEA_J@Z
??1ThreadRef@auf@@QEAA@XZ
??0ThreadRef@auf@@QEAA@PEBDI_K@Z
?sleep@spl@@YAX_K@Z
RtcPalDeviceAudioGetGlitchInfo
RtcPalDeviceAudioGetQueuedBytes
RtcPalDevicePlatformOpenAudioLoopbackDevice
RtcPalDeviceIsErrorCodeRecoverable
RtcPalDeviceAudioGetMetrics
RtcPalDevicePlatformGetVolumeInfoByDeviceHandle
RtcPalDeviceAudioUnlockBuffer
RtcPalDeviceAudioLockBuffer
RtcPalDeviceAudioReset
RtcPalDeviceAudioStop
RtcPalDeviceAudioStart
RtcPalAesEncrypt
RtcPalSetAesKey
RtcPalCryptHMACSHA1DupeContext
RtcPalCryptHMACSHA1Final
RtcPalCryptHMACSHA1Update
RtcPalCryptHMACSHA1Create
RtcPalCryptHMACSHA1DestroyKey
RtcPalCryptHMACSHA1CreateKey
RtcPalCryptHMACSHA1Destroy
RtcPalDevicePlatformCloseDevice
RtcPalDevicePlatformDeviceRegisterNotification
RtcPalDevicePlatformOpenAudioDevice
GetVersionExW
RtcPalDevicePlatformGetMediaExtension
RtcPalRegCreateKeyExW
RtcPalSocketSetNonBlockingMode
RtcPalDeviceAudioSetActiveEndpoint
RtcPalDevicePlatformSetVolumeInfo
RtcPalDevicePlatformGetVolumeInfo
RtcPalDevicePlatformCreateDeviceId
RtcPalCloseSocket
RtcPalDevicePlatformGetDeviceList
RtcPalDevicePlatformEnumDevices
RtcPalAccept
RtcPalDevicePlatformEnableAudio
RtcPalDevicePlatformUnregisterNotification
RtcPalDevicePlatformRegisterNotification
RtcPalDevicePlatformClose
RtcPalListen
RtcPalBind
RtcPalCreateSocket
QueryPerformanceFrequency
RtcPalDevicePlatformOpen
RtcPalWaitAndCancelPendingCallback
RtcPalDeviceErrorCodeFromHResult
RtcPalDevicePlatformGetAudioCertifiedListId
RtcPalDeviceAudioGetSupportedProcessingCapacity
RtcPalDeviceAudioGetProcessingFeatures
RtcPalDevicePlatformGetHIDInformation
RtcPalDevicePlatformSetHIDInformation
RtcPalDevicePlatformCloseHIDContext
RtcPalDevicePlatformOpenHIDContext
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
RtcPalDevicePlatformSetState
RtcPalDevicePlatformDisposeDeviceId
RtcPalDevicePlatformIsSamePhysicalDevice
RtcPalDevicePlatformCompareDeviceId
?complete@SimpleBuffer@rtnet@@QEAAXXZ
RtcPalDevicePlatformDuplicateDeviceId
?exchangeL@spl@@YAJPECJJ@Z
RtcPalTraceRt
?setOptions@StreamSocket@rtnet@@QEAA_NAEBV?$IntrusivePtr@VStreamSocketOptions@rtnet@@@auf@@@Z
?options@StreamSocket@rtnet@@QEBA?AV?$IntrusivePtr@VStreamSocketOptions@rtnet@@@auf@@XZ
?peerAddress@StreamSocket@rtnet@@QEAA?AV?$IntrusivePtr@VAddress@rtnet@@@auf@@XZ
?localAddress@StreamSocket@rtnet@@QEAA?AV?$IntrusivePtr@VAddress@rtnet@@@auf@@XZ
?startTlsAsync@StreamSocket@rtnet@@QEAAXPEBDPEAUAsyncTag@auf@@@Z
?disconnect@StreamSocket@rtnet@@QEAAXXZ
?make@ProxyInfo@rtnet@@SA?AV?$IntrusivePtr@VProxyInfo@rtnet@@@auf@@W4ProxyProtocol@2@PEBDI11@Z
?setQualityOfServiceDSCP@SocketOptions@rtnet@@QEAAXI@Z
?setTlsCertificateVerification@SocketOptions@rtnet@@QEAAX_N@Z
?dtorCore@SocketOptions@rtnet@@AEAAXXZ
??0SocketOptions@rtnet@@IEAA@XZ
?setNoDelayEnabled@StreamSocketOptions@rtnet@@QEAAX_N@Z
??0SocketConnectOptions@rtnet@@QEAA@XZ
?setPortSpecification@SocketConnectOptions@rtnet@@QEAAXAEBV?$shared_ptr@VPortSpecification@rtnet@@@std@@@Z
?setProxy@SocketConnectOptions@rtnet@@QEAAXW4ProxyPolicy@2@AEBV?$IntrusivePtr@VProxyInfo@rtnet@@@auf@@@Z
?dtorCore@SocketConnectOptions@rtnet@@AEAAXXZ
?connectedCore@IStreamSocketDelegate@rtnet@@AEAAXAEBV?$IntrusivePtr@VStreamSocket@rtnet@@@auf@@PEAUAsyncTag@4@@Z
?connectTCPHostAsync@rtnet@@YA?AV?$IntrusivePtr@VAsyncOperation@auf@@@auf@@PEBDHAEBV?$IntrusivePtr@VThreadPoolTransport@auf@@@3@AEBV?$IntrusivePtr@VIStreamSocketDelegate@rtnet@@@3@PEAUAsyncTag@3@AEBV?$IntrusivePtr@VStreamSocketOptions@rtnet@@@3@AEBV?$IntrusivePtr@VStreamSocketConnectOptions@rtnet@@@3@I@Z
?clearDelegate@StreamSocket@rtnet@@QEAAXXZ
?logFlush@auf@@YAXXZ

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlPcToFileHeader
RtlCaptureContext
RtlUnwindEx
RtlVirtualUnwind

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcessId
GetExitCodeThread
TlsAlloc
TlsSetValue
GetCurrentProcess
GetCurrentThread
TerminateProcess
TlsFree
TlsGetValue

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-sysinfo-l1-1-0

GetSystemTime
GetSystemTimeAsFileTime
GetTickCount

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList

api-ms-win-core-fibers-l1-1-0

FlsFree
FlsGetValue
FlsAlloc
FlsSetValue

api-ms-win-core-heap-l2-1-0

LocalFree

api-ms-win-core-com-l1-1-0

StringFromGUID2
CoUninitialize
CoInitializeEx

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime

api-ms-win-core-heap-l1-1-0

HeapDestroy
HeapCreate
HeapSize
HeapFree
HeapAlloc
GetProcessHeap
HeapSetInformation

api-ms-win-mm-time-l1-1-0

timeGetDevCaps
timeBeginPeriod
timeEndPeriod

api-ms-win-crt-convert-l1-1-0

wcstombs_s
strtod
strtol
_ui64toa_s
atol
strtof
_itoa_s
mbstowcs_s

api-ms-win-crt-math-l1-1-0

sin
log
pow
sinf
atan2
cos
floor
ceilf
expf
roundf
round
logf
cosf
exp
log10
fabs
ceil
sqrt
ldexp
powf
frexp
log10f
sqrtf
floorf

api-ms-win-crt-locale-l1-1-0

__pctype_func
_unlock_locales
localeconv
_lock_locales
___lc_locale_name_func
___lc_codepage_func
setlocale
___mb_cur_max_func

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-core-synch-l1-2-0

SleepConditionVariableSRW
InitializeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
InitOnceExecuteOnce
WakeConditionVariable

api-ms-win-core-localization-l1-2-0

LCMapStringEx

api-ms-win-core-handle-l1-1-0

CloseHandle
DuplicateHandle

api-ms-win-core-sysinfo-l1-2-0

GetSystemTimePreciseAsFileTime

api-ms-win-crt-multibyte-l1-1-0

_ismbblead

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file

Exports

Exports

CreatePlatformInterface
CreatePlatformInterfaceEx
CreatePlatformInterfaceEx2
CreatePlatformInterfaceEx3
CreatePlatformInterfaceEx4
CreateVideoTranscoderInterface
CreateVideoTranscoderInterfaceEx
opus_decode
opus_decode_float
opus_decoder_create
opus_decoder_ctl
opus_decoder_destroy
opus_decoder_get_nb_samples
opus_decoder_get_size
opus_decoder_init
opus_encode
opus_encode_float
opus_encoder_create
opus_encoder_ctl
opus_encoder_destroy
opus_encoder_get_size
opus_encoder_init
opus_get_version_string
opus_multistream_packet_pad
opus_multistream_packet_unpad
opus_packet_get_bandwidth
opus_packet_get_nb_channels
opus_packet_get_nb_frames
opus_packet_get_nb_samples
opus_packet_get_samples_per_frame
opus_packet_pad
opus_packet_parse
opus_packet_unpad
opus_pcm_soft_clip
opus_repacketizer_cat
opus_repacketizer_create
opus_repacketizer_destroy
opus_repacketizer_get_nb_frames
opus_repacketizer_get_size
opus_repacketizer_init
opus_repacketizer_out
opus_repacketizer_out_range
opus_strerror

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 667KB - Virtual size: 666KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 249KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fortnite Cheat/cfg/setupapi.dll
.dll windows:10 windows x64 arch:x64

87903bc565dec8007336628500db5e06

Code Sign

33:00:00:04:5f:f3:c9:6c:1a:7f:f7:da:1d:00:00:00:00:04:5f
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:20

Not After

14/11/2024, 19:20

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fd:54:31:4b:06:5e:17:94:bc:86:66:54:de:87:d1:fb:83:e4:a6:05:4f:64:a6:1e:0e:ce:8c:90:24:db:3b:03
Signer

Actual PE Digest

fd:54:31:4b:06:5e:17:94:bc:86:66:54:de:87:d1:fb:83:e4:a6:05:4f:64:a6:1e:0e:ce:8c:90:24:db:3b:03

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

PDB Paths

setupapi.pdb

Imports

msvcrt

_unlock
__dllonexit
_onexit
?what@exception@@UEBAPEBDXZ
_CxxThrowException
memcpy
memmove
??1exception@@UEAA@XZ
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@AEBQEBDH@Z
?terminate@@YAXXZ
_callnewh
memmove_s
_lock
_initterm
malloc
free
_amsg_exit
memcpy_s
_XcptFilter
??_V@YAXPEAX@Z
_itow_s
??0exception@@QEAA@AEBQEBD@Z
wcsncmp
_ultow_s
_errno
_purecall
??3@YAXPEAX@Z
__CxxFrameHandler3
_wtoi
_resetstkoflw
_beginthreadex
_vsnprintf
wcsspn
toupper
swscanf
_wcslwr
_endthread
_beginthread
iswctype
wcstoul
wcstol
towupper
wcsstr
swprintf_s
_wcsnicmp
wcschr
_wcsicmp
wcsrchr
_vsnwprintf_s
wcscpy_s
memset
memcmp
??1type_info@@UEAA@XZ
_vsnwprintf
__C_specific_handler
_wcstoui64
wcscmp

ntdll

NtCommitTransaction
NtCreateTransaction
RtlUnicodeStringToInteger
RtlInitUnicodeStringEx
NtEnumerateKey
NtDeleteValueKey
NtSetValueKey
NtQueryValueKey
NtCreateKey
NtOpenKey
NtDeleteKey
NtClose
RtlFreeUnicodeString
RtlFormatCurrentUserKeyPath
RtlRandomEx
RtlGUIDFromString
NtQueryInformationFile
RtlImageNtHeader
NtSetInformationThread
NtQueryInformationThread
RtlNtStatusToDosErrorNoTeb
NtQuerySystemInformation
RtlUpcaseUnicodeChar
RtlMultiByteToUnicodeN
RtlMultiByteToUnicodeSize
RtlUnicodeToMultiByteN
RtlUnicodeToMultiByteSize
DbgPrint
RtlAdjustPrivilege
NtQueryObject
RtlMapGenericMask
NtSetInformationFile
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EtwEventSetInformation
RtlIoEncodeMemIoResource
VerSetConditionMask
RtlUnsubscribeWnfStateChangeNotification
RtlNtStatusToDosError
RtlSubscribeWnfStateChangeNotification
RtlQueryWnfStateData
RtlPrefixUnicodeString
EtwEventUnregister
EtwEventRegister
EtwUnregisterTraceGuids
EtwRegisterTraceGuidsW
EtwGetTraceEnableFlags
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
RtlHashUnicodeString
RtlInitUnicodeString
RtlGetVersion
EtwEventWriteTransfer
EtwTraceMessage

api-ms-win-core-file-l1-1-0

GetFileAttributesExW
FlushFileBuffers
CreateDirectoryW
GetTempFileNameW
SetEndOfFile
GetFileSize
GetDriveTypeW
GetFullPathNameW
SetFileTime
FileTimeToLocalFileTime
GetShortPathNameW
GetFileTime
CompareFileTime
CreateFileW
RemoveDirectoryW
DeleteFileW
SetFileAttributesW
FindClose
FindNextFileW
FindFirstFileW
GetFileAttributesW
GetFileInformationByHandle
GetDiskFreeSpaceW
SetFilePointer
WriteFile
ReadFile
CreateFileA
LocalFileTimeToFileTime

api-ms-win-core-errorhandling-l1-1-0

GetLastError
SetErrorMode
UnhandledExceptionFilter
RaiseException
SetLastError
SetUnhandledExceptionFilter

api-ms-win-core-string-l2-1-0

CharNextW
CharPrevW
CharUpperW

api-ms-win-core-handle-l1-1-0

CloseHandle
DuplicateHandle

api-ms-win-core-synch-l1-1-0

AcquireSRWLockShared
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ReleaseSemaphore
InitializeCriticalSectionEx
OpenSemaphoreW
InitializeCriticalSection
CreateSemaphoreExW
CreateMutexExW
DeleteCriticalSection
ReleaseMutex
WaitForMultipleObjectsEx
CreateEventW
AcquireSRWLockExclusive
EnterCriticalSection
WaitForSingleObjectEx
CreateMutexW
LeaveCriticalSection
SleepEx
WaitForSingleObject
SetEvent
ResetEvent

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW
FindResourceW

api-ms-win-core-libraryloader-l1-2-0

LoadResource
GetModuleFileNameW
LoadStringW
GetModuleFileNameA
FreeLibrary
GetProcAddress
GetModuleHandleW
GetModuleHandleExW
FindResourceExW
LockResource
FreeResource
LoadLibraryExW
SizeofResource
GetModuleHandleA

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime
FileTimeToSystemTime

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
MultiByteToWideChar
CompareStringOrdinal
CompareStringW
GetStringTypeExW

api-ms-win-core-processenvironment-l1-1-0

GetCommandLineA
GetEnvironmentVariableW
SetCurrentDirectoryW
ExpandEnvironmentStringsW
GetCurrentDirectoryW

api-ms-win-core-localization-l1-2-0

LCMapStringW
GetLocaleInfoW
GetThreadLocale
FormatMessageW
GetThreadUILanguage

api-ms-win-core-registry-l1-1-0

RegSetValueExW
RegDeleteKeyExW
RegLoadMUIStringW
RegGetKeySecurity
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegGetValueW
RegDeleteValueW
RegCreateKeyExW
RegCloseKey

api-ms-win-devices-config-l1-1-1

CM_Set_DevNode_PropertyW
CM_Get_DevNode_PropertyW
CM_Get_Class_PropertyW
CM_Get_Device_ID_Size
CM_Get_DevNode_Status
CM_Get_Device_IDW
CM_MapCrToWin32Err
CM_Setup_DevNode

api-ms-win-core-synch-l1-2-0

Sleep
InitOnceComplete
InitOnceBeginInitialize

api-ms-win-core-sysinfo-l1-1-0

GetSystemDirectoryW
GetSystemWindowsDirectoryW
GetTickCount64
GetWindowsDirectoryW
GetLocalTime
GetTickCount
GetSystemTimeAsFileTime

api-ms-win-core-datetime-l1-1-0

GetDateFormatW

api-ms-win-security-base-l1-1-0

SetFileSecurityW
DuplicateTokenEx
GetKernelObjectSecurity
AdjustTokenPrivileges
InitializeSecurityDescriptor
GetFileSecurityW
GetLengthSid
GetSecurityDescriptorControl
AllocateAndInitializeSid
FreeSid
GetTokenInformation
EqualSid
CheckTokenMembership
IsValidSecurityDescriptor
GetSecurityDescriptorOwner
GetSecurityDescriptorLength
GetAclInformation
GetAce
MapGenericMask
AddAce
SetSecurityDescriptorGroup
MakeSelfRelativeSD
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
GetSecurityDescriptorGroup
GetSecurityDescriptorDacl
GetSecurityDescriptorSacl
AddAccessAllowedAce
InitializeAcl

api-ms-win-core-heap-l2-1-0

LocalAlloc
LocalReAlloc
LocalFree

api-ms-win-core-processthreads-l1-1-0

GetExitCodeThread
GetExitCodeProcess
GetCurrentProcessId
GetCurrentThreadId
TerminateProcess
GetCurrentThread
CreateProcessW
GetCurrentProcess
OpenProcessToken
OpenThreadToken
GetStartupInfoW
TlsAlloc
TlsSetValue
TlsGetValue
TlsFree
SetThreadToken

api-ms-win-core-sysinfo-l1-2-0

GetNativeSystemInfo

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapFree
HeapReAlloc
HeapAlloc

api-ms-win-core-file-l2-1-2

CopyFileW

api-ms-win-core-file-l2-1-0

MoveFileExW
CreateHardLinkW
CopyFileExW

api-ms-win-core-version-l1-1-0

GetFileVersionInfoExW
VerQueryValueW
GetFileVersionInfoSizeExW

api-ms-win-core-wow64-l1-1-1

IsWow64Process2

api-ms-win-core-memory-l1-1-0

UnmapViewOfFile
CreateFileMappingW
MapViewOfFile

rpcrt4

I_RpcMapWin32Status
RpcRevertToSelf
RpcImpersonateClient
UuidCreate

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-kernel32-legacy-l1-1-0

DosDateTimeToFileTime
MoveFileW

api-ms-win-core-shlwapi-legacy-l1-1-0

PathParseIconLocationW

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

api-ms-win-core-sidebyside-l1-1-0

DeactivateActCtx
ActivateActCtx
CreateActCtxW
ReleaseActCtx

kernel32

LZClose
GetSystemDefaultUILanguage
WritePrivateProfileSectionW
GetPrivateProfileSectionW
lstrcmpW
GetPrivateProfileStringW
lstrcmpiW
WritePrivateProfileStringW
LZCopy
LZOpenFileW

cfgmgr32

CM_Get_First_Log_Conf_Ex
CM_Add_Empty_Log_Conf_Ex
CM_Free_Log_Conf_Ex
CM_Get_Res_Des_Data_Ex
CM_Add_Res_Des_Ex
CM_Get_Next_Res_Des_Ex
CM_Get_Parent_Ex
CM_Query_Resource_Conflict_List
CM_Get_Resource_Conflict_Count
CM_Get_Log_Conf_Priority_Ex
CM_Get_Resource_Conflict_DetailsW
CM_Set_DevNode_Property_ExW
CM_Get_Next_Log_Conf_Ex
CM_Free_Res_Des_Handle
CM_Get_DevNode_Custom_Property_ExW
CM_Get_DevNode_Custom_Property_ExA
CM_Connect_MachineW
CM_Enumerate_Classes_Ex
CM_Disconnect_Machine
CM_Get_Device_ID_ExW
CM_Open_Class_Key_ExW
CM_Delete_Class_Key_Ex
CM_Get_Hardware_Profile_Info_ExW
CM_Get_DevNode_Status_Ex
CM_Free_Resource_Conflict_Handle
CM_Free_Log_Conf
CM_Free_Log_Conf_Handle
CM_Query_And_Remove_SubTree_ExW
CM_Setup_DevNode_Ex
CM_Get_HW_Prof_Flags_ExW
CM_Add_Driver_PackageW
CM_MapCrToSpErr
CM_Set_HW_Prof_Flags_ExW
CM_Locate_DevNode_ExW
CM_Reenumerate_DevNode_Ex
CM_Get_DevNode_Property_ExW
CM_Set_Class_Property_ExW
CM_Set_DevNode_Problem_Ex
CM_Get_Class_Property_ExW
CM_Get_Res_Des_Data_Size_Ex

api-ms-win-core-io-l1-1-0

DeviceIoControl

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
DebugBreak
OutputDebugStringW

api-ms-win-eventing-classicprovider-l1-1-0

TraceMessage

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-core-threadpool-l1-2-0

WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CloseThreadpoolTimer
CreateThreadpoolTimer

bcrypt

BCryptDestroyHash
BCryptOpenAlgorithmProvider
BCryptCreateHash
BCryptGetProperty
BCryptHashData
BCryptFinishHash
BCryptCloseAlgorithmProvider

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

Exports

Exports

CMP_GetBlockedDriverInfo
CMP_GetServerSideDeviceInstallFlags
CMP_Init_Detection
CMP_Report_LogOn
CMP_WaitNoPendingInstallEvents
CMP_WaitServicesAvailable
CM_Add_Driver_PackageW
CM_Add_Empty_Log_Conf
CM_Add_Empty_Log_Conf_Ex
CM_Add_IDA
CM_Add_IDW
CM_Add_ID_ExA
CM_Add_ID_ExW
CM_Add_Range
CM_Add_Res_Des
CM_Add_Res_Des_Ex
CM_Apply_PowerScheme
CM_Connect_MachineA
CM_Connect_MachineW
CM_Create_DevNodeA
CM_Create_DevNodeW
CM_Create_DevNode_ExA
CM_Create_DevNode_ExW
CM_Create_Range_List
CM_Delete_Class_Key
CM_Delete_Class_Key_Ex
CM_Delete_DevNode_Key
CM_Delete_DevNode_Key_Ex
CM_Delete_Device_Interface_KeyA
CM_Delete_Device_Interface_KeyW
CM_Delete_Device_Interface_Key_ExA
CM_Delete_Device_Interface_Key_ExW
CM_Delete_Driver_PackageW
CM_Delete_PowerScheme
CM_Delete_Range
CM_Detect_Resource_Conflict
CM_Detect_Resource_Conflict_Ex
CM_Disable_DevNode
CM_Disable_DevNode_Ex
CM_Disconnect_Machine
CM_Dup_Range_List
CM_Duplicate_PowerScheme
CM_Enable_DevNode
CM_Enable_DevNode_Ex
CM_Enumerate_Classes
CM_Enumerate_Classes_Ex
CM_Enumerate_EnumeratorsA
CM_Enumerate_EnumeratorsW
CM_Enumerate_Enumerators_ExA
CM_Enumerate_Enumerators_ExW
CM_Find_Range
CM_First_Range
CM_Free_Log_Conf
CM_Free_Log_Conf_Ex
CM_Free_Log_Conf_Handle
CM_Free_Range_List
CM_Free_Res_Des
CM_Free_Res_Des_Ex
CM_Free_Res_Des_Handle
CM_Free_Resource_Conflict_Handle
CM_Get_Child
CM_Get_Child_Ex
CM_Get_Class_Key_NameA
CM_Get_Class_Key_NameW
CM_Get_Class_Key_Name_ExA
CM_Get_Class_Key_Name_ExW
CM_Get_Class_NameA
CM_Get_Class_NameW
CM_Get_Class_Name_ExA
CM_Get_Class_Name_ExW
CM_Get_Class_Registry_PropertyA
CM_Get_Class_Registry_PropertyW
CM_Get_Depth
CM_Get_Depth_Ex
CM_Get_DevNode_Custom_PropertyA
CM_Get_DevNode_Custom_PropertyW
CM_Get_DevNode_Custom_Property_ExA
CM_Get_DevNode_Custom_Property_ExW
CM_Get_DevNode_Registry_PropertyA
CM_Get_DevNode_Registry_PropertyW
CM_Get_DevNode_Registry_Property_ExA
CM_Get_DevNode_Registry_Property_ExW
CM_Get_DevNode_Status
CM_Get_DevNode_Status_Ex
CM_Get_Device_IDA
CM_Get_Device_IDW
CM_Get_Device_ID_ExA
CM_Get_Device_ID_ExW
CM_Get_Device_ID_ListA
CM_Get_Device_ID_ListW
CM_Get_Device_ID_List_ExA
CM_Get_Device_ID_List_ExW
CM_Get_Device_ID_List_SizeA
CM_Get_Device_ID_List_SizeW
CM_Get_Device_ID_List_Size_ExA
CM_Get_Device_ID_List_Size_ExW
CM_Get_Device_ID_Size
CM_Get_Device_ID_Size_Ex
CM_Get_Device_Interface_AliasA
CM_Get_Device_Interface_AliasW
CM_Get_Device_Interface_Alias_ExA
CM_Get_Device_Interface_Alias_ExW
CM_Get_Device_Interface_ListA
CM_Get_Device_Interface_ListW
CM_Get_Device_Interface_List_ExA
CM_Get_Device_Interface_List_ExW
CM_Get_Device_Interface_List_SizeA
CM_Get_Device_Interface_List_SizeW
CM_Get_Device_Interface_List_Size_ExA
CM_Get_Device_Interface_List_Size_ExW
CM_Get_First_Log_Conf
CM_Get_First_Log_Conf_Ex
CM_Get_Global_State
CM_Get_Global_State_Ex
CM_Get_HW_Prof_FlagsA
CM_Get_HW_Prof_FlagsW
CM_Get_HW_Prof_Flags_ExA
CM_Get_HW_Prof_Flags_ExW
CM_Get_Hardware_Profile_InfoA
CM_Get_Hardware_Profile_InfoW
CM_Get_Hardware_Profile_Info_ExA
CM_Get_Hardware_Profile_Info_ExW
CM_Get_Log_Conf_Priority
CM_Get_Log_Conf_Priority_Ex
CM_Get_Next_Log_Conf
CM_Get_Next_Log_Conf_Ex
CM_Get_Next_Res_Des
CM_Get_Next_Res_Des_Ex
CM_Get_Parent
CM_Get_Parent_Ex
CM_Get_Res_Des_Data
CM_Get_Res_Des_Data_Ex
CM_Get_Res_Des_Data_Size
CM_Get_Res_Des_Data_Size_Ex
CM_Get_Resource_Conflict_Count
CM_Get_Resource_Conflict_DetailsA
CM_Get_Resource_Conflict_DetailsW
CM_Get_Sibling
CM_Get_Sibling_Ex
CM_Get_Version
CM_Get_Version_Ex
CM_Import_PowerScheme
CM_Install_DevNodeW
CM_Install_DevNode_ExW
CM_Intersect_Range_List
CM_Invert_Range_List
CM_Is_Dock_Station_Present
CM_Is_Dock_Station_Present_Ex
CM_Is_Version_Available
CM_Is_Version_Available_Ex
CM_Locate_DevNodeA
CM_Locate_DevNodeW
CM_Locate_DevNode_ExA
CM_Locate_DevNode_ExW
CM_Merge_Range_List
CM_Modify_Res_Des
CM_Modify_Res_Des_Ex
CM_Move_DevNode
CM_Move_DevNode_Ex
CM_Next_Range
CM_Open_Class_KeyA
CM_Open_Class_KeyW
CM_Open_Class_Key_ExA
CM_Open_Class_Key_ExW
CM_Open_DevNode_Key
CM_Open_DevNode_Key_Ex
CM_Open_Device_Interface_KeyA
CM_Open_Device_Interface_KeyW
CM_Open_Device_Interface_Key_ExA
CM_Open_Device_Interface_Key_ExW
CM_Query_And_Remove_SubTreeA
CM_Query_And_Remove_SubTreeW
CM_Query_And_Remove_SubTree_ExA
CM_Query_And_Remove_SubTree_ExW
CM_Query_Arbitrator_Free_Data
CM_Query_Arbitrator_Free_Data_Ex
CM_Query_Arbitrator_Free_Size
CM_Query_Arbitrator_Free_Size_Ex
CM_Query_Remove_SubTree
CM_Query_Remove_SubTree_Ex
CM_Query_Resource_Conflict_List
CM_Reenumerate_DevNode
CM_Reenumerate_DevNode_Ex
CM_Register_Device_Driver
CM_Register_Device_Driver_Ex
CM_Register_Device_InterfaceA
CM_Register_Device_InterfaceW
CM_Register_Device_Interface_ExA
CM_Register_Device_Interface_ExW
CM_Remove_SubTree
CM_Remove_SubTree_Ex
CM_Request_Device_EjectA
CM_Request_Device_EjectW
CM_Request_Device_Eject_ExA
CM_Request_Device_Eject_ExW
CM_Request_Eject_PC
CM_Request_Eject_PC_Ex
CM_RestoreAll_DefaultPowerSchemes
CM_Restore_DefaultPowerScheme
CM_Run_Detection
CM_Run_Detection_Ex
CM_Set_ActiveScheme
CM_Set_Class_Registry_PropertyA
CM_Set_Class_Registry_PropertyW
CM_Set_DevNode_Problem
CM_Set_DevNode_Problem_Ex
CM_Set_DevNode_Registry_PropertyA
CM_Set_DevNode_Registry_PropertyW
CM_Set_DevNode_Registry_Property_ExA
CM_Set_DevNode_Registry_Property_ExW
CM_Set_HW_Prof
CM_Set_HW_Prof_Ex
CM_Set_HW_Prof_FlagsA
CM_Set_HW_Prof_FlagsW
CM_Set_HW_Prof_Flags_ExA
CM_Set_HW_Prof_Flags_ExW
CM_Setup_DevNode
CM_Setup_DevNode_Ex
CM_Test_Range_Available
CM_Uninstall_DevNode
CM_Uninstall_DevNode_Ex
CM_Unregister_Device_InterfaceA
CM_Unregister_Device_InterfaceW
CM_Unregister_Device_Interface_ExA
CM_Unregister_Device_Interface_ExW
CM_Write_UserPowerKey
DoesUserHavePrivilege
DriverStoreAddDriverPackageA
DriverStoreAddDriverPackageW
DriverStoreDeleteDriverPackageA
DriverStoreDeleteDriverPackageW
DriverStoreEnumDriverPackageA
DriverStoreEnumDriverPackageW
DriverStoreFindDriverPackageA
DriverStoreFindDriverPackageW
ExtensionPropSheetPageProc
InstallCatalog
InstallHinfSection
InstallHinfSectionA
InstallHinfSectionW
IsUserAdmin
MyFree
MyMalloc
MyRealloc
PnpEnumDrpFile
PnpIsFileAclIntact
PnpIsFileContentIntact
PnpIsFilePnpDriver
PnpRepairWindowsProtectedDriver
SetupAddInstallSectionToDiskSpaceListA
SetupAddInstallSectionToDiskSpaceListW
SetupAddSectionToDiskSpaceListA
SetupAddSectionToDiskSpaceListW
SetupAddToDiskSpaceListA
SetupAddToDiskSpaceListW
SetupAddToSourceListA
SetupAddToSourceListW
SetupAdjustDiskSpaceListA
SetupAdjustDiskSpaceListW
SetupBackupErrorA
SetupBackupErrorW
SetupCancelTemporarySourceList
SetupCloseFileQueue
SetupCloseInfFile
SetupCloseLog
SetupCommitFileQueue
SetupCommitFileQueueA
SetupCommitFileQueueW
SetupConfigureWmiFromInfSectionA
SetupConfigureWmiFromInfSectionW
SetupCopyErrorA
SetupCopyErrorW
SetupCopyOEMInfA
SetupCopyOEMInfW
SetupCreateDiskSpaceListA
SetupCreateDiskSpaceListW
SetupDecompressOrCopyFileA
SetupDecompressOrCopyFileW
SetupDefaultQueueCallback
SetupDefaultQueueCallbackA
SetupDefaultQueueCallbackW
SetupDeleteErrorA
SetupDeleteErrorW
SetupDestroyDiskSpaceList
SetupDiApplyPowerScheme
SetupDiAskForOEMDisk
SetupDiBuildClassInfoList
SetupDiBuildClassInfoListExA
SetupDiBuildClassInfoListExW
SetupDiBuildDriverInfoList
SetupDiCallClassInstaller
SetupDiCancelDriverInfoSearch
SetupDiChangeState
SetupDiClassGuidsFromNameA
SetupDiClassGuidsFromNameExA
SetupDiClassGuidsFromNameExW
SetupDiClassGuidsFromNameW
SetupDiClassNameFromGuidA
SetupDiClassNameFromGuidExA
SetupDiClassNameFromGuidExW
SetupDiClassNameFromGuidW
SetupDiCreateDevRegKeyA
SetupDiCreateDevRegKeyW
SetupDiCreateDeviceInfoA
SetupDiCreateDeviceInfoList
SetupDiCreateDeviceInfoListExA
SetupDiCreateDeviceInfoListExW
SetupDiCreateDeviceInfoW
SetupDiCreateDeviceInterfaceA
SetupDiCreateDeviceInterfaceRegKeyA
SetupDiCreateDeviceInterfaceRegKeyW
SetupDiCreateDeviceInterfaceW
SetupDiDeleteDevRegKey
SetupDiDeleteDeviceInfo
SetupDiDeleteDeviceInterfaceData
SetupDiDeleteDeviceInterfaceRegKey
SetupDiDestroyClassImageList
SetupDiDestroyDeviceInfoList
SetupDiDestroyDriverInfoList
SetupDiDrawMiniIcon
SetupDiEnumDeviceInfo
SetupDiEnumDeviceInterfaces
SetupDiEnumDriverInfoA
SetupDiEnumDriverInfoW
SetupDiGetActualModelsSectionA
SetupDiGetActualModelsSectionW
SetupDiGetActualSectionToInstallA
SetupDiGetActualSectionToInstallExA
SetupDiGetActualSectionToInstallExW
SetupDiGetActualSectionToInstallW
SetupDiGetClassBitmapIndex
SetupDiGetClassDescriptionA
SetupDiGetClassDescriptionExA
SetupDiGetClassDescriptionExW
SetupDiGetClassDescriptionW
SetupDiGetClassDevPropertySheetsA
SetupDiGetClassDevPropertySheetsW
SetupDiGetClassDevsA
SetupDiGetClassDevsExA
SetupDiGetClassDevsExW
SetupDiGetClassDevsW
SetupDiGetClassImageIndex
SetupDiGetClassImageList
SetupDiGetClassImageListExA
SetupDiGetClassImageListExW
SetupDiGetClassInstallParamsA
SetupDiGetClassInstallParamsW
SetupDiGetClassPropertyExW
SetupDiGetClassPropertyKeys
SetupDiGetClassPropertyKeysExW
SetupDiGetClassPropertyW
SetupDiGetClassRegistryPropertyA
SetupDiGetClassRegistryPropertyW
SetupDiGetCustomDevicePropertyA
SetupDiGetCustomDevicePropertyW
SetupDiGetDeviceInfoListClass
SetupDiGetDeviceInfoListDetailA
SetupDiGetDeviceInfoListDetailW
SetupDiGetDeviceInstallParamsA
SetupDiGetDeviceInstallParamsW
SetupDiGetDeviceInstanceIdA
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceInterfaceAlias
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceInterfacePropertyKeys
SetupDiGetDeviceInterfacePropertyW
SetupDiGetDevicePropertyKeys
SetupDiGetDevicePropertyW
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDriverInfoDetailA
SetupDiGetDriverInfoDetailW
SetupDiGetDriverInstallParamsA
SetupDiGetDriverInstallParamsW
SetupDiGetHwProfileFriendlyNameA
SetupDiGetHwProfileFriendlyNameExA
SetupDiGetHwProfileFriendlyNameExW
SetupDiGetHwProfileFriendlyNameW
SetupDiGetHwProfileList
SetupDiGetHwProfileListExA
SetupDiGetHwProfileListExW
SetupDiGetINFClassA
SetupDiGetINFClassW
SetupDiGetSelectedDevice
SetupDiGetSelectedDriverA
SetupDiGetSelectedDriverW
SetupDiGetWizardPage
SetupDiInstallClassA
SetupDiInstallClassExA
SetupDiInstallClassExW
SetupDiInstallClassW
SetupDiInstallDevice
SetupDiInstallDeviceInterfaces
SetupDiInstallDriverFiles
SetupDiLoadClassIcon
SetupDiLoadDeviceIcon
SetupDiMoveDuplicateDevice
SetupDiOpenClassRegKey
SetupDiOpenClassRegKeyExA
SetupDiOpenClassRegKeyExW
SetupDiOpenDevRegKey
SetupDiOpenDeviceInfoA
SetupDiOpenDeviceInfoW
SetupDiOpenDeviceInterfaceA
SetupDiOpenDeviceInterfaceRegKey
SetupDiOpenDeviceInterfaceW
SetupDiRegisterCoDeviceInstallers
SetupDiRegisterDeviceInfo
SetupDiRemoveDevice
SetupDiRemoveDeviceInterface
SetupDiReportAdditionalSoftwareRequested
SetupDiReportDeviceInstallError
SetupDiReportDriverNotFoundError
SetupDiReportDriverPackageImportationError
SetupDiReportGenericDriverInstalled
SetupDiReportPnPDeviceProblem
SetupDiRestartDevices
SetupDiSelectBestCompatDrv
SetupDiSelectDevice
SetupDiSelectOEMDrv
SetupDiSetClassInstallParamsA
SetupDiSetClassInstallParamsW
SetupDiSetClassPropertyExW
SetupDiSetClassPropertyW
SetupDiSetClassRegistryPropertyA
SetupDiSetClassRegistryPropertyW
SetupDiSetDeviceInstallParamsA
SetupDiSetDeviceInstallParamsW
SetupDiSetDeviceInterfaceDefault
SetupDiSetDeviceInterfacePropertyW
SetupDiSetDevicePropertyW
SetupDiSetDeviceRegistryPropertyA
SetupDiSetDeviceRegistryPropertyW
SetupDiSetDriverInstallParamsA
SetupDiSetDriverInstallParamsW
SetupDiSetSelectedDevice
SetupDiSetSelectedDriverA
SetupDiSetSelectedDriverW
SetupDiUnremoveDevice
SetupDuplicateDiskSpaceListA
SetupDuplicateDiskSpaceListW
SetupEnumInfSectionsA
SetupEnumInfSectionsW
SetupEnumPublishedInfA
SetupEnumPublishedInfW
SetupFindFirstLineA
SetupFindFirstLineW
SetupFindNextLine
SetupFindNextMatchLineA
SetupFindNextMatchLineW
SetupFreeSourceListA
SetupFreeSourceListW
SetupGetBackupInformationA
SetupGetBackupInformationW
SetupGetBinaryField
SetupGetFieldCount
SetupGetFileCompressionInfoA
SetupGetFileCompressionInfoExA
SetupGetFileCompressionInfoExW
SetupGetFileCompressionInfoW
SetupGetFileQueueCount
SetupGetFileQueueFlags
SetupGetInfDriverStoreLocationA
SetupGetInfDriverStoreLocationW
SetupGetInfFileListA
SetupGetInfFileListW
SetupGetInfInformationA
SetupGetInfInformationW
SetupGetInfPublishedNameA
SetupGetInfPublishedNameW
SetupGetInfSections
SetupGetIntField
SetupGetLineByIndexA
SetupGetLineByIndexW
SetupGetLineCountA
SetupGetLineCountW
SetupGetLineTextA
SetupGetLineTextW
SetupGetMultiSzFieldA
SetupGetMultiSzFieldW
SetupGetNonInteractiveMode
SetupGetSourceFileLocationA
SetupGetSourceFileLocationW
SetupGetSourceFileSizeA
SetupGetSourceFileSizeW
SetupGetSourceInfoA
SetupGetSourceInfoW
SetupGetStringFieldA
SetupGetStringFieldW
SetupGetTargetPathA
SetupGetTargetPathW
SetupGetThreadLogToken
SetupInitDefaultQueueCallback
SetupInitDefaultQueueCallbackEx
SetupInitializeFileLogA
SetupInitializeFileLogW
SetupInstallFileA
SetupInstallFileExA
SetupInstallFileExW

Sections

.text
Size: 867KB - Virtual size: 866KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 222KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fortnite Cheat/cfg/spwizimg.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:02:32:41:fb:59:99:6d:cc:4d:ff:00:00:00:00:02:32
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:24

Not After

02/05/2020, 21:24

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

15:3c:b0:c6:3b:b7:bd:4a:74:25:df:b7:ef:37:b9:8e:57:d0:db:7c:40:9c:53:db:0c:b1:27:5e:96:8e:41:a4
Signer

Actual PE Digest

15:3c:b0:c6:3b:b7:bd:4a:74:25:df:b7:ef:37:b9:8e:57:d0:db:7c:40:9c:53:db:0c:b1:27:5e:96:8e:41:a4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Fortnite Cheat/cfg/wininet.dll
.dll regsvr32 windows:10 windows x64 arch:x64

8f2adb9f59f915ba37a117c6317dab73

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

wininet.pdb

Imports

msvcrt

_amsg_exit
_XcptFilter
__C_specific_handler
_lock
wcstok_s
qsort
_itow
_strnicmp
_wtoi
tolower
_vscwprintf
_unlock
strchr
strcmp
wcscpy_s
wcschr
_wcsnicmp
_atoi64
wcsstr
_itoa_s
wcsrchr
bsearch
wcsncmp
memmove_s
memcpy_s
_strlwr
__dllonexit
_initterm
memset
memmove
memcpy
memcmp
memchr
iscntrl
ispunct
wcsncpy_s
isalnum
isspace
isalpha
isxdigit
isdigit
_onexit
__isascii
strncmp
_vsnwprintf
iswdigit
strcspn
strpbrk
_vsnprintf
?terminate@@YAXXZ
toupper
_wcslwr_s
__CxxFrameHandler3
_stricmp
_wcsicmp
_purecall
free
malloc
_itow_s
wcscmp

api-ms-win-core-memory-l1-1-0

MapViewOfFile
UnmapViewOfFile
OpenFileMappingW
CreateFileMappingW
VirtualFree
VirtualAlloc

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetSystemTime
GetTickCount64
GetTickCount
GetSystemDirectoryW

api-ms-win-core-string-l1-1-0

CompareStringW
WideCharToMultiByte
MultiByteToWideChar

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetLastError

api-ms-win-core-synch-l1-1-0

WaitForSingleObject
CreateEventW
EnterCriticalSection
SetEvent
ResetEvent
CreateEventA
CreateMutexExW
OpenSemaphoreW
LeaveCriticalSection
ReleaseMutex
InitializeCriticalSectionEx
ReleaseSemaphore
InitializeCriticalSectionAndSpinCount
CreateSemaphoreExW
WaitForMultipleObjectsEx
InitializeCriticalSection
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockShared
ReleaseSRWLockExclusive
InitializeSRWLock
TryAcquireSRWLockExclusive
CreateEventExA
DeleteCriticalSection
WaitForSingleObjectEx

api-ms-win-core-libraryloader-l1-2-0

LoadStringW
LoadStringA
GetModuleHandleExW
GetModuleHandleW
LoadLibraryExW
GetModuleHandleExA
GetModuleFileNameA
FreeLibraryAndExitThread
FreeLibrary
LoadLibraryExA
GetProcAddress
GetModuleFileNameW

api-ms-win-core-heap-l1-1-0

HeapFree
GetProcessHeap
HeapAlloc
HeapSize
HeapReAlloc
HeapDestroy

api-ms-win-core-synch-l1-2-0

SleepConditionVariableCS
Sleep
WakeAllConditionVariable
InitOnceExecuteOnce
InitializeConditionVariable
SleepConditionVariableSRW

api-ms-win-core-file-l1-1-0

GetFileAttributesExW
RemoveDirectoryW
SetFileAttributesW
FindNextFileW
FindFirstFileW
CreateDirectoryW
SetEndOfFile
SetFilePointerEx
GetFileTime
GetShortPathNameW
SetFileInformationByHandle
GetFileSizeEx
GetDiskFreeSpaceExW
CompareFileTime
GetVolumeInformationW
GetVolumePathNameW
GetDriveTypeW
CreateFileA
DeleteFileW
FindFirstFileExW
WriteFile
SetFilePointer
CreateFileW
ReadFile
GetFileSize
GetFileAttributesW
FindClose
LocalFileTimeToFileTime
GetDiskFreeSpaceExA
GetLongPathNameW

api-ms-win-eventing-provider-l1-1-0

EventWrite
EventRegister
EventWriteTransfer
EventUnregister
EventProviderEnabled
EventActivityIdControl
EventSetInformation

api-ms-win-core-handle-l1-1-0

CloseHandle
DuplicateHandle

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime
FileTimeToSystemTime

api-ms-win-eventing-classicprovider-l1-1-0

TraceMessageVa

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency
QueryPerformanceCounter

api-ms-win-core-registry-l1-1-0

RegQueryValueExW
RegOpenCurrentUser
RegQueryInfoKeyW
RegEnumKeyExW
RegNotifyChangeKeyValue
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegQueryValueExA
RegSetValueExA
RegDeleteTreeA
RegCreateKeyExA
RegOpenKeyExA
RegEnumKeyExA
RegGetValueA
RegGetValueW
RegDeleteValueW
RegDeleteTreeW
RegSetValueExW

api-ms-win-core-heap-l2-1-0

LocalFree
LocalAlloc
GlobalAlloc
GlobalFree

api-ms-win-core-localization-l1-2-0

IdnToAscii
FormatMessageW
IsDBCSLeadByteEx
GetLocaleInfoW
IdnToUnicode
IsValidCodePage
GetCPInfoExW
GetCPInfo
FormatMessageA
IsDBCSLeadByte

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
OpenThreadToken
OpenProcessToken
CreateThread
ProcessIdToSessionId
TerminateProcess
GetCurrentProcess
SwitchToThread
TlsFree
TlsGetValue
TlsSetValue
GetCurrentThreadId
TlsAlloc
GetCurrentThread

api-ms-win-core-datetime-l1-1-0

GetDateFormatA
GetTimeFormatA

api-ms-win-core-string-l2-1-0

CharLowerW

api-ms-win-core-threadpool-l1-2-0

FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
CloseThreadpoolWork
SubmitThreadpoolWork
WaitForThreadpoolWorkCallbacks
CreateThreadpoolWait
CloseThreadpoolWait
WaitForThreadpoolWaitCallbacks
TrySubmitThreadpoolCallback
CallbackMayRunLong
SetThreadpoolWait
WaitForThreadpoolTimerCallbacks
CreateThreadpoolIo
CloseThreadpoolIo
StartThreadpoolIo
CancelThreadpoolIo
CreateThreadpoolTimer
SetThreadpoolTimer
CloseThreadpoolTimer

api-ms-win-core-wow64-l1-1-0

IsWow64Process

api-ms-win-core-sysinfo-l1-2-0

GetProductInfo
GetSystemTimePreciseAsFileTime
GetNativeSystemInfo

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
DebugBreak
IsDebuggerPresent

api-ms-win-core-io-l1-1-0

PostQueuedCompletionStatus
CreateIoCompletionPort
GetOverlappedResult
DeviceIoControl
GetQueuedCompletionStatus

api-ms-win-core-file-l2-1-0

MoveFileExW
CreateHardLinkW

api-ms-win-core-realtime-l1-1-0

QueryUnbiasedInterruptTime

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-file-l2-1-2

CopyFileW

api-ms-win-security-appcontainer-l1-1-0

GetAppContainerNamedObjectPath

api-ms-win-core-interlocked-l1-1-0

InterlockedPushEntrySList
InterlockedFlushSList
InitializeSListHead

api-ms-win-core-file-l1-2-0

GetVolumeNameForVolumeMountPointW

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-url-l1-1-0

UrlUnescapeA
PathCreateFromUrlW
UrlCanonicalizeW
UrlCombineW
UrlCanonicalizeA
UrlCombineA

api-ms-win-core-kernel32-legacy-l1-1-0

GetComputerNameW
MoveFileW
SetFileCompletionNotificationModes
WTSGetActiveConsoleSessionId

api-ms-win-core-registry-l2-1-0

RegEnumKeyW

api-ms-win-core-threadpool-legacy-l1-1-0

QueueUserWorkItem

api-ms-win-core-shlwapi-legacy-l1-1-0

PathAddBackslashA

api-ms-win-core-stringansi-l1-1-0

CharLowerA
CharUpperA
CharNextA

api-ms-win-core-shlwapi-obsolete-l1-1-0

StrCmpNIA
StrCmpNICW
StrStrIA
StrRChrW
StrToIntA
StrCmpNA
StrCmpNIW
StrChrW
StrCmpICA
StrStrIW
StrCmpNICA
StrChrNW
StrStrA
StrChrA
StrRChrA

api-ms-win-core-localization-obsolete-l1-2-0

CompareStringA

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpA
lstrcmpiA
lstrcmpW

api-ms-win-core-heap-obsolete-l1-1-0

GlobalUnlock
GlobalLock
GlobalReAlloc

ntdll

NtClose
NtCreateFile
RtlReportExceptionEx
NtSetInformationFile
RtlQueryPackageClaims
RtlFreeHeap
RtlAllocateHeap
NtQueryLicenseValue
RtlInitUnicodeString
RtlGetPersistedStateLocation
RtlGetLastNtStatus
RtlGetDeviceFamilyInfoEnum
RtlGetVersion
RtlIpv6AddressToStringExW
RtlIpv4AddressToStringExW
RtlFreeSid
RtlGetAppContainerParent
RtlGetAppContainerSidType
RtlIpv6AddressToStringW
RtlIpv4AddressToStringW
RtlIpv6AddressToStringExA
RtlIpv6AddressToStringA
RtlIpv4AddressToStringA
RtlIpv6StringToAddressExW
RtlIpv4StringToAddressExW
RtlIpv6StringToAddressExA
RtlIpv4StringToAddressExA
EtwUnregisterTraceGuids
EtwRegisterTraceGuidsW
EtwGetTraceEnableFlags
EtwGetTraceEnableLevel
NtQueryVolumeInformationFile
NtQueryInformationToken
EtwGetTraceLoggerHandle
RtlNtStatusToDosError
NtQueryWnfStateData
RtlPublishWnfStateData
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlSubscribeWnfStateChangeNotification
RtlQueryWnfStateData
NtSetInformationObject

kernelbase

GetIsEdpEnabled
SubscribeEdpEnabledStateChange
UnsubscribeEdpEnabledStateChange
GetIsWdagEnabled
SubscribeWdagEnabledStateChange
UnsubscribeWdagEnabledStateChange
GetPackageSecurityProperty
GetPackageSecurityContext

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

Exports

Exports

AppCacheCheckManifest
AppCacheCloseHandle
AppCacheCreateAndCommitFile
AppCacheDeleteGroup
AppCacheDeleteIEGroup
AppCacheDuplicateHandle
AppCacheFinalize
AppCacheFreeDownloadList
AppCacheFreeGroupList
AppCacheFreeIESpace
AppCacheFreeSpace
AppCacheGetDownloadList
AppCacheGetFallbackUrl
AppCacheGetGroupList
AppCacheGetIEGroupList
AppCacheGetInfo
AppCacheGetManifestUrl
AppCacheLookup
CommitUrlCacheEntryA
CommitUrlCacheEntryBinaryBlob
CommitUrlCacheEntryW
CreateMD5SSOHash
CreateUrlCacheContainerA
CreateUrlCacheContainerW
CreateUrlCacheEntryA
CreateUrlCacheEntryExW
CreateUrlCacheEntryW
CreateUrlCacheGroup
DeleteIE3Cache
DeleteUrlCacheContainerA
DeleteUrlCacheContainerW
DeleteUrlCacheEntry
DeleteUrlCacheEntryA
DeleteUrlCacheEntryW
DeleteUrlCacheGroup
DeleteWpadCacheForNetworks
DetectAutoProxyUrl
DispatchAPICall
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
FindCloseUrlCache
FindFirstUrlCacheContainerA
FindFirstUrlCacheContainerW
FindFirstUrlCacheEntryA
FindFirstUrlCacheEntryExA
FindFirstUrlCacheEntryExW
FindFirstUrlCacheEntryW
FindFirstUrlCacheGroup
FindNextUrlCacheContainerA
FindNextUrlCacheContainerW
FindNextUrlCacheEntryA
FindNextUrlCacheEntryExA
FindNextUrlCacheEntryExW
FindNextUrlCacheEntryW
FindNextUrlCacheGroup
ForceNexusLookup
ForceNexusLookupExW
FreeUrlCacheSpaceA
FreeUrlCacheSpaceW
FtpCommandA
FtpCommandW
FtpCreateDirectoryA
FtpCreateDirectoryW
FtpDeleteFileA
FtpDeleteFileW
FtpFindFirstFileA
FtpFindFirstFileW
FtpGetCurrentDirectoryA
FtpGetCurrentDirectoryW
FtpGetFileA
FtpGetFileEx
FtpGetFileSize
FtpGetFileW
FtpOpenFileA
FtpOpenFileW
FtpPutFileA
FtpPutFileEx
FtpPutFileW
FtpRemoveDirectoryA
FtpRemoveDirectoryW
FtpRenameFileA
FtpRenameFileW
FtpSetCurrentDirectoryA
FtpSetCurrentDirectoryW
GetProxyDllInfo
GetUrlCacheConfigInfoA
GetUrlCacheConfigInfoW
GetUrlCacheEntryBinaryBlob
GetUrlCacheEntryInfoA
GetUrlCacheEntryInfoExA
GetUrlCacheEntryInfoExW
GetUrlCacheEntryInfoW
GetUrlCacheGroupAttributeA
GetUrlCacheGroupAttributeW
GetUrlCacheHeaderData
GopherCreateLocatorA
GopherCreateLocatorW
GopherFindFirstFileA
GopherFindFirstFileW
GopherGetAttributeA
GopherGetAttributeW
GopherGetLocatorTypeA
GopherGetLocatorTypeW
GopherOpenFileA
GopherOpenFileW
HttpAddRequestHeadersA
HttpAddRequestHeadersW
HttpCheckDavCompliance
HttpCloseDependencyHandle
HttpDuplicateDependencyHandle
HttpEndRequestA
HttpEndRequestW
HttpGetServerCredentials
HttpGetTunnelSocket
HttpIndicatePageLoadComplete
HttpIsHostHstsEnabled
HttpOpenDependencyHandle
HttpOpenRequestA
HttpOpenRequestW
HttpPushClose
HttpPushEnable
HttpPushWait
HttpQueryInfoA
HttpQueryInfoW
HttpSendRequestA
HttpSendRequestExA
HttpSendRequestExW
HttpSendRequestW
HttpWebSocketClose
HttpWebSocketCompleteUpgrade
HttpWebSocketQueryCloseStatus
HttpWebSocketReceive
HttpWebSocketSend
HttpWebSocketShutdown
IncrementUrlCacheHeaderData
InternetAlgIdToStringA
InternetAlgIdToStringW
InternetAttemptConnect
InternetAutodial
InternetAutodialCallback
InternetAutodialHangup
InternetCanonicalizeUrlA
InternetCanonicalizeUrlW
InternetCheckConnectionA
InternetCheckConnectionW
InternetClearAllPerSiteCookieDecisions
InternetCloseHandle
InternetCombineUrlA
InternetCombineUrlW
InternetConfirmZoneCrossing
InternetConfirmZoneCrossingA
InternetConfirmZoneCrossingW
InternetConnectA
InternetConnectW
InternetConvertUrlFromWireToWideChar
InternetCrackUrlA
InternetCrackUrlW
InternetCreateUrlA
InternetCreateUrlW
InternetDial
InternetDialA
InternetDialW
InternetEnumPerSiteCookieDecisionA
InternetEnumPerSiteCookieDecisionW
InternetErrorDlg
InternetFindNextFileA
InternetFindNextFileW
InternetFortezzaCommand
InternetFreeCookies
InternetFreeProxyInfoList
InternetGetCertByURL
InternetGetCertByURLA
InternetGetConnectedState
InternetGetConnectedStateEx
InternetGetConnectedStateExA
InternetGetConnectedStateExW
InternetGetCookieA
InternetGetCookieEx2
InternetGetCookieExA
InternetGetCookieExW
InternetGetCookieW
InternetGetLastResponseInfoA
InternetGetLastResponseInfoW
InternetGetPerSiteCookieDecisionA
InternetGetPerSiteCookieDecisionW
InternetGetProxyForUrl
InternetGetSecurityInfoByURL
InternetGetSecurityInfoByURLA
InternetGetSecurityInfoByURLW
InternetGoOnline
InternetGoOnlineA
InternetGoOnlineW
InternetHangUp
InternetInitializeAutoProxyDll
InternetLockRequestFile
InternetOpenA
InternetOpenUrlA
InternetOpenUrlW
InternetOpenW
InternetQueryDataAvailable
InternetQueryFortezzaStatus
InternetQueryOptionA
InternetQueryOptionW
InternetReadFile
InternetReadFileExA
InternetReadFileExW
InternetSecurityProtocolToStringA
InternetSecurityProtocolToStringW
InternetSetCookieA
InternetSetCookieEx2
InternetSetCookieExA
InternetSetCookieExW
InternetSetCookieW
InternetSetDialState
InternetSetDialStateA
InternetSetDialStateW
InternetSetFilePointer
InternetSetOptionA
InternetSetOptionExA
InternetSetOptionExW
InternetSetOptionW
InternetSetPerSiteCookieDecisionA
InternetSetPerSiteCookieDecisionW
InternetSetSecureLegacyServersAppCompat
InternetSetStatusCallback
InternetSetStatusCallbackA
InternetSetStatusCallbackW
InternetShowSecurityInfoByURL
InternetShowSecurityInfoByURLA
InternetShowSecurityInfoByURLW
InternetTimeFromSystemTime
InternetTimeFromSystemTimeA
InternetTimeFromSystemTimeW
InternetTimeToSystemTime
InternetTimeToSystemTimeA
InternetTimeToSystemTimeW
InternetUnlockRequestFile
InternetWriteFile
InternetWriteFileExA
InternetWriteFileExW
IsHostInProxyBypassList
IsUrlCacheEntryExpiredA
IsUrlCacheEntryExpiredW
LoadUrlCacheContent
ParseX509EncodedCertificateForListBoxEntry
PrivacyGetZonePreferenceW
PrivacySetZonePreferenceW
ReadUrlCacheEntryStream
ReadUrlCacheEntryStreamEx
RegisterUrlCacheNotification
ResumeSuspendedDownload
RetrieveUrlCacheEntryFileA
RetrieveUrlCacheEntryFileW
RetrieveUrlCacheEntryStreamA
RetrieveUrlCacheEntryStreamW
RunOnceUrlCache
SetUrlCacheConfigInfoA
SetUrlCacheConfigInfoW
SetUrlCacheEntryGroup
SetUrlCacheEntryGroupA
SetUrlCacheEntryGroupW
SetUrlCacheEntryInfoA
SetUrlCacheEntryInfoW
SetUrlCacheGroupAttributeA
SetUrlCacheGroupAttributeW
SetUrlCacheHeaderData
ShowCertificate
ShowClientAuthCerts
ShowSecurityInfo
ShowX509EncodedCertificate
UnlockUrlCacheEntryFile
UnlockUrlCacheEntryFileA
UnlockUrlCacheEntryFileW
UnlockUrlCacheEntryStream
UpdateUrlCacheContentPath
UrlCacheCheckEntriesExist
UrlCacheCloseEntryHandle
UrlCacheContainerSetEntryMaximumAge
UrlCacheCreateContainer
UrlCacheFindFirstEntry
UrlCacheFindNextEntry
UrlCacheFreeEntryInfo
UrlCacheFreeGlobalSpace
UrlCacheGetContentPaths
UrlCacheGetEntryInfo
UrlCacheGetGlobalCacheSize
UrlCacheGetGlobalLimit
UrlCacheReadEntryStream
UrlCacheReloadSettings
UrlCacheRetrieveEntryFile
UrlCacheRetrieveEntryStream
UrlCacheServer
UrlCacheSetGlobalLimit
UrlCacheUpdateEntryExtraData
UrlZonesDetach
_GetFileExtensionFromUrl

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.wpp_sf
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 129KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fortnite Cheat/dbgeng.dll
.dll windows:10 windows x64 arch:x64

2278b6b64d869b295d1cf97b8afc695d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

dbgeng.pdb

Imports

api-ms-win-crt-string-l1-1-0

toupper
strpbrk
strnlen
isalpha
wmemmove_s
wmemcpy_s
_stricmp
wcsnlen
_memicmp
iswupper
iswalnum
_wcsupr
wcsncpy_s
memmove_s
_strlwr_s
memcpy_s
_wcsupr_s
iswdigit
strcpy_s
strncmp
iswalpha
wcsncmp
strcmp
_wcslwr
_strlwr
iswprint
isdigit
strncat_s
strncpy_s
_wcsicmp
towlower
towupper
wcscpy_s
wcscat_s
isalnum
isspace
_wcsdup
_wcsnicmp
iswspace
isprint
iswxdigit
_strnicmp
wcscmp

api-ms-win-crt-heap-l1-1-0

_free_base
_calloc_base
malloc
calloc
_malloc_base
free
realloc
_callnewh

api-ms-win-crt-environment-l1-1-0

_wgetenv
getenv

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnwprintf_s
fclose
_wfopen
ftell
fgetws
feof
fgets
__stdio_common_vswscanf
__stdio_common_vsprintf_s
__stdio_common_vswprintf_s
fseek
__stdio_common_vswprintf
__stdio_common_vsscanf
__stdio_common_vsprintf
__acrt_iob_func
__stdio_common_vsnprintf_s
__stdio_common_vfprintf

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_cexit
abort
_initterm
_initterm_e
_crt_atexit
_invalid_parameter_noinfo
_execute_onexit_table
__doserrno
_errno
terminate
_seh_filter_dll
_set_errno
_configure_narrow_argv
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_set_invalid_parameter_handler

api-ms-win-crt-time-l1-1-0

_ctime64
_wctime64
_time64

api-ms-win-crt-convert-l1-1-0

_ui64tow_s
_strtoui64
wcstol
wcstod
atoi
_wtoi
_wcstoui64
wcstoul
_itow_s
_ultow_s
atol
_wtol
wcstoull

api-ms-win-crt-locale-l1-1-0

_unlock_locales
___lc_collate_cp_func
setlocale
_lock_locales
_wsetlocale
___mb_cur_max_func
__pctype_func
___lc_locale_name_func
___lc_codepage_func

api-ms-win-crt-utility-l1-1-0

qsort
ldiv

api-ms-win-crt-filesystem-l1-1-0

_wsplitpath_s

api-ms-win-crt-math-l1-1-0

frexp
pow
log
ceilf
ldexp

api-ms-win-core-errorhandling-l1-1-0

SetErrorMode
GetLastError
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RaiseException

api-ms-win-core-string-l1-1-0

CompareStringEx
CompareStringW
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte
CompareStringOrdinal

api-ms-win-core-processenvironment-l1-1-0

SetEnvironmentVariableA
GetCommandLineW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
SearchPathW
GetEnvironmentVariableW
GetCurrentDirectoryW

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
OutputDebugStringW
OutputDebugStringA
DebugBreak

rpcrt4

UuidCreate

api-ms-win-core-synch-l1-1-0

CreateEventA
InitializeCriticalSection
CreateEventW
WaitForSingleObjectEx
LeaveCriticalSection
EnterCriticalSection
OpenSemaphoreW
ResetEvent
CreateMutexW
ReleaseSemaphore
SetEvent
InitializeCriticalSectionAndSpinCount
CreateSemaphoreExW
CreateMutexExW
SleepEx
WaitForSingleObject
WaitForMultipleObjectsEx
InitializeCriticalSectionEx
CreateEventExW
ReleaseMutex
ReleaseSRWLockExclusive
OpenProcess
DeleteCriticalSection
ReleaseSRWLockShared
AcquireSRWLockShared
AcquireSRWLockExclusive

api-ms-win-core-processthreads-l1-1-0

GetExitCodeThread
GetThreadId
ResumeThread
GetCurrentProcessId
GetCurrentThread
CreateProcessW
ExitThread
CreateThread
TerminateProcess
GetExitCodeProcess
GetCurrentProcess
GetProcessTimes
GetCurrentThreadId
CreateRemoteThread
OpenProcessToken
GetThreadPriority
QueueUserAPC
GetPriorityClass
SuspendThread

api-ms-win-core-sysinfo-l1-1-0

GetTickCount
SystemTimeToTzSpecificLocalTime
GetComputerNameExW
SystemTimeToFileTime
GetVersionExW
GetSystemInfo
GetTimeZoneInformation
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetLocalTime
GetVersionExA

api-ms-win-core-handle-l1-1-0

DuplicateHandle
CloseHandle

api-ms-win-core-misc-l1-1-0

LocalAlloc
LocalFree
Sleep
IsWow64Process
FormatMessageW
lstrcmpiW

api-ms-win-core-heap-l1-1-0

HeapAlloc
HeapCreate
GetProcessHeap
HeapFree
HeapReAlloc
HeapDestroy

api-ms-win-core-libraryloader-l1-1-0

FreeLibrary
LoadLibraryExA
LockResource
LoadResource
GetModuleHandleExW
SizeofResource
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LoadLibraryExW
DisableThreadLibraryCalls

api-ms-win-core-memory-l1-1-0

ReadProcessMemory
VirtualQueryEx
UnmapViewOfFile
VirtualFree
VirtualProtectEx
VirtualQuery
VirtualProtect
CreateFileMappingW
VirtualFreeEx
MapViewOfFile
VirtualAllocEx
VirtualAlloc
WriteProcessMemory

api-ms-win-core-localregistry-l1-1-0

RegCreateKeyExW
RegOpenKeyExW
RegOpenKeyExA
RegGetValueW
RegQueryValueExA
RegCloseKey
RegEnumValueW
RegDeleteValueW
RegQueryValueExW

api-ms-win-core-file-l1-1-0

FindFirstFileA
SetFilePointer
FileTimeToLocalFileTime
WriteFile
GetFileTime
GetFullPathNameW
QueryDosDeviceW
GetLogicalDriveStringsW
CreateFileW
GetFinalPathNameByHandleW
DeleteFileW
GetFileSize
GetFileAttributesW
DeleteFileA
SetFilePointerEx
GetFileSizeEx
GetTempFileNameW
ReadFile
CreateDirectoryW
FindNextFileW
GetDriveTypeW
CreateFileA
FindFirstFileW
FindClose
FileTimeToSystemTime

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter
QueryPerformanceFrequency

api-ms-win-core-localization-l1-1-0

LCMapStringEx
LCMapStringW

api-ms-win-core-io-l1-1-0

DeviceIoControl
GetOverlappedResult

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-core-rtlsupport-l1-1-0

RtlUnwindEx
RtlVirtualUnwind
RtlPcToFileHeader
RtlCaptureContext
RtlLookupFunctionEntry

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList
InitializeSListHead

api-ms-win-core-fibers-l1-1-0

FlsSetValue
FlsFree
FlsGetValue
FlsAlloc

dbgmodel

CreateDataModelManager

bcrypt

BCryptFinishHash
BCryptCloseAlgorithmProvider
BCryptDestroyHash
BCryptHashData
BCryptCreateHash
BCryptOpenAlgorithmProvider

dbghelp

SymEnumTypesW
SymSetScopeFromIndex
SymSetScopeFromInlineContext
SymEnumTypesByNameW
SymEnumSymbolsExW
SymEnumSymbolsForAddrW
ord1103
ord1116
SymNextW
SymPrevW
ord1119
StackWalkEx
SymCompareInlineTrace
ord1102
SymEnumLinesW
SymGetSourceFileFromTokenW
SymMatchFileNameW
SetSymLoadError
SymCleanup
SymFromInlineContextW
SymGetUnwindInfo
SymRegisterCallbackW64
SymInitializeW
RemoveInvalidModuleList
ImageDirectoryEntryToDataEx
SymFreeDiaString
dbghelp
FindExecutableImageExW
SymFindFileInPathW
ImageNtHeader
SymGetTypeInfoEx
SymGetDiaSession
SymSetDiaSession
SymUnloadModule64
GetTimestampForLoadedLibrary
SymMatchStringA
SymGetTypeFromNameW
DbgHelpCreateUserDump
SymAddSymbol
SymLoadModuleExW
SymFromNameW
SymGetOptions
SymLoadModule64
SymGetTypeInfo
SymDeleteSymbolW
SymFromIndexW
SetCheckUserInterruptShared
ReportSymbolLoadSummary
SymGetHomeDirectoryW
SymSetSearchPathW
SymAllocDiaString
SymFromAddrW
SymGetExtendedOption
SymAddSymbolW
ImageRvaToVa
SymFunctionTableAccess64
SymFromTokenW
SymRegisterCallback64
SymGetFileLineOffsets64
SymEnumSymbolsW
SymGetLineFromNameW64
SymAddrIncludeInlineTrace
SymQueryInlineTrace
ImagehlpApiVersionEx
SymSetExtendedOption
SymSetOptions
SymSearchW
SymGetModuleInfoW64
SymGetSourceFileChecksumW
SymGetSourceFileTokenW
SymGetSourceVarFromTokenW
SymMatchStringW
SymRegisterFunctionEntryCallback64

ntdll

RtlFindNextForwardRunClear
RtlNumberOfSetBits
RtlCopyContext
RtlSetBits
NtQueryVirtualMemory
NtQuerySystemInformation
NtGetNextThread
RtlInitializeBitMap
RtlAreBitsClear
RtlNtStatusToDosError
RtlReleasePrivilege
RtlAcquirePrivilege
DbgPrintEx
RtlTryAcquirePebLock
RtlReleasePebLock
NtDeviceIoControlFile
NtClose
RtlRunOnceExecuteOnce
NtFreeVirtualMemory
NtAllocateVirtualMemory
NtCreateFile
RtlUTF8ToUnicodeN
NtCreateEvent
RtlCompareMemory
NtSetTimerResolution
RtlGetVersion
RtlGetNtProductType
NtSetEvent
NtResetEvent

xmllite

CreateXmlReaderInputWithEncodingName
CreateXmlWriter
CreateXmlWriterOutputWithEncodingName
CreateXmlReader

oleaut32

VariantCopy
VariantChangeType
VarBstrFromI4
SysAllocStringLen
VariantClear
SysFreeString
VariantInit
SysAllocString
SysStringLen

api-ms-win-crt-process-l1-1-0

_spawnlp

api-ms-win-core-threadpool-l1-1-0

CloseThreadpoolTimer
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-security-base-l1-1-0

AdjustTokenPrivileges
AllocateAndInitializeSid
AddAccessDeniedAce
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
InitializeAcl
GetLengthSid
AddAccessAllowedAce
FreeSid
CheckTokenMembership

Exports

Exports

DebugConnect
DebugConnectWide
DebugCreate
DebugCreateEx

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 232KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mrdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fortnite Cheat/prm0019.dll
.dll windows:10 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8.2MB - Virtual size: 8.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Fortnite Cheat/spp/plugin-manifests-signed/sppobjs-spp-plugin-manifest-signed.xrm-ms
Fortnite Cheat/spp/plugin-manifests-signed/sppwinob-spp-plugin-manifest-signed.xrm-ms
Fortnite Cheat/spp/store/2.0/cache/cache.dat
Fortnite Cheat/spp/store/2.0/data.dat
Fortnite Cheat/spp/store/2.0/tokens.dat
Fortnite Cheat/spp/tokens/issuance/client-issuance-stil.xrm-ms
Fortnite Cheat/spp/tokens/issuance/client-issuance-ul-oob.xrm-ms
Fortnite Cheat/spp/tokens/issuance/client-issuance-ul.xrm-ms
Fortnite Cheat/spp/tokens/issuance/client-issuance-wgalic.xrm-ms
Fortnite Cheat/spp/tokens/legacy/client-issuance-rac.xrm-ms
Fortnite Cheat/spp/tokens/legacy/client-issuance-spc.xrm-ms
Fortnite Cheat/spp/tokens/legacy/rac-generic-private.xrm-ms
Fortnite Cheat/spp/tokens/legacy/rac-generic-public.xrm-ms
Fortnite Cheat/spp/tokens/legacy/spc-generic-private.xrm-ms
Fortnite Cheat/spp/tokens/legacy/spc-generic-public.xrm-ms
Fortnite Cheat/spp/tokens/pkeyconfig/pkeyconfig-csvlk.xrm-ms
Fortnite Cheat/spp/tokens/pkeyconfig/pkeyconfig-downlevel.xrm-ms
Fortnite Cheat/spp/tokens/pkeyconfig/pkeyconfig.xrm-ms
Fortnite Cheat/spp/tokens/rules/ruleset-filteractions.xrm-ms
Fortnite Cheat/spp/tokens/rules/ruleset-platformglobal.xrm-ms
Fortnite Cheat/spp/tokens/rules/ruleset-windowsapp.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/DefaultPpd-EnterpriseS-ppdlic.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-CSVLK-1-pl-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-CSVLK-1-ul-oob-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-CSVLK-1-ul-phn-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-CSVLK-1-ul-store-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-CSVLK-2-pl-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-CSVLK-2-ul-oob-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-CSVLK-2-ul-phn-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-CSVLK-2-ul-store-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-CSVLK-3-pl-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-CSVLK-3-ul-oob-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-CSVLK-3-ul-phn-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-CSVLK-3-ul-store-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-CSVLK-4-pl-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-CSVLK-4-ul-oob-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-CSVLK-4-ul-phn-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-CSVLK-4-ul-store-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-CSVLK-5-pl-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-CSVLK-5-ul-oob-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-CSVLK-5-ul-phn-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-CSVLK-5-ul-store-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-CSVLK-6-pl-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-CSVLK-6-ul-oob-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-CSVLK-6-ul-phn-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-CSVLK-6-ul-store-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-GVLK-1-ul-oob-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-GVLK-1-ul-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-MAK-1-pl-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-MAK-1-ul-oob-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-MAK-1-ul-phn-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-Volume-MAK-1-ul-store-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/EnterpriseS/EnterpriseS-ppdlic.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/DefaultPpd-IoTEnterpriseS-ppdlic.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-OEM-DM-1-pl-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-OEM-DM-1-ul-oob-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-OEM-DM-1-ul-phn-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-OEM-DM-1-ul-store-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-OEM-DM-2-pl-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-OEM-DM-2-ul-oob-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-OEM-DM-2-ul-phn-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-OEM-DM-2-ul-store-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-OEM-NONSLP-1-pl-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-OEM-NONSLP-1-ul-oob-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-OEM-NONSLP-1-ul-phn-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-OEM-NONSLP-1-ul-store-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-OEM-NONSLP-2-pl-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-OEM-NONSLP-2-ul-oob-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-OEM-NONSLP-2-ul-phn-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-OEM-NONSLP-2-ul-store-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-Retail-1-pl-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-Retail-1-ul-oob-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-Retail-1-ul-phn-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-Retail-1-ul-store-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-Volume-GVLK-1-ul-oob-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-Volume-GVLK-1-ul-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-Volume-MAK-1-pl-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-Volume-MAK-1-ul-oob-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-Volume-MAK-1-ul-phn-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-Volume-MAK-1-ul-store-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-Volume-MAK-2-pl-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-Volume-MAK-2-ul-oob-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-Volume-MAK-2-ul-phn-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-Volume-MAK-2-ul-store-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/IoTEnterpriseS/IoTEnterpriseS-ppdlic.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/DefaultPpd-csvlk-pack-ppdlic.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-1-pl-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-1-ul-oob-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-1-ul-phn-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-1-ul-store-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-10-pl-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-10-ul-oob-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-10-ul-phn-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-10-ul-store-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-2-pl-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-2-ul-oob-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-2-ul-phn-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-2-ul-store-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-3-pl-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-3-ul-oob-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-3-ul-phn-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-3-ul-store-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-4-pl-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-4-ul-oob-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-4-ul-phn-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-4-ul-store-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-5-pl-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-5-ul-oob-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-5-ul-phn-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-5-ul-store-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-6-pl-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-6-ul-oob-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-6-ul-phn-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-6-ul-store-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-7-pl-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-7-ul-oob-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-7-ul-phn-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-7-ul-store-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-8-pl-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-8-ul-oob-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-8-ul-phn-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-8-ul-store-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-9-pl-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-9-ul-oob-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-9-ul-phn-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-Volume-CSVLK-9-ul-store-rtm.xrm-ms
Fortnite Cheat/spp/tokens/skus/csvlk-pack/csvlk-pack-ppdlic.xrm-ms
Fortnite Cheat/wmp.dll
.dll regsvr32 windows:10 windows x64 arch:x64

36b9b1016d85dfa1274194edc17cae71

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

wmp.pdb

Imports

api-ms-win-crt-string-l1-1-0

strcmp
wcscspn
wcspbrk
memset
strncmp
wcscmp
wcsncpy
wcsnlen
strnlen
wcsspn
wcsncmp

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e

api-ms-win-crt-time-l1-1-0

clock
_time32

api-ms-win-crt-private-l1-1-0

_o__wtof
_o__wtoi
_o__wtoi64
_o__wtol
_o_atan2
_o_atoi
_o_bsearch
_o_calloc
_o_ceil
_o_cos
_o_exit
_o_exp
_o_floor
_o_free
_o_isdigit
_o_isspace
_o_iswalnum
_o_iswalpha
_o_iswascii
_o_iswcntrl
_o_iswdigit
_o_iswprint
_o_iswspace
_o_iswxdigit
_o_isxdigit
_o_ldexp
_o_log
_o_malloc
_o_memcpy_s
_o_pow
_o_powf
_o_qsort
_o_qsort_s
_o_rand
_o_rand_s
_o_realloc
_o_sin
_o_sqrt
_o_srand
_o_strncpy_s
_o_terminate
_o_tolower
_o_toupper
_o_towlower
_o_towupper
_o_wcscat_s
_o_wcscpy_s
_o_wcsftime
_o_wcsncpy_s
_o_wcstod
_o_wcstok_s
_o_wcstol
memmove
_o_wcstoul
wcsrchr
wcsstr
wcschr
__CxxFrameHandler3
_o__seh_filter_dll
_o__register_onexit_function
_o__purecall
_o__memicmp
_o__wsplitpath_s
_o__ltow
_o__localtime32
_o__wcsupr_s
_o__wcstoui64
_o__itow_s
_o__itow
_o__itoa_s
_o__wcsnicmp
strchr
_o__wcslwr
_o__wcsicoll
_o__wcsicmp
_o__ultow_s
_o__strnicmp
_o__stricmp
_o__invalid_parameter_noinfo_noreturn
_o__invalid_parameter_noinfo
_o__initialize_onexit_table
_o__initialize_narrow_environment
_o__execute_onexit_table
_o__errno
_o__endthread
_o__difftime32
_o__crt_atexit
_o__configure_narrow_argv
_o__cexit
_o__callnewh
_o__beginthreadex
_o__beginthread
_o___stdio_common_vswscanf
_o___stdio_common_vswprintf_s
_o___stdio_common_vswprintf
_o___stdio_common_vsprintf
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsnprintf_s
_o___stdio_common_vfwprintf
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
_o___acrt_iob_func
__C_specific_handler
__std_terminate
__CxxFrameHandler4
_CxxThrowException
memcmp
memcpy

ntdll

RtlNtStatusToDosError
RtlGetPersistedStateLocation
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind

kernel32

EncodePointer
HeapAlloc
DecodePointer
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
ResetEvent
WaitForSingleObjectEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
FreeLibraryAndExitThread
GetUserDefaultLCID
CompareStringOrdinal
MoveFileW
GetFileSize
WideCharToMultiByte
GetLocaleInfoW
CeipIsOptedIn
GlobalAlloc
GlobalFree
GetExitCodeThread
GetLocalTime
GetVolumeInformationW
GetTickCount64
SetThreadExecutionState
GetCurrentDirectoryW
WriteFile
Sleep
TerminateThread
GlobalMemoryStatusEx
WaitForMultipleObjects
DeviceIoControl
SetErrorMode
GetComputerNameW
ReleaseSemaphore
CreateSemaphoreW
ExitThread
GetThreadPriority
ExpandEnvironmentStringsW
GetComputerNameExW
SetFilePointer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
LoadLibraryExA
GetThreadLocale
GetFileAttributesExW
HeapFree
GetProcessHeap
GetDriveTypeW
GlobalUnlock
GlobalLock
FindPackagesByPackageFamily
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateThread
GetDiskFreeSpaceExW
SetFileAttributesW
GetCurrentProcessId
DeleteFileW
GetTickCount
FindClose
FindNextFileW
FindFirstFileW
FindCloseChangeNotification
FindNextChangeNotification
FindFirstChangeNotificationW
CreateEventW
WaitForSingleObject
DebugBreak
OpenEventW
LocalFree
FormatMessageW
GetUserDefaultUILanguage
SetThreadPriority
SetEvent
lstrlenW
GetVersionExW
GetCurrentThread
RaiseFailFastException
GetCurrentProcess
VirtualFree
GetCurrentThreadId
SetLastError
CopyFileW
SystemTimeToFileTime
GetSystemTime
LockResource
lstrcpyW
HeapDestroy
DisableThreadLibraryCalls
HeapSetInformation
ReadFile
CreateFileW
GetShortPathNameW
FindResourceW
LoadLibraryW
MulDiv
CloseHandle
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetModuleFileNameW
FindResourceExW
LoadResource
SizeofResource
MultiByteToWideChar
GetSystemInfo
VirtualQuery
VirtualAlloc
VirtualProtect
lstrcpynW
lstrcmpiW
GetModuleHandleW
LoadLibraryExW
GetProcAddress
GetLastError
FreeLibrary
BindIoCompletionCallback
CreateToolhelp32Snapshot
Process32NextW
CloseThreadpoolTimer
CreateThreadpoolTimer
CompareFileTime
FileTimeToSystemTime
CreateMutexW
ReleaseMutex
CopyFileExW
LocalFileTimeToFileTime
CreateDirectoryW
RemoveDirectoryW
GetDateFormatW
GetTimeFormatW
GetVersionExA
ExitProcess
QueryPerformanceFrequency
lstrcmpW
LocalAlloc
DuplicateHandle
HeapCreate
HeapReAlloc
HeapSize
GetLocaleInfoA
GetFileInformationByHandle
GetVolumePathNameW
GetVolumeNameForVolumeMountPointW
GetFileType
SetEndOfFile
FlushFileBuffers
OpenMutexW
OpenFileMappingW
GetFullPathNameW
GetLongPathNameW
GetTempFileNameW
IsValidLocale
GetProcessTimes
OpenThread
LCMapStringW
GlobalMemoryStatus
GetTempPathW
GetFileAttributesW
GetPrivateProfileStringW
OutputDebugStringW
MoveFileExW
InitializeCriticalSectionEx
GetDiskFreeSpaceW
FreeEnvironmentStringsW
GetEnvironmentStringsW
FreeEnvironmentStringsA
lstrcatW
FileTimeToLocalFileTime
GetNumberFormatW
GetModuleHandleA
GetACP
GetModuleFileNameA
CreateProcessW
GetExitCodeProcess
Process32FirstW
DelayLoadFailureHook
ResolveDelayLoadedAPI
FindFirstFileExW
GetOverlappedResult
ReadDirectoryChangesW
GetProcessMitigationPolicy
ProcessIdToSessionId
FindNLSString
TryEnterCriticalSection
SetFilePointerEx
WaitForMultipleObjectsEx
TzSpecificLocalTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GlobalDeleteAtom
GlobalAddAtomW
GlobalSize
GlobalReAlloc
GetSystemPowerStatus
lstrlenA
GetTimeZoneInformation

oleaut32

SysFreeString
VarUI4FromStr
VariantChangeType
VariantClear
SysStringLen
SysAllocStringLen
SysAllocString
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SysStringByteLen
SysAllocStringByteLen
SafeArrayGetElemsize
SafeArrayGetDim
OleCreatePropertyFrame
VariantChangeTypeEx
SafeArrayCreateVectorEx
VariantCopy
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
OleCreatePropertyFrameIndirect
VariantInit
SetErrorInfo
VarCmp
VariantTimeToSystemTime
DispCallFunc
VarR8FromUI8
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayPutElement
SafeArrayCreateVector
SystemTimeToVariantTime
CreateErrorInfo
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayGetLBound

api-ms-win-core-registry-l2-1-0

RegDeleteKeyW
RegEnumKeyW

api-ms-win-core-com-l1-1-0

CoMarshalInterface
CoUnmarshalInterface
CoReleaseMarshalData
CoSetProxyBlanket
StringFromIID
CoRegisterClassObject
GetHGlobalFromStream
StringFromCLSID
CoRevokeClassObject
CoCreateFreeThreadedMarshaler
CoCreateGuid
PropVariantCopy
IIDFromString
CoWaitForMultipleHandles
CoTaskMemRealloc
CoGetTreatAsClass
CoFreeUnusedLibraries
CLSIDFromString
CoTaskMemFree
CLSIDFromProgID
CreateStreamOnHGlobal
StringFromGUID2
CoGetInterfaceAndReleaseStream
CoTaskMemAlloc
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoDisconnectObject
PropVariantClear
CoInitializeEx
CoGetStandardMarshal
CoUninitialize
CoGetClassObject

api-ms-win-core-string-l2-1-0

CharNextW
CharPrevW
CharLowerW

api-ms-win-core-registry-l1-1-0

RegQueryValueExW
RegDeleteValueW
RegNotifyChangeKeyValue
RegCreateKeyExW
RegSetValueExW
RegEnumValueW
RegQueryInfoKeyW
RegGetValueW
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey

api-ms-win-eventing-classicprovider-l1-1-0

TraceMessage
RegisterTraceGuidsW
UnregisterTraceGuids
GetTraceEnableFlags
GetTraceLoggerHandle
TraceEvent
GetTraceEnableLevel

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer
EventEnabled
EventSetInformation
EventUnregister
EventRegister
EventWrite

api-ms-win-core-libraryloader-l1-2-0

LoadStringA
LoadStringW
GetModuleHandleExW
FreeResource

api-ms-win-core-version-l1-1-1

GetFileVersionInfoW
GetFileVersionInfoSizeW

api-ms-win-core-version-l1-1-0

VerQueryValueW

api-ms-win-mm-time-l1-1-0

timeEndPeriod
timeGetTime
timeBeginPeriod

api-ms-win-core-shlwapi-legacy-l1-1-0

PathFileExistsW
PathRemoveBackslashW
PathFindExtensionW
PathRemoveFileSpecW

api-ms-win-shcore-comhelpers-l1-1-0

IUnknown_QueryService

api-ms-win-security-cryptoapi-l1-1-0

CryptAcquireContextW
CryptGenRandom

api-ms-win-core-url-l1-1-0

UrlCombineW
UrlCanonicalizeW

api-ms-win-core-com-private-l1-1-0

CoRegisterMessageFilter

api-ms-win-security-base-l1-1-0

GetAce
EqualSid
GetAclInformation
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
MakeSelfRelativeSD
AllocateAndInitializeSid
DuplicateTokenEx
SetFileSecurityW
GetSecurityDescriptorLength
IsValidSecurityDescriptor
GetSecurityDescriptorControl
CreateWellKnownSid
MapGenericMask
GetTokenInformation
FreeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
AccessCheck
GetWindowsAccountDomainSid
GetFileSecurityW

api-ms-win-security-provider-l1-1-0

GetNamedSecurityInfoW
SetEntriesInAclW
SetNamedSecurityInfoW

api-ms-win-shcore-stream-l1-1-0

SHCreateStreamOnFileW

api-ms-win-core-perfcounters-l1-1-0

PerfStopProvider
PerfSetCounterSetInfo
PerfStartProviderEx

api-ms-win-core-sysinfo-l2-1-0

GetUserNameW

api-ms-win-core-processthreads-l1-1-0

CreateProcessAsUserW
TlsSetValue
CreateProcessA
OpenThreadToken
OpenProcessToken
TlsGetValue

api-ms-win-core-stringansi-l1-1-0

CharNextA

api-ms-win-core-shlwapi-obsolete-l1-1-0

StrStrIA

api-ms-win-shcore-registry-l1-1-0

SHDeleteKeyW

wmvcore

WMValidateData
WMCreateSyncReader
WMCreateWriter
WMIsContentProtected
WMCreateReader
WMCreateEditor
WMCreateProfileManager

api-ms-win-core-synch-l1-1-0

CreateSemaphoreExW
CreateEventExW
OpenSemaphoreW
CreateMutexExW

api-ms-win-core-localization-l1-2-0

GetUserDefaultLocaleName
GetGeoInfoW
LocaleNameToLCID
GetSystemDefaultLCID
GetUserDefaultLangID
GetUserGeoID

api-ms-win-core-sysinfo-l1-2-0

GetProductInfo

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory
RoActivateInstance

api-ms-win-core-sysinfo-l1-1-0

GetVersion
GetWindowsDirectoryW
GetSystemDirectoryW

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-core-string-l1-1-0

GetStringTypeExW
CompareStringW

api-ms-win-core-threadpool-l1-2-0

SetThreadpoolWait
CreateThreadpoolWait
CloseThreadpoolWait
SetThreadpoolThreadMaximum
SetThreadpoolThreadMinimum
WaitForThreadpoolWorkCallbacks
CloseThreadpoolWork
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpool
CreateThreadpool
WaitForThreadpoolWaitCallbacks

api-ms-win-core-file-l1-1-0

GetFileSizeEx
QueryDosDeviceW

api-ms-win-core-localization-l1-2-1

EnumSystemLocalesEx

gdiplus

GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipGetPropertyItemSize
GdipGetImagePalette
GdipGetImagePaletteSize
GdipFillPath
GdipGetImageHorizontalResolution
GdipGetImagePixelFormat
GdipGetPropertyItem
GdipLoadImageFromStream
GdipCloneImage
GdipAlloc
GdipDisposeImage
GdipSetSolidFillColor
GdipImageRotateFlip
GdipCreateHBITMAPFromBitmap
GdipSetPixelOffsetMode
GdipSetInterpolationMode
GdipDrawImageRectRectI
GdipCreateMatrix
GdipDeleteMatrix
GdipTranslateMatrix
GdipRotateMatrix
GdipCreateHICONFromBitmap
GdipDrawImageI
GdipDeleteGraphics
GdipDrawImageRectI
GdiplusShutdown
GdipGetImageEncodersSize
GdipSetWorldTransform
GdipGetDC
GdipSetLineBlend
GdipFillRectangleI
GdipCreateBitmapFromHBITMAP
GdipCreatePath
GdipDeletePath
GdipAddPathRectangleI
GdipCreatePathGradientFromPath
GdipSetPathGradientCenterColor
GdipSetPathGradientCenterPointI
GdipSetPathGradientFocusScales
GdipGetPropertySize
GdipLoadImageFromFile
GdipCreateBitmapFromResource
GdipCreateBitmapFromStream
GdipSetLineSigmaBlend
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipSaveImageToStream
GdipGetTextureTransform
GdipTranslateTextureTransform
GdipGetImageEncoders
GdipResetTextureTransform
GdipCreateFromHDC
GdipReleaseDC
GdipSetTextureTransform
GdipCreateTexture
GdipSetTextureWrapMode
GdipTranslateWorldTransform
GdipGetImageWidth
GdipDrawCachedBitmap
GdipCreateCachedBitmap
GdipCreateSolidFill
GdipGetAllPropertyItems
GdipCreatePen1
GdipDeletePen
GdipDrawRectangleI
GdipGetImageVerticalResolution
GdipBitmapSetResolution
GdipCreateBitmapFromHICON
GdipGetImageHeight
GdipCreateBitmapFromGdiDib
GdipSaveImageToFile
GdipSetPropertyItem
GdiplusStartup
GdipCreateBitmapFromScan0
GdipSetSmoothingMode
GdipDeleteBrush
GdipCloneBrush
GdipCreateImageAttributes
GdipGetImageGraphicsContext
GdipGetImageRawFormat
GdipGetPathGradientPointCount
GdipSetPathGradientSurroundColorsWithCount
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipSetCompositingQuality
GdipDeleteCachedBitmap
GdipSetPathGradientBlend
GdipCreateLineBrushFromRectI
GdipFree

gdi32

Polyline
DPtoLP
DeleteObject
GetDeviceCaps
CreateFontIndirectW
SelectObject
GetTextMetricsW
GetTextExtentPointW
RestoreDC
DeleteDC
SetViewportOrgEx
SetWindowOrgEx
SetMapMode
SaveDC
LPtoDP
CreateDCW
CreateRectRgnIndirect
CreateCompatibleDC
GetClipBox
OffsetViewportOrgEx
GetStockObject
ExcludeClipRect
RectVisible
SetLayout
SetStretchBltMode
SetBkMode
SetTextColor
CreateFontW
GetObjectW
CreateCompatibleBitmap
CreateRectRgn
CombineRgn
OffsetRgn
StretchBlt
StretchDIBits
CreateSolidBrush
SetRectRgn
GetRgnBox
PtInRegion
SetBkColor
PatBlt
IntersectClipRect
CreatePen
Rectangle
GetLayout
BitBlt
GetObjectType
GetBkColor
ExtTextOutW
SetTextAlign
TextOutW
GetObjectA
GetDIBColorTable
CreateDIBSection
CreateICW
SetDIBits
GetDIBits
SetDIBitsToDevice
ExtCreateRegion
SetDIBColorTable
ExtSelectClipRgn
GetRegionData
GetTextAlign
SelectPalette
RealizePalette
GetPaletteEntries
SetPaletteEntries
GetSystemPaletteEntries
CreatePalette
SelectClipRgn
GdiFlush
DeleteMetaFile
CloseMetaFile
SetWindowExtEx
CreateMetaFileW
Ellipse
MoveToEx
LineTo
GetTextColor
SetTextCharacterExtra
CreateBrushIndirect
RoundRect
OffsetWindowOrgEx
GetTextExtentPoint32W

user32

DrawTextExW
SetGestureConfig
CloseGestureInfoHandle
SendMessageCallbackW
SetMenuInfo
SetMenuItemBitmaps
DrawMenuBar
GetScrollRange
GetWindowDC
SystemParametersInfoA
CopyAcceleratorTableW
GetDpiForWindow
UpdateLayeredWindowIndirect
TrackMouseEvent
GetScrollPos
GetQueueStatus
RegisterClipboardFormatW
SystemParametersInfoForDpi
IsMenu
EnumDisplayDevicesW
SetPropW
GetPropW
BringWindowToTop
GetClassLongPtrW
ShowCursor
GetShellWindow
SetLayeredWindowAttributes
EnumDisplayMonitors
RegisterWindowMessageA
CheckRadioButton
GetDlgItemInt
ShowScrollBar
GetScrollBarInfo
GetDlgItemTextW
EnumChildWindows
IsDlgButtonChecked
CheckDlgButton
GetMessageExtraInfo
NotifyWinEvent
GetWindowInfo
CloseWindow
EnumWindows
SetClassLongW
GetDoubleClickTime
CloseClipboard
GetClipboardData
OpenClipboard
GetClipboardOwner
DrawEdge
GetNextDlgTabItem
WindowFromDC
GetScrollInfo
GetMessageTime
SetClassLongPtrW
DrawFocusRect
GetMessagePos
InflateRect
MonitorFromRect
IsZoomed
GetSystemMenu
GetSysColor
MsgWaitForMultipleObjectsEx
InSendMessage
PostThreadMessageW
GetClassNameW
SendMessageTimeoutA
SendMessageTimeoutW
DestroyCursor
MonitorFromWindow
GetDesktopWindow
SetParent
GetClassInfoW
MsgWaitForMultipleObjects
SendDlgItemMessageW
SetDlgItemInt
SetDlgItemTextW
EndDialog
LoadIconW
VkKeyScanW
GetDlgCtrlID
DrawTextW
GetSystemMetricsForDpi
GetWindowLongPtrW
SetWindowLongPtrW
GetDC
ReleaseDC
GetDialogBaseUnits
EndPaint
GetClientRect
BeginPaint
GetFocus
IsChild
IsDialogMessageW
WinHelpW
MoveWindow
ShowWindow
IsWindow
RegisterClassExW
GetClassInfoExW
wsprintfW
LoadCursorW
DestroyWindow
DefWindowProcW
CreateWindowExW
GetDlgItem
SendMessageW
CallWindowProcW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
MessageBoxW
LoadImageW
GetMenuItemCount
SetMenuDefaultItem
GetMenuItemInfoW
SetMenuItemInfoW
PostMessageW
GetWindowRect
PtInRect
GetActiveWindow
LoadMenuW
LoadAcceleratorsW
SetWindowPos
InvalidateRect
GetWindowLongW
PostQuitMessage
SetFocus
MapWindowPoints
MessageBeep
RemoveMenu
AppendMenuW
TrackPopupMenuEx
DestroyMenu
CreatePopupMenu
MonitorFromPoint
GetMonitorInfoW
GetParent
IsWindowVisible
SetWindowLongW
FillRect
SetWindowRgn
OffsetRect
EqualRect
IntersectRect
DestroyAcceleratorTable
UnionRect
GetKeyState
UnregisterClassW
CopyRect
InvalidateRgn
GetCapture
SetCapture
ReleaseCapture
GetForegroundWindow
GetCursorPos
SetCursor
SystemParametersInfoW
ClientToScreen
SetRectEmpty
IsRectEmpty
SetRect
GetSubMenu
TrackPopupMenu
EnableWindow
SetWindowTextW
UpdateWindow
CreateDialogParamW
GetWindowTextLengthW
GetWindowTextW
SetTimer
FrameRect
KillTimer
IsWindowUnicode
IsWindowEnabled
AdjustWindowRectEx
IsIconic
GetWindowPlacement
GetAsyncKeyState
SetActiveWindow
SetForegroundWindow
RedrawWindow
GetWindowThreadProcessId
GetTopWindow
GetWindow
GetMenuStringW
GetMenuItemID
EnableMenuItem
DeleteMenu
CheckMenuRadioItem
InsertMenuW
CreateMenu
CheckMenuItem
GetIconInfo
GetSysColorBrush
DrawIconEx
InsertMenuItemW
DestroyIcon
GetMenuInfo
GetAncestor
FindWindowW
SetThreadDpiAwarenessContext
AllowSetForegroundWindow
DialogBoxParamW
GetMenu
GetWindowRgn
CallNextHookEx
FindWindowExW
GetClassLongW
SetWindowPlacement
SetMenu
RegisterClassW
RegisterWindowMessageW
ChangeWindowMessageFilterEx
SetWindowsHookExW
UnhookWindowsHookEx
TranslateAcceleratorW
GetUpdateRect
GetGestureInfo
GetSystemMetrics
ValidateRect

ole32

WriteClassStm
CoAllowSetForegroundWindow
IsAccelerator
OleRegGetUserType
CreateDataAdviseHolder
DoDragDrop
RevokeDragDrop
RegisterDragDrop
OleSaveToStream
OleLoadFromStream
CreateBindCtx
CoInitialize
ReleaseStgMedium
GetRunningObjectTable
OleRegEnumVerbs
CreateOleAdviseHolder
OleRegGetMiscStatus

dwmapi

DwmIsCompositionEnabled

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-featurestaging-l1-1-0

UnsubscribeFeatureStateChangeNotification
RecordFeatureUsage
SubscribeFeatureStateChangeNotification

bcrypt

BCryptDestroyHash
BCryptCloseAlgorithmProvider
BCryptFinishHash
BCryptGetProperty
BCryptDestroyKey
BCryptVerifySignature
BCryptImportKeyPair
BCryptHashData
BCryptOpenAlgorithmProvider
BCryptCreateHash

mfperfhelper

ord1
ord101
ord58
ord100

api-ms-win-core-io-l1-1-1

CancelIo

api-ms-win-core-com-l1-1-2

CoFileTimeNow

api-ms-win-core-io-l1-1-0

CancelIoEx

api-ms-win-crt-math-l1-1-0

sqrtf
sinf
tanf
cosf
logf

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 7.8MB - Virtual size: 7.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGELK
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 335KB - Virtual size: 334KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 824KB - Virtual size: 824KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 3636

Password: 3636

b907912f27a3d3e7f087f7a311c4b628

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 144KB - Virtual size: 143KB

.rdata Size: 47KB - Virtual size: 47KB

.data Size: 303KB - Virtual size: 307KB

.reloc Size: 8KB - Virtual size: 8KB

Password: 3636

5ecbb8bdacdf7391d9965a8154aba02a

Code Sign

33:00:00:01:09:5e:de:a2:12:7e:92:81:cc:00:00:00:00:01:09Certificate

Extended Key Usages

61:0b:aa:c1:00:00:00:00:00:09Certificate

Key Usages

33:00:00:01:09:5e:de:a2:12:7e:92:81:cc:00:00:00:00:01:09Certificate

Extended Key Usages

61:0b:aa:c1:00:00:00:00:00:09Certificate

Key Usages

33:bf:8a:a0:db:a4:f2:e1:35:79:c9:d2:8f:c6:09:5e:aa:a8:80:a8:16:23:34:9d:31:5e:b7:46:2e:cd:44:19Signer

33:bf:8a:a0:db:a4:f2:e1:35:79:c9:d2:8f:c6:09:5e:aa:a8:80:a8:16:23:34:9d:31:5e:b7:46:2e:cd:44:19Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

pdh

setupapi

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-math-l1-1-0

d3d9

dbghelp

version

opengl32

Exports

Exports

Sections

.text Size: 2.8MB - Virtual size: 2.8MB

.rdata Size: 4.3MB - Virtual size: 4.3MB

.data Size: 98KB - Virtual size: 135KB

.pdata Size: 99KB - Virtual size: 99KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 17KB - Virtual size: 17KB

Password: 3636

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text
Size: 144KB - Virtual size: 143KB

.rdata
Size: 47KB - Virtual size: 47KB

.data
Size: 303KB - Virtual size: 307KB

.reloc
Size: 8KB - Virtual size: 8KB

33:00:00:01:09:5e:de:a2:12:7e:92:81:cc:00:00:00:00:01:09
Certificate

61:0b:aa:c1:00:00:00:00:00:09
Certificate

33:00:00:01:09:5e:de:a2:12:7e:92:81:cc:00:00:00:00:01:09
Certificate

61:0b:aa:c1:00:00:00:00:00:09
Certificate

33:bf:8a:a0:db:a4:f2:e1:35:79:c9:d2:8f:c6:09:5e:aa:a8:80:a8:16:23:34:9d:31:5e:b7:46:2e:cd:44:19
Signer

33:bf:8a:a0:db:a4:f2:e1:35:79:c9:d2:8f:c6:09:5e:aa:a8:80:a8:16:23:34:9d:31:5e:b7:46:2e:cd:44:19
Signer

.text
Size: 2.8MB - Virtual size: 2.8MB

.rdata
Size: 4.3MB - Virtual size: 4.3MB

.data
Size: 98KB - Virtual size: 135KB

.pdata
Size: 99KB - Virtual size: 99KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 17KB - Virtual size: 17KB

.text
Size: 4.9MB - Virtual size: 4.9MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

61:0f:78:4d:00:00:00:00:00:03
Certificate

61:14:2c:a7:00:00:00:00:00:06
Certificate

61:14:2c:a7:00:00:00:00:00:06
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

6b:66:25:0c:fc:7b:6d:10:27:cf:17:8b:76:5c:e3:ff:d3:cc:17:74
Signer

.text
Size: 4.5MB - Virtual size: 4.5MB

.data
Size: 98KB - Virtual size: 208KB

.pdata
Size: 82KB - Virtual size: 82KB

.rsrc
Size: 1024B - Virtual size: 888B

.reloc
Size: 32KB - Virtual size: 31KB

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

61:0f:78:4d:00:00:00:00:00:03
Certificate

61:47:52:ba:00:00:00:00:00:04
Certificate

61:47:52:ba:00:00:00:00:00:04
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

03:ff:2b:47:0d:e7:26:f5:82:02:97:57:d5:97:89:93:9c:ca:dd:97
Signer