c24e585334b14088c62ced6b522b24a8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c24e585334b14088c62ced6b522b24a8_JaffaCakes118
Size

5.5MB
MD5

c24e585334b14088c62ced6b522b24a8
SHA1

30903728f54f0519aedd115eda4a38cae948fcf6
SHA256

396352a28ab72f8ae713f340228a0da3b33acbda5437f78b7f39ec496276e21b
SHA512

2a9c7a580f4d94e4cb98550392547e63116e104bd36643558601eef0e9a44f4b530e62386e1f27e2bc21821f2a5ec34fc4a2cd1b4649a58d46a054038a1de6d9
SSDEEP

98304:bBFVJ9jNWkBOZGhw2dd7bv4MD3uSdwMvVonpQT4NLW7ncOSmGn2wQz:VFL9jNWkeGZn4YZdwMvVonpQT4E7QmGq

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/USA Role Play/pawno/pawno.exe	upx

Unsigned PE 16 IoCs

Checks for missing Authenticode signature.

resource
unpack001/USA Role Play/announce.exe
unpack001/USA Role Play/bass.dll
unpack001/USA Role Play/libmysql.dll
unpack001/USA Role Play/pawno/SciLexer.dll
unpack001/USA Role Play/pawno/libpawnc.dll
unpack001/USA Role Play/pawno/pawnc.dll
unpack001/USA Role Play/pawno/pawncc.exe
unpack001/USA Role Play/pawno/pawno.exe
unpack001/USA Role Play/plugins/SystemControl.dll
unpack001/USA Role Play/plugins/crashdetect.dll
unpack001/USA Role Play/plugins/mysql.dll
unpack001/USA Role Play/plugins/profiler.dll
unpack001/USA Role Play/plugins/sscanf.dll
unpack001/USA Role Play/plugins/streamer.dll
unpack001/USA Role Play/samp-npc.exe
unpack001/USA Role Play/samp-server.exe

Files

c24e585334b14088c62ced6b522b24a8_JaffaCakes118
.rar
USA Role Play/announce.exe
.exe windows:4 windows x86 arch:x86

5df40cb9994dcacb42f25de3fe7d92db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

gethostbyname
htons
socket
bind
connect
recv
send
closesocket
WSACleanup
WSAStartup

kernel32

GetFileType
LCMapStringW
LCMapStringA
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
HeapAlloc
GetLastError
CloseHandle
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetFilePointer
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetACP
GetOEMCP
GetCPInfo
SetStdHandle
FlushFileBuffers
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
QueryPerformanceCounter
GetTickCount

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
USA Role Play/bass.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_Apply3D
BASS_ChannelBytes2Seconds
BASS_ChannelFlags
BASS_ChannelGet3DAttributes
BASS_ChannelGet3DPosition
BASS_ChannelGetAttribute
BASS_ChannelGetData
BASS_ChannelGetDevice
BASS_ChannelGetInfo
BASS_ChannelGetLength
BASS_ChannelGetLevel
BASS_ChannelGetPosition
BASS_ChannelGetTags
BASS_ChannelIsActive
BASS_ChannelIsSliding
BASS_ChannelLock
BASS_ChannelPause
BASS_ChannelPlay
BASS_ChannelRemoveDSP
BASS_ChannelRemoveFX
BASS_ChannelRemoveLink
BASS_ChannelRemoveSync
BASS_ChannelSeconds2Bytes
BASS_ChannelSet3DAttributes
BASS_ChannelSet3DPosition
BASS_ChannelSetAttribute
BASS_ChannelSetDSP
BASS_ChannelSetDevice
BASS_ChannelSetFX
BASS_ChannelSetLink
BASS_ChannelSetPosition
BASS_ChannelSetSync
BASS_ChannelSlideAttribute
BASS_ChannelStop
BASS_ChannelUpdate
BASS_ErrorGetCode
BASS_FXGetParameters
BASS_FXReset
BASS_FXSetParameters
BASS_Free
BASS_Get3DFactors
BASS_Get3DPosition
BASS_GetCPU
BASS_GetConfig
BASS_GetConfigPtr
BASS_GetDSoundObject
BASS_GetDevice
BASS_GetDeviceInfo
BASS_GetEAXParameters
BASS_GetInfo
BASS_GetVersion
BASS_GetVolume
BASS_Init
BASS_MusicFree
BASS_MusicLoad
BASS_Pause
BASS_PluginFree
BASS_PluginGetInfo
BASS_PluginLoad
BASS_RecordFree
BASS_RecordGetDevice
BASS_RecordGetDeviceInfo
BASS_RecordGetInfo
BASS_RecordGetInput
BASS_RecordGetInputName
BASS_RecordInit
BASS_RecordSetDevice
BASS_RecordSetInput
BASS_RecordStart
BASS_SampleCreate
BASS_SampleFree
BASS_SampleGetChannel
BASS_SampleGetChannels
BASS_SampleGetData
BASS_SampleGetInfo
BASS_SampleLoad
BASS_SampleSetData
BASS_SampleSetInfo
BASS_SampleStop
BASS_Set3DFactors
BASS_Set3DPosition
BASS_SetConfig
BASS_SetConfigPtr
BASS_SetDevice
BASS_SetEAXParameters
BASS_SetVolume
BASS_Start
BASS_Stop
BASS_StreamCreate
BASS_StreamCreateFile
BASS_StreamCreateFileUser
BASS_StreamCreateURL
BASS_StreamFree
BASS_StreamGetFilePosition
BASS_StreamPutData
BASS_StreamPutFileData
BASS_Update
_

Sections

Size: 93KB - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 568B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
USA Role Play/filterscripts/AntiCheat.pwn
USA Role Play/filterscripts/CarS.amx
USA Role Play/filterscripts/CarS.pwn
USA Role Play/filterscripts/Game.pwn
.vbs
USA Role Play/filterscripts/Int.amx
USA Role Play/filterscripts/Int.pwn
USA Role Play/filterscripts/NewDialog.amx
USA Role Play/filterscripts/NewDialog.pwn
USA Role Play/filterscripts/Object.amx
USA Role Play/filterscripts/ProgressCreator.amx
USA Role Play/filterscripts/ProgressCreator.pwn
USA Role Play/filterscripts/TD.amx
USA Role Play/filterscripts/TD.pwn
USA Role Play/filterscripts/TextDrawEditor1.0.amx
USA Role Play/filterscripts/The text on the object.pwn
.vbs
USA Role Play/filterscripts/The.amx
USA Role Play/filterscripts/all_animations.amx
USA Role Play/filterscripts/cam.amx
USA Role Play/filterscripts/cam.pwn
USA Role Play/filterscripts/cameditor.amx
USA Role Play/filterscripts/ime.amx
USA Role Play/filterscripts/ime.pwn
.vbs
USA Role Play/filterscripts/new.amx
USA Role Play/filterscripts/only0.3c.amx
USA Role Play/filterscripts/rad.amx
USA Role Play/filterscripts/rad.pwn
USA Role Play/filterscripts/ss.amx
USA Role Play/filterscripts/ss.pwn
USA Role Play/filterscripts/text.amx
USA Role Play/gamemodes/usarp.amx
USA Role Play/gamemodes/usarp.pwn
USA Role Play/include/AirHawk.inc
USA Role Play/include/gl_common.inc
USA Role Play/include/gl_messages.inc
USA Role Play/include/gl_spawns.inc
USA Role Play/include/mxINI.inc
USA Role Play/include/vehicleutil.inc
USA Role Play/libbass.so
.elf linux x86
USA Role Play/libmysql.dll
.dll windows:4 windows x86 arch:x86

d6c36e09320ccda529d16a681f552ec7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\mysql-5.1.69-winbuild\mysql-community-nt-5.1.69-build\libmysql\RelWithDebInfo\libmysql.pdb

Imports

kernel32

GetLastError
UnmapViewOfFile
WaitForSingleObject
SetEvent
MapViewOfFile
OpenFileMappingA
OpenEventA
GetSystemDirectoryA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetWindowsDirectoryA
Sleep
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
GetTempFileNameA
GetTempPathA
GetFileAttributesExA
GetLogicalDrives
SetEndOfFile
SetFilePointer
DeleteFileA
MoveFileA
CreateFileA
QueryPerformanceCounter
GetSystemTimeAsFileTime
QueryPerformanceFrequency
GetFileAttributesA
GetFullPathNameA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateEventA
ResetEvent
WaitForMultipleObjects
TryEnterCriticalSection
InterlockedCompareExchange
SetThreadPriority
GetOverlappedResult
CancelIo
ReadFile
WriteFile
DisconnectNamedPipe
FindClose
FindNextFileA
FindFirstFileA
GetCurrentThreadId
WaitNamedPipeA
SetNamedPipeHandleState
CloseHandle
GetLocaleInfoA
EnterCriticalSection
GetTickCount
LeaveCriticalSection
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
GetLocaleInfoW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetEnvironmentVariableW
RaiseException
HeapSize
HeapCreate
HeapDestroy
ExitProcess
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
SetConsoleCtrlHandler
SetStdHandle
GetFileType
DuplicateHandle
GetCurrentProcess
WideCharToMultiByte
GetTimeZoneInformation
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetDriveTypeA
HeapAlloc
HeapFree
HeapReAlloc
ExitThread
ResumeThread
CreateThread
FlushFileBuffers
GetCommandLineA
GetVersionExA
GetProcessHeap
FatalAppExitA
SetLastError
InterlockedDecrement
GetCurrentThread
GetStdHandle
FreeLibrary
InterlockedExchange
LoadLibraryA
SetHandleCount
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
MultiByteToWideChar
LCMapStringW
RtlUnwind
GetConsoleCP
GetCurrentDirectoryA
SetCurrentDirectoryA
VirtualFree
VirtualAlloc

advapi32

CryptReleaseContext
CryptAcquireContextA
RegOpenKeyExA
RegEnumValueA
RegCloseKey
CryptGenRandom

wsock32

WSASetLastError
closesocket
shutdown
setsockopt
send
recv
inet_ntoa
select
__WSAFDIsSet
gethostbyname
inet_addr
WSAStartup
WSACleanup
getservbyname
ntohs
socket
WSAGetLastError
htons
ioctlsocket
connect
getpeername

ws2_32

WSAIoctl

Exports

Exports

_dig_vec_lower
_dig_vec_upper
bmove_upp
client_errors
delete_dynamic
free_defaults
get_defaults_options
getopt_compare_strings
getopt_ull_limit_value
handle_options
init_dynamic_array
insert_dynamic
int2str
is_prefix
list_add
list_delete
load_defaults
modify_defaults_file
my_end
my_getopt_print_errors
my_init
my_malloc
my_memdup
my_no_flags_free
my_path
my_print_help
my_print_variables
my_realloc
my_strdup
myodbc_remove_escape
mysql_affected_rows
mysql_autocommit
mysql_change_user
mysql_character_set_name
mysql_close
mysql_commit
mysql_data_seek
mysql_debug
mysql_disable_reads_from_master
mysql_disable_rpl_parse
mysql_dump_debug_info
mysql_embedded
mysql_enable_reads_from_master
mysql_enable_rpl_parse
mysql_eof
mysql_errno
mysql_error
mysql_escape_string
mysql_fetch_field
mysql_fetch_field_direct
mysql_fetch_fields
mysql_fetch_lengths
mysql_fetch_row
mysql_field_count
mysql_field_seek
mysql_field_tell
mysql_free_result
mysql_get_character_set_info
mysql_get_client_info
mysql_get_client_version
mysql_get_host_info
mysql_get_parameters
mysql_get_proto_info
mysql_get_server_info
mysql_get_server_version
mysql_get_ssl_cipher
mysql_hex_string
mysql_info
mysql_init
mysql_insert_id
mysql_kill
mysql_list_dbs
mysql_list_fields
mysql_list_processes
mysql_list_tables
mysql_master_query
mysql_more_results
mysql_next_result
mysql_num_fields
mysql_num_rows
mysql_options
mysql_ping
mysql_query
mysql_read_query_result
mysql_real_connect
mysql_real_escape_string
mysql_real_query
mysql_refresh
mysql_rollback
mysql_row_seek
mysql_row_tell
mysql_rpl_parse_enabled
mysql_rpl_probe
mysql_rpl_query_type
mysql_select_db
mysql_send_query
mysql_server_end
mysql_server_init
mysql_set_character_set
mysql_set_local_infile_default
mysql_set_local_infile_handler
mysql_set_server_option
mysql_shutdown
mysql_slave_query
mysql_sqlstate
mysql_ssl_set
mysql_stat
mysql_stmt_affected_rows
mysql_stmt_attr_get
mysql_stmt_attr_set
mysql_stmt_bind_param
mysql_stmt_bind_result
mysql_stmt_close
mysql_stmt_data_seek
mysql_stmt_errno
mysql_stmt_error
mysql_stmt_execute
mysql_stmt_fetch
mysql_stmt_fetch_column
mysql_stmt_field_count
mysql_stmt_free_result
mysql_stmt_init
mysql_stmt_insert_id
mysql_stmt_num_rows
mysql_stmt_param_count
mysql_stmt_param_metadata
mysql_stmt_prepare
mysql_stmt_reset
mysql_stmt_result_metadata
mysql_stmt_row_seek
mysql_stmt_row_tell
mysql_stmt_send_long_data
mysql_stmt_sqlstate
mysql_stmt_store_result
mysql_store_result
mysql_thread_end
mysql_thread_id
mysql_thread_init
mysql_thread_safe
mysql_use_result
mysql_warning_count
set_dynamic
strcend
strcont
strdup_root
strfill
strinstr
strmake
strmov
strxmov

Sections

.text
Size: 768KB - Virtual size: 766KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
USA Role Play/mysql_log.txt
USA Role Play/pawno/SciLexer.dll
.dll windows:4 windows x86 arch:x86

1b4fafc7b956a133984f5fb455674163

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

imm32

ImmSetCompositionFontA
ImmReleaseContext
ImmGetContext
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmNotifyIME

kernel32

LoadLibraryA
FlushFileBuffers
CloseHandle
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
GetStringTypeA
HeapReAlloc
VirtualAlloc
GetCurrentProcessId
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
ExitProcess
HeapSize
Sleep
LCMapStringW
LCMapStringA
GetModuleFileNameA
GetStdHandle
WriteFile
GetOEMCP
RaiseException
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetLastError
IsDebuggerPresent
GetCurrentProcess
TerminateProcess
GetProcessHeap
HeapAlloc
HeapFree
GetCommandLineA
GetCurrentThreadId
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
RtlUnwind
LeaveCriticalSection
EnterCriticalSection
MulDiv
GetACP
GetTickCount
GlobalFree
GlobalSize
GlobalUnlock
GlobalAlloc
GlobalLock
IsValidCodePage
GetCPInfo
WideCharToMultiByte
GetLocaleInfoA
GetVersionExA
InitializeCriticalSection
GetProcAddress
FreeLibrary
MultiByteToWideChar
DeleteCriticalSection
IsDBCSLeadByteEx
QueryPerformanceCounter
GetModuleHandleA

user32

GetWindowLongA
SetWindowLongA
FillRect
DestroyWindow
MapWindowPoints
CreateWindowExA
DrawFocusRect
DrawTextA
DrawTextW
GetWindowRect
SetWindowPos
GetSystemMetrics
GetClientRect
ShowWindow
InvalidateRect
SendMessageA
SetCursor
IsChild
ClientToScreen
GetMessageTime
SetFocus
MsgWaitForMultipleObjects
PostMessageA
GetUpdateRgn
SetCaretPos
RegisterClipboardFormatA
HideCaret
DestroyCaret
CreateCaret
ShowCaret
ScreenToClient
EmptyClipboard
SystemParametersInfoA
AppendMenuA
OpenClipboard
GetClipboardData
CloseClipboard
SetClipboardData
IsClipboardFormatAvailable
GetDlgCtrlID
GetScrollInfo
SetScrollInfo
ScrollWindow
UpdateWindow
SetTimer
KillTimer
GetKeyboardLayout
CreatePopupMenu
RegisterClassExA
ReleaseCapture
GetDC
ReleaseDC
FrameRect
GetKeyState
GetDoubleClickTime
TrackPopupMenu
DestroyMenu
UnregisterClassA
CallWindowProcA
GetParent
BeginPaint
EndPaint
DefWindowProcA
GetCursorPos
SetCapture
AdjustWindowRectEx
GetSysColor
InflateRect
LoadCursorA

gdi32

SelectObject
DeleteObject
DeleteDC
SelectPalette
SetTextAlign
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
TranslateCharsetInfo
CreateRectRgn
CombineRgn
GetTextExtentExPointW
GetTextExtentExPointA
SetBkMode
ExtTextOutW
GetTextExtentPoint32W
CreateDIBSection
GetStockObject
SetTextColor
GetObjectA
CreateFontIndirectA
IntersectClipRect
RealizePalette
GetTextMetricsA
GetTextExtentPoint32A
BitBlt
Ellipse
RoundRect
CreatePatternBrush
SetBkColor
ExtTextOutA
Rectangle
Polygon
LineTo
MoveToEx
GetDeviceCaps
GetNearestColor
CreateSolidBrush
CreatePen
CreatePalette

ole32

RevokeDragDrop
OleUninitialize
DoDragDrop
OleInitialize
RegisterDragDrop

Exports

Exports

_Scintilla_DirectFunction@16

Sections

.text
Size: 339KB - Virtual size: 339KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
USA Role Play/pawno/include/1423_ctype.inc
USA Role Play/pawno/include/AirHawk.inc
USA Role Play/pawno/include/AntiCheat_Pranya.inc
USA Role Play/pawno/include/DJson.inc
USA Role Play/pawno/include/Dini.inc
USA Role Play/pawno/include/FCNPC.inc
USA Role Play/pawno/include/Key_Press.inc
USA Role Play/pawno/include/MidoStream.inc
USA Role Play/pawno/include/SRO.inc
USA Role Play/pawno/include/SpikeStrip.inc
.vbs
USA Role Play/pawno/include/Y_MD5.inc
USA Role Play/pawno/include/Y_Objects.inc
USA Role Play/pawno/include/a_actor.inc
USA Role Play/pawno/include/a_deamx.inc
USA Role Play/pawno/include/a_http.inc
USA Role Play/pawno/include/a_irc.inc
USA Role Play/pawno/include/a_mail.inc
USA Role Play/pawno/include/a_mysql.inc
USA Role Play/pawno/include/a_npc.inc
USA Role Play/pawno/include/a_objects.inc
.vbs
USA Role Play/pawno/include/a_players.inc
USA Role Play/pawno/include/a_samp.inc
USA Role Play/pawno/include/a_sampdb.inc
USA Role Play/pawno/include/a_sampmysql.inc
USA Role Play/pawno/include/a_vehicles.inc
USA Role Play/pawno/include/acuf.inc
USA Role Play/pawno/include/bfx_objects.inc
USA Role Play/pawno/include/card.inc
USA Role Play/pawno/include/core.inc
USA Role Play/pawno/include/crashdetect.inc
USA Role Play/pawno/include/datagram.inc
USA Role Play/pawno/include/dprop.inc
USA Role Play/pawno/include/dutils.inc
USA Role Play/pawno/include/file.inc
USA Role Play/pawno/include/float.inc
USA Role Play/pawno/include/foreach.inc
USA Role Play/pawno/include/gl_common.inc
USA Role Play/pawno/include/gl_spawns.inc
USA Role Play/pawno/include/gtodudb.inc
USA Role Play/pawno/include/lethaldudb2.inc
USA Role Play/pawno/include/mailer.inc
USA Role Play/pawno/include/manticheat.inc
USA Role Play/pawno/include/md5.inc
USA Role Play/pawno/include/morphinc.inc
USA Role Play/pawno/include/mxINI.inc
USA Role Play/pawno/include/mxdate.inc
USA Role Play/pawno/include/profiler.inc
USA Role Play/pawno/include/sscanf2.inc
USA Role Play/pawno/include/streamer.inc
USA Role Play/pawno/include/string.inc
USA Role Play/pawno/include/time.inc
USA Role Play/pawno/include/utils.inc
USA Role Play/pawno/include/zcmd.inc
USA Role Play/pawno/libpawnc.dll
.dll windows:1 windows x86 arch:x86

5d97e0c7cc1b418f5235da489d10a039

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CharUpperA
IsWindow
MessageBoxA
PostMessageA
RegisterWindowMessageA

kernel32

CloseHandle
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
ExitThread
FlushFileBuffers
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetCurrentDirectoryA
GetCurrentProcessId
GetCurrentThreadId
GetCurrentThread
GetEnvironmentStrings
GetFileAttributesA
GetFileType
GetFullPathNameA
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetVersion
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
OutputDebugStringA
ReadConsoleInputA
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetConsoleMode
SetCurrentDirectoryA
SetEnvironmentVariableA
SetEnvironmentVariableW
SetEvent
SetFilePointer
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteFile

Exports

Exports

Compile
_Compile@16
pc_addconstant
pc_addtag
pc_compile
pc_enablewarning

Sections

AUTO
Size: 212KB - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DGROUP
Size: 36KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 10KB - Virtual size:

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
USA Role Play/pawno/new.pwn
USA Role Play/pawno/pawn.cfg
USA Role Play/pawno/pawn.ico
USA Role Play/pawno/pawnc.dll
.dll windows:4 windows x86 arch:x86

4eff41a005fb149247033c4b1aa53f8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentProcessId

user32

PostMessageA
IsWindow
RegisterWindowMessageA

msvcr80

memset
isupper
isalpha
memmove
fputs
fprintf
_chdrive
toupper
atoi
strtok
fclose
fread
ftell
fseek
fopen
memcpy
realloc
__iob_func
_tempnam
remove
_setjmp3
_CIpow
tolower
vfprintf
strncmp
fgetc
sscanf
fwrite
vprintf
fflush
fsetpos
fgets
fgetpos
feof
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
strtol
sprintf
isdigit
malloc
free
longjmp
strrchr
strchr
_access
_chdir
_stricmp
isspace
_strdup

Exports

Exports

Compile
pc_addconstant
pc_addtag
pc_compile
pc_enablewarning

Sections

.text
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
USA Role Play/pawno/pawncc.exe
.exe windows:4 windows x86 arch:x86

f9d74702f53af8e6e0298f886652b43b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

pawnc

pc_compile

msvcr80

__p__commode
__p__fmode
_encode_pointer
__set_app_type
_unlock
__dllonexit
_adjust_fdiv
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__initenv
exit
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_lock

kernel32

IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
SetUnhandledExceptionFilter

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
USA Role Play/pawno/pawno.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 540KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 287KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
USA Role Play/pawno/settings.ini
USA Role Play/plugins/SystemControl.dll
.dll windows:5 windows x86 arch:x86

2de6fc7f4124ef93a4104ecf0a7b05f2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Documents and Settings\Admin\Мои документы\newpawn\SA-MP Exchanger\plugin\SysControl\SystemControl\Release\SystemControl.pdb

Imports

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
DecodePointer
EncodePointer
WinExec
FindNextFileA
FindClose
FindFirstFileA
Sleep
SetUnhandledExceptionFilter
GetFullPathNameA
IsProcessorFeaturePresent

user32

GetCursorPos

msvcr100

?_type_info_dtor_internal_method@type_info@@QAEXXZ
_amsg_exit
_unlock
?terminate@@YAXXZ
_lock
_onexit
_except_handler4_common
_crt_debugger_hook
__dllonexit
__CppXcptFilter
_initterm_e
_initterm
_encoded_null
_malloc_crt
??2@YAPAXI@Z
strncpy_s
_set_errno
??3@YAXPAX@Z
_errno
system
strchr
malloc
free
??_U@YAPAXI@Z
memmove
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
sprintf
__CxxFrameHandler3
_CxxThrowException
memcpy
__clean_type_info_names_internal

msvcp100

?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z

bass

BASS_StreamFree
BASS_Free
BASS_StreamCreateURL
BASS_Init
BASS_ChannelGetLength
BASS_ChannelBytes2Seconds

Exports

Exports

AmxLoad
AmxUnload
Load
Supports
Unload

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
USA Role Play/plugins/SystemControl.so
.elf linux x86
USA Role Play/plugins/crashdetect.dll
.dll windows:5 windows x86 arch:x86

711cdbc129c40f3e1c9ddf653aa6d8dd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Z:\plugins\crashdetect\build\windows\vs10\RelWithDebInfo\crashdetect.pdb

Imports

kernel32

GetCurrentDirectoryA
FindClose
FindNextFileA
FindFirstFileA
SetUnhandledExceptionFilter
OpenThread
CompareFileTime
GetLastError
GetModuleFileNameA
VirtualQuery
GetThreadTimes
CloseHandle
Thread32Next
GetProcessId
GetCurrentProcess
Thread32First
CreateToolhelp32Snapshot
ResumeThread
GetThreadContext
SuspendThread
SetConsoleCtrlHandler
HeapFree
GetCurrentThread
HeapAlloc
GetProcessHeap
RtlCaptureContext
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
VirtualProtect
GetSystemTimeAsFileTime

dbghelp

SymInitialize
SymGetOptions
SymSetOptions
SymGetModuleInfo64
SymFromAddr
StackWalk64
SymCleanup

msvcp100

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Incref@facet@locale@std@@QAEXXZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Id_cnt@id@locale@std@@0HA
?id@?$codecvt@DDH@std@@2V0locale@2@A
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_BADOFF@std@@3_JB
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
??_7ios_base@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?id@?$ctype@D@std@@2V0locale@2@A
??1_Container_base12@std@@QAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
?_Xlength_error@std@@YAXPBD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Xout_of_range@std@@YAXPBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ

msvcr100

memmove
??0exception@std@@QAE@ABV01@@Z
fclose
fopen
__CxxFrameHandler3
free
malloc
memset
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
fgetc
fputc
ungetc
_lock_file
_unlock_file
fflush
setvbuf
memcpy_s
fwrite
fgetpos
_fseeki64
fsetpos
memchr
getenv
_stat64i32
vsprintf_s
fread
fseek
rewind
strncmp
isdigit
calloc
_unlock
__dllonexit
_lock
_onexit
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
__clean_type_info_names_internal
_CxxThrowException
??2@YAPAXI@Z
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
memcpy

Exports

Exports

AmxLoad
AmxUnload
Load
Supports

Sections

.text
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
USA Role Play/plugins/crashdetect.pdb
USA Role Play/plugins/mysql.dll
.dll windows:5 windows x86 arch:x86

3604b3dec611e4a2defb312905eb8d32

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\maddin\Desktop\mysql-plugin\bin\mysql.pdb

Imports

libmysql

mysql_server_end
mysql_server_init
mysql_stat
mysql_character_set_name
mysql_num_rows
mysql_warning_count
mysql_affected_rows
mysql_num_fields
mysql_fetch_field
mysql_fetch_row
mysql_real_query
mysql_field_count
mysql_insert_id
mysql_thread_init
mysql_init
mysql_errno
mysql_options
mysql_free_result
mysql_store_result
mysql_real_escape_string
mysql_real_connect
mysql_thread_end
mysql_set_character_set
mysql_close
mysql_error

kernel32

OpenEventA
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
QueryPerformanceFrequency
QueryPerformanceCounter
FormatMessageA
LocalFree
SystemTimeToFileTime
CreateWaitableTimerA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
ResumeThread
SetWaitableTimer
ResetEvent
GetCurrentThreadId
GetCurrentProcessId
Sleep
ReleaseSemaphore
WaitForMultipleObjects
GetTickCount
GetProcessHeap
DuplicateHandle
HeapAlloc
CreateEventA
CloseHandle
GetCurrentProcess
HeapFree
CreateSemaphoreA
WaitForSingleObject
SetEvent
GetSystemTimeAsFileTime
DisableThreadLibraryCalls

msvcp110

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Add_vtordisp1@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
_Nan
_Inf
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?uncaught_exception@std@@YA_NXZ
?_BADOFF@std@@3_JB
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Xlength_error@std@@YAXPBD@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z

msvcr110

_time64
ceil
modf
calloc
toupper
_beginthreadex
_CxxThrowException
__CxxFrameHandler3
memcpy
strerror
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
?terminate@@YAXXZ
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_except_handler4_common
__clean_type_info_names_internal
fclose
fseek
_localtime64
ftell
strftime
fprintf
fopen
fflush
fputs
malloc
free
_gmtime64
??0exception@std@@QAE@ABQBDH@Z
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
vsprintf
sprintf
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
memchr
memmove
??8type_info@@QBE_NABV0@@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
_CIfmod
_CIlog10
floor
memset

Exports

Exports

AmxLoad
AmxUnload
Load
ProcessTick
Supports
Unload

Sections

.text
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
USA Role Play/plugins/mysql.pdb
USA Role Play/plugins/profiler.dll
.dll windows:5 windows x86 arch:x86

691efec29f47386ad96cb098917bf25d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\projects\samp-plugin-profiler\src\RelWithDebInfo\profiler.pdb

Imports

kernel32

FindClose
FindNextFileA
FindFirstFileA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
VirtualProtect
GetLastError
FormatMessageA
LocalFree
QueryPerformanceFrequency
QueryPerformanceCounter
IsProcessorFeaturePresent

msvcp100

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_BADOFF@std@@3_JB
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
??_7ios_base@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?id@?$ctype@D@std@@2V0locale@2@A
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Incref@facet@locale@std@@QAEXXZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??1_Lockit@std@@QAE@XZ
?_Id_cnt@id@locale@std@@0HA
?id@?$codecvt@DDH@std@@2V0locale@2@A
??0_Lockit@std@@QAE@H@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Xlength_error@std@@YAXPBD@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z

msvcr100

fwrite
fgetpos
_fseeki64
fsetpos
fclose
memchr
_stat64i32
vsprintf_s
tolower
getenv
_purecall
fopen
_ctime64
_time64
calloc
free
malloc
fread
rewind
fseek
_unlock
__dllonexit
_lock
_onexit
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
__clean_type_info_names_internal
memcpy_s
setvbuf
fflush
_unlock_file
ungetc
fputc
fgetc
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
memset
__CxxFrameHandler3
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
??2@YAPAXI@Z
memcpy
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
_lock_file
memmove

Exports

Exports

AmxLoad
AmxUnload
Load
Supports

Sections

.text
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
USA Role Play/plugins/sscanf.dll
.dll windows:5 windows x86 arch:x86

303f44b5567e256b75461f4196f84ea3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Program Files\Games\San Andreas\SA-MP\sscanf\Release\sscanf.pdb

Imports

msvcr100

_onexit
_lock
_crt_debugger_hook
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
tolower
??2@YAPAXI@Z
strtod
strstr
_except_handler4_common
sprintf
memset

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
IsDebuggerPresent

Exports

Exports

AmxLoad
AmxUnload
Load
Supports
Unload

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
USA Role Play/plugins/sscanf.so
.elf linux x86
USA Role Play/plugins/streamer.dll
.dll windows:6 windows x86 arch:x86

e8b4db70ad20b10f8f7e8f12fd8b3e7d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
FormatMessageA
VirtualProtect
QueryPerformanceFrequency
GetProcAddress
QueryPerformanceCounter
VirtualQuery
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
GetCurrentProcess
TerminateProcess
CloseHandle

msvcp140

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_BADOFF@std@@3_JB
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ

vcruntime140

__CxxFrameHandler3
memcpy
__std_type_info_destroy_list
_except_handler4_common
_CxxThrowException
memset
__telemetry_main_return_trigger
__telemetry_main_invoke_trigger
__vcrt_InitializeCriticalSectionEx
memchr
__std_exception_destroy
__std_terminate
_purecall
memmove
__std_exception_copy

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_cexit
_errno
_initterm
_initterm_e
_execute_onexit_table
strerror
_crt_atexit

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
__acrt_iob_func
__stdio_common_vsprintf_s
__stdio_common_vfprintf

api-ms-win-crt-heap-l1-1-0

_aligned_malloc
realloc
free
_callnewh
malloc
_aligned_free

api-ms-win-crt-utility-l1-1-0

bsearch

api-ms-win-crt-convert-l1-1-0

strtol
atoi

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-math-l1-1-0

_libm_sse2_atan_precise
_libm_sse2_cos_precise
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise
ceil
floor
_except1
_CIatan2

Exports

Exports

AmxLoad
AmxUnload
Load
OnPlayerConnect
OnPlayerDisconnect
OnPlayerEditObject
OnPlayerEnterCheckpoint
OnPlayerEnterRaceCheckpoint
OnPlayerLeaveCheckpoint
OnPlayerLeaveRaceCheckpoint
OnPlayerPickUpPickup
OnPlayerRequestClass
OnPlayerSelectObject
OnPlayerSpawn
OnPlayerWeaponShot
ProcessTick
Supports
Unload

Sections

.text
Size: 221KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
USA Role Play/plugins/streamer.so
.elf linux x86
USA Role Play/samp-npc.exe
.exe windows:4 windows x86 arch:x86

e3571dd5a9e9b81772c8cabcd924caff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharUpperA
CharLowerA

kernel32

CreateThread
QueryPerformanceCounter
QueryPerformanceFrequency
CloseHandle
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetTickCount
GetProcAddress
LoadLibraryA
FreeLibrary
SetConsoleMode
GetStdHandle
SetConsoleCursorPosition
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
SetConsoleWindowInfo
SetConsoleScreenBufferSize
AllocConsole
GetEnvironmentVariableA
SetLocalTime
GetLocalTime
OutputDebugStringA
GetConsoleMode
ReadConsoleInputA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetSystemInfo
VirtualProtect
SetEndOfFile
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetOEMCP
GetACP
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetCPInfo
LCMapStringW
MultiByteToWideChar
LCMapStringA
VirtualQuery
HeapAlloc
HeapFree
HeapReAlloc
RtlUnwind
GetLastError
DeleteFileA
ExitThread
GetCurrentThreadId
ExitProcess
GetModuleHandleA
TerminateProcess
GetCurrentProcess
RaiseException
GetSystemTimeAsFileTime
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
ReadFile
SetHandleCount
GetFileType
GetStartupInfoA
SetFilePointer
WriteFile
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlushFileBuffers
GetCurrentProcessId
GetFileAttributesA
CreateFileA
WideCharToMultiByte
GetTimeZoneInformation
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
InterlockedExchange

wsock32

getsockname
gethostname
sendto
WSAGetLastError
recvfrom
gethostbyname
socket
setsockopt
inet_ntoa
bind
htons
WSACleanup
WSAStartup
closesocket
ioctlsocket
inet_addr
htonl
ntohs

winmm

timeGetTime
timeBeginPeriod

Sections

.text
Size: 212KB - Virtual size: 209KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
USA Role Play/samp-server.exe
.exe windows:4 windows x86 arch:x86

0eed331a13471baad6960f2d6a40f2de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

kernel32

GetTimeZoneInformation
SetConsoleMode
GetStdHandle
SetConsoleCursorPosition
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
SetConsoleWindowInfo
SetConsoleScreenBufferSize
AllocConsole
GetEnvironmentVariableA
SetLocalTime
GetLocalTime
Sleep
InitializeCriticalSection
InterlockedCompareExchange
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
AreFileApisANSI
CloseHandle
ReadFile
GetLastError
SetFilePointer
WriteFile
SetEndOfFile
FlushFileBuffers
GetFileSize
UnlockFile
LockFile
LockFileEx
UnlockFileEx
GetFileAttributesA
DeleteFileA
GetFileAttributesW
DeleteFileW
GetFileAttributesExW
LoadLibraryA
LoadLibraryW
GetProcAddress
FreeLibrary
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTime
GetSystemTimeAsFileTime
UnmapViewOfFile
GetTempPathA
GetTempPathW
LocalFree
FormatMessageA
FormatMessageW
GetFullPathNameA
GetFullPathNameW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
CreateFileA
CreateFileW
MapViewOfFile
CreateFileMappingA
QueryPerformanceFrequency
Module32Next
Module32First
CreateToolhelp32Snapshot
CreateThread
SetEvent
ReadConsoleA
WaitForSingleObject
TerminateThread
SetUnhandledExceptionFilter
CreateEventA
SetConsoleCtrlHandler
SetEnvironmentVariableA
GetCurrentDirectoryA
GetConsoleMode
ReadConsoleInputA
CompareStringW
CompareStringA
IsBadCodePtr
IsBadReadPtr
TlsGetValue
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetLocaleInfoA
GetCPInfo
GetStringTypeW
GetStringTypeA
InterlockedExchange
SetStdHandle
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
VirtualQuery
GetSystemInfo
VirtualProtect
UnhandledExceptionFilter
HeapAlloc
HeapFree
HeapReAlloc
RtlUnwind
ExitThread
GetCurrentThreadId
RaiseException
ExitProcess
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetTimeFormatA
GetDateFormatA
MoveFileA
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
TlsAlloc
SetLastError
TlsFree
TlsSetValue
HeapSize

user32

CharToOemA
CharUpperA
CharLowerA

wsock32

recv
getsockname
gethostname
WSAGetLastError
inet_ntoa
connect
bind
ntohs
inet_addr
htons
htonl
sendto
closesocket
WSAStartup
socket
setsockopt
ioctlsocket
gethostbyname
send
recvfrom
WSACleanup

winmm

timeGetTime
timeBeginPeriod

Sections

.text
Size: 684KB - Virtual size: 681KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 333KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
USA Role Play/scriptfiles/CamEdit_autosalon.txt
USA Role Play/scriptfiles/CamEdit_hydra.txt
USA Role Play/scriptfiles/CamEdit_kapot.txt
USA Role Play/scriptfiles/CamEdit_kolesa.txt
USA Role Play/scriptfiles/CamEdit_krisha.txt
USA Role Play/scriptfiles/CamEdit_nitro.txt
USA Role Play/scriptfiles/CamEdit_obvesi.txt
USA Role Play/scriptfiles/CamEdit_peredBamper.txt
USA Role Play/scriptfiles/CamEdit_spoiler.txt
USA Role Play/scriptfiles/CamEdit_stereo.txt
USA Role Play/scriptfiles/CamEdit_zadokBamper.txt
USA Role Play/server.cfg
USA Role Play/server_log.txt
USA Role Play/source/GunFactory.pwn
USA Role Play/source/Progress.inc
USA Role Play/source/T_define.inc
USA Role Play/source/T_forward.inc
USA Role Play/source/clearAutoTable.txt
USA Role Play/source/craftmenu.pwn
USA Role Play/source/for_tuning.inc
USA Role Play/source/iconbox.pwn
USA Role Play/source/objects.inc
USA Role Play/source/removeobjects.inc
USA Role Play/source/server.pwn
USA Role Play/База данных MySQL/test (чистая БД).sql
USA Role Play/База данных MySQL/test.sql
USA Role Play/Моды серверов, скрипты, маппинг для SAMP.URL

Sharing

General

Malware Config

Signatures

Files

5df40cb9994dcacb42f25de3fe7d92db

Headers

File Characteristics

Imports

wsock32

kernel32

Sections

.text Size: 24KB - Virtual size: 22KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 7KB

Headers

File Characteristics

Exports

Exports

Sections

Size: 93KB - Virtual size: 376KB

.rsrc Size: 568B - Virtual size: 4KB

Size: - Virtual size: 8KB

Size: 4KB - Virtual size: 3KB

d6c36e09320ccda529d16a681f552ec7

Headers

File Characteristics

PDB Paths

Imports

kernel32

advapi32

wsock32

ws2_32

Exports

Exports

Sections

.text Size: 768KB - Virtual size: 766KB

.rdata Size: 124KB - Virtual size: 123KB

.data Size: 1.3MB - Virtual size: 1.3MB

.idata Size: 8KB - Virtual size: 5KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 32KB - Virtual size: 31KB

1b4fafc7b956a133984f5fb455674163

Headers

File Characteristics

Imports

imm32

kernel32

user32

gdi32

ole32

Exports

Exports

Sections

.text Size: 339KB - Virtual size: 339KB

.rdata Size: 32KB - Virtual size: 32KB

.data Size: 7KB - Virtual size: 17KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 15KB - Virtual size: 15KB

5d97e0c7cc1b418f5235da489d10a039

Headers

File Characteristics

Imports

user32

kernel32

Exports

Exports

Sections

AUTO Size: 212KB - Virtual size:

.idata Size: 2KB - Virtual size:

DGROUP Size: 36KB - Virtual size:

.bss Size: 10KB - Virtual size:

.edata Size: 512B - Virtual size:

.reloc Size: 13KB - Virtual size:

.rsrc Size: 9KB - Virtual size:

4eff41a005fb149247033c4b1aa53f8e

Headers

File Characteristics

Imports

kernel32

.text
Size: 24KB - Virtual size: 22KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 568B - Virtual size: 4KB

.text
Size: 768KB - Virtual size: 766KB

.rdata
Size: 124KB - Virtual size: 123KB

.data
Size: 1.3MB - Virtual size: 1.3MB

.idata
Size: 8KB - Virtual size: 5KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 32KB - Virtual size: 31KB

.text
Size: 339KB - Virtual size: 339KB

.rdata
Size: 32KB - Virtual size: 32KB

.data
Size: 7KB - Virtual size: 17KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 15KB - Virtual size: 15KB

AUTO
Size: 212KB - Virtual size:

.idata
Size: 2KB - Virtual size:

DGROUP
Size: 36KB - Virtual size:

.bss
Size: 10KB - Virtual size:

.edata
Size: 512B - Virtual size:

.reloc
Size: 13KB - Virtual size:

.rsrc
Size: 9KB - Virtual size:

.text
Size: 108KB - Virtual size: 106KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 12KB - Virtual size: 9KB

.reloc
Size: 12KB - Virtual size: 8KB

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 900B

.rsrc
Size: 10KB - Virtual size: 9KB

UPX0
Size: - Virtual size: 540KB

UPX1
Size: 287KB - Virtual size: 288KB

.rsrc
Size: 9KB - Virtual size: 12KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 1024B - Virtual size: 1024B

.text
Size: 256KB - Virtual size: 256KB

.rdata
Size: 28KB - Virtual size: 28KB

.data
Size: 2KB - Virtual size: 2KB

.idata
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 8KB