C:\Users\Lenovo\Downloads\FORGOTEN\Wox Binary 01.09.24\BinarySellbun\Client\metin2client.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f4a9bac16141ee581396b3344f5a88685569c9cd863d107234b8174d91df75ab.exe
Resource
win7-20240708-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
f4a9bac16141ee581396b3344f5a88685569c9cd863d107234b8174d91df75ab.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
f4a9bac16141ee581396b3344f5a88685569c9cd863d107234b8174d91df75ab
-
Size
4.8MB
-
MD5
f2a681d964556465f670254fb5704cd1
-
SHA1
d9c4dc84959769f38e4486db82caf8ba36445d08
-
SHA256
f4a9bac16141ee581396b3344f5a88685569c9cd863d107234b8174d91df75ab
-
SHA512
6238735681befc35dc18488980ebfc1135727e82eedd79f76cf211448f218a4d1b1ae945585da0f9562c19fec42b8f27c4674c0d66057b7d37cc7c0456adf265
-
SSDEEP
98304:o0L6bEYmirtr3bZK+Xn4rje4AjBlTISOJwm2jJjr:7L6bEjiZrLZK+hjXqwhFjr
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4a9bac16141ee581396b3344f5a88685569c9cd863d107234b8174d91df75ab
Files
-
f4a9bac16141ee581396b3344f5a88685569c9cd863d107234b8174d91df75ab.exe windows:6 windows x86 arch:x86
bf753958ce9d4ef5210ec09ba540762c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
GlobalAlloc
GetTempFileNameA
GetTempPathA
RemoveDirectoryA
CreateDirectoryA
MoveFileA
GetPrivateProfileStringA
lstrlenA
GlobalFree
CreateMutexA
ReleaseMutex
DeleteFileA
GetCurrentDirectoryA
GetTickCount
GetCurrentDirectoryW
ReadProcessMemory
GetCurrentProcessId
GetCurrentProcess
GetComputerNameA
GetWindowsDirectoryA
IsProcessorFeaturePresent
GetVolumeInformationA
GetLastError
GetModuleFileNameA
MultiByteToWideChar
SetFileAttributesA
Module32Next
WriteConsoleW
SetEndOfFile
HeapQueryInformation
HeapSize
OutputDebugStringW
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
HeapReAlloc
SetStdHandle
CreateProcessW
GetExitCodeProcess
SetConsoleCtrlHandler
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetTimeZoneInformation
DeleteFileW
EnumSystemLocalesW
Module32First
IsValidLocale
GetLocaleInfoW
CreateThreadpoolTimer
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapAlloc
HeapFree
SetFilePointerEx
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
ExitProcess
GetDriveTypeW
GetModuleHandleExW
FreeLibraryAndExitThread
ResumeThread
ExitThread
CreateThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
InterlockedFlushSList
InterlockedPushEntrySList
RaiseException
RtlUnwind
GetFileSizeEx
VerifyVersionInfoA
VerSetConditionMask
FormatMessageW
WaitForMultipleObjects
GetFileType
GetStdHandle
GetEnvironmentVariableA
WaitForSingleObjectEx
MoveFileExA
SleepEx
GetThreadTimes
GetCurrentThread
QueryPerformanceFrequency
SetLastError
WaitNamedPipeW
PeekNamedPipe
GetModuleFileNameW
GetSystemTimeAsFileTime
GetCurrentThreadId
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
TerminateProcess
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetCPInfo
CompareStringEx
LCMapStringEx
DecodePointer
EncodePointer
InitializeCriticalSectionEx
GetStringTypeW
CreateSymbolicLinkW
GetFileInformationByHandleEx
FreeLibraryWhenCallbackReturns
GetTickCount64
GetCurrentProcessorNumber
FlushProcessWriteBuffers
CreateSemaphoreExW
CreateEventExW
InitOnceExecuteOnce
WakeConditionVariable
TryAcquireSRWLockExclusive
GetNativeSystemInfo
GetExitCodeThread
LCMapStringW
SwitchToThread
CreateHardLinkW
MoveFileExW
CopyFileW
CreateDirectoryExW
GetModuleHandleW
DeviceIoControl
AreFileApisANSI
GetTempPathW
Process32Next
Process32First
CreateToolhelp32Snapshot
GetSystemInfo
OpenProcess
SetThreadPriority
Sleep
CreateEventA
WaitForSingleObject
SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CloseHandle
SetFileTime
SetFileInformationByHandle
SetFileAttributesW
GetFullPathNameW
GetFinalPathNameByHandleW
GetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesW
GetDiskFreeSpaceExW
FindNextFileW
FindFirstFileExW
FindFirstFileW
CreateFileW
CreateDirectoryW
SetCurrentDirectoryW
GetLocaleInfoEx
LocalFree
FormatMessageA
QueryPerformanceCounter
CopyFileA
CreateSemaphoreA
ReleaseSemaphore
GetLocaleInfoA
CompareStringA
lstrlenW
GlobalLock
GlobalUnlock
LoadLibraryA
GetProcAddress
FreeLibrary
GetSystemDirectoryA
GetVersionExA
GetModuleHandleA
WriteFile
SetFilePointer
ReadFile
SetUnhandledExceptionFilter
GetFileSize
CreateFileA
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
OutputDebugStringA
AllocConsole
WideCharToMultiByte
FindNextFileA
FindFirstFileA
GetUserDefaultLCID
FindClose
user32
LoadCursorA
GetMessageA
RegisterClassA
DispatchMessageA
GetKeyboardLayoutNameA
GetKeyboardLayout
OpenClipboard
CreateWindowExA
CloseClipboard
GetClipboardData
CharNextW
MonitorFromPoint
GetMonitorInfoA
ShowCursor
SetCursor
DestroyCursor
LoadImageA
SetCursorPos
ClientToScreen
ShowWindow
GetCapture
CharPrevExA
CharNextExA
SetWindowLongA
AdjustWindowRectEx
SetCapture
ReleaseCapture
ChangeDisplaySettingsA
GetSystemMetrics
IsIconic
PeekMessageA
GetDC
ReleaseDC
BeginPaint
EndPaint
InvalidateRect
GetClientRect
FillRect
SetRect
OffsetRect
LoadStringA
MessageBoxA
GetWindowLongA
UpdateWindow
DefWindowProcA
SetFocus
MoveWindow
UnregisterClassA
RegisterClassExA
DestroyWindow
IsWindow
GetKeyState
SystemParametersInfoA
LoadIconA
FindWindowA
ScreenToClient
GetCursorPos
GetAsyncKeyState
SetWindowPos
SendMessageA
PostQuitMessage
GetMenu
SetWindowTextA
TranslateMessage
GetWindowRect
gdi32
SetDIBitsToDevice
GetTextExtentPoint32A
DeleteObject
CreateSolidBrush
EnumFontFamiliesExA
GetStockObject
CreateFontIndirectA
GetCharABCWidthsFloatW
GetTextExtentPoint32W
SelectObject
SetBkColor
CreateDIBSection
SetTextColor
TextOutW
CreateCompatibleDC
DeleteDC
PatBlt
SetBkMode
TextOutA
GetPixel
StretchBlt
GetDeviceCaps
advapi32
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
CryptAcquireContextA
CryptReleaseContext
CryptGenRandom
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptDestroyKey
CryptImportKey
RegQueryValueExA
RegOpenKeyA
RegCloseKey
CryptEncrypt
RegOpenKeyExA
shell32
ShellExecuteA
SetCurrentProcessExplicitAppUserModelID
SHGetSpecialFolderPathA
ole32
CoInitializeEx
OleSetContainedObject
OleUninitialize
OleInitialize
CoGetClassObject
CoUninitialize
CoInitialize
CoCreateInstance
winmm
timeGetDevCaps
timeGetTime
timeEndPeriod
timeBeginPeriod
d3d9
Direct3DCreate9
d3dx9_43
D3DXMatrixScaling
D3DXMatrixDeterminant
D3DXMatrixLookAtRH
D3DXMatrixPerspectiveFovRH
D3DXVec3Unproject
D3DXVec3Project
D3DXMatrixTranspose
D3DXVec4Transform
D3DXMatrixRotationAxis
D3DXVec3TransformNormal
D3DXMatrixRotationX
D3DXMatrixInverse
D3DXMatrixRotationYawPitchRoll
D3DXQuaternionMultiply
D3DXQuaternionRotationAxis
D3DXMatrixOrthoRH
D3DXMatrixOrthoOffCenterRH
D3DXCreateMatrixStack
D3DXMatrixRotationQuaternion
D3DXCreateCylinder
D3DXCreateSphere
D3DXGetFVFVertexSize
D3DXGetImageInfoFromFileInMemory
D3DXLoadSurfaceFromSurface
D3DXCreateTexture
D3DXCreateTextureFromFileInMemoryEx
D3DXMatrixRotationY
D3DXMatrixMultiplyTranspose
D3DXPlaneNormalize
D3DXAssembleShader
D3DXCreateTextureFromFileInMemory
D3DXQuaternionRotationYawPitchRoll
D3DXVec3Transform
D3DXVec2Normalize
D3DXVec3Normalize
D3DXCompileShader
D3DXMatrixTranslation
D3DXMatrixMultiply
D3DXMatrixRotationZ
D3DXVec3TransformCoord
python27
Py_InitModule4
Py_BuildValue
PyModule_AddIntConstant
PyLong_AsLong
PyTuple_Size
PyTuple_GetItem
PyDict_GetItemString
PyInt_FromLong
PyLong_FromLongLong
PyList_New
PyList_Append
PyInt_AsLong
PyDict_Next
PyDict_Size
PyErr_SetString
PyExc_RuntimeError
PyString_FromString
PyArg_ParseTuple
PyTuple_New
PyTuple_SetItem
PyDict_New
PyDict_SetItem
PyModule_AddStringConstant
PyImport_ImportModule
PyString_InternFromString
PyObject_GetAttrString
PyObject_GetAttr
PyCallable_Check
PyLong_AsLongLong
PyFloat_AsDouble
PyString_AsString
PyErr_Clear
PyErr_BadArgument
PyErr_Print
PyObject_CallObject
PyNumber_Check
_Py_NoneStruct
PyDict_SetItemString
PyModule_GetDict
PyErr_Fetch
Py_SetProgramName
Py_Initialize
Py_Finalize
PyRun_StringFlags
Py_FlushLine
PyImport_GetMagicNumber
PyImport_AddModule
PyObject_AsCharBuffer
PyCode_Addr2Line
PyEval_EvalCode
Py_OptimizeFlag
PyCode_Type
PyUnicodeUCS2_DecodeUTF8
_PyLong_FromByteArray
PyFloat_FromDouble
PyComplex_FromCComplex
PyString_FromStringAndSize
PyList_SetItem
PyErr_Occurred
PyErr_NoMemory
PyEval_GetRestricted
PyCode_New
PyMarshal_ReadObjectFromString
_PyLong_New
_Py_EllipsisObject
PyExc_StopIteration
PyExc_EOFError
PyExc_ValueError
PyEval_SetTrace
imm32
ImmGetOpenStatus
ImmSetConversionStatus
ImmGetConversionStatus
ImmGetCandidateListW
ImmSetCompositionStringW
ImmGetCompositionStringW
ImmAssociateContext
ImmReleaseContext
ImmGetContext
ImmIsIME
ImmNotifyIME
ImmGetIMEFileNameA
xmllite
CreateXmlReader
shlwapi
ord12
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
devil
ilInit
ilTexImage
ilSetPixels
ilSave
ilShutDown
ilOriginFunc
ilEnable
ilCopyPixels
ilConvertImage
ilLoad
ilGetInteger
ilGenImages
ilBindImage
ilDeleteImages
granny2
_GrannyFreeFileSection@8
_GrannyFindBoneByName@12
_GrannyFreeWorldPose@4
_GrannyGetWorldPose4x4@8
_GrannyGetWorldPoseComposite4x4@8
_GrannyGetTotalTypeSize@4
_GrannyGetMeshVertexCount@4
_GrannyMeshIsRigid@4
_GrannyGetMeshIndexCount@4
_GrannyGetSourceModel@4
_GrannyFindTrackGroupForModel@12
_GrannyFreeControl@4
_GrannyFreeControlOnceUnused@4
_GrannyControlIsComplete@4
_GrannyFreeControlIfComplete@4
_GrannyGetControlLoopCount@4
_GrannySetControlLoopCount@8
_GrannyGetControlSpeed@4
_GrannySetControlSpeed@8
_GrannyGetControlLocalDuration@4
_GrannySetControlEaseIn@8
_GrannySetControlEaseInCurve@28
_GrannyNewWorldPose@4
_GrannyGetMeshBindingToBoneIndices@4
_GrannyFreeMeshBinding@4
_GrannyNewMeshBinding@12
_GrannyFreeModelInstance@4
_GrannyInstantiateModel@4
_GrannyGetWorldPoseComposite4x4Array@4
_GrannyFreeLocalPose@4
_GrannyNewLocalPose@4
_GrannyUpdateModelMatrix@20
_GrannySampleModelAnimationsAccelerated@20
_GrannyFreeCompletedModelControls@4
_GrannySetModelClock@8
_GrannyGetSourceSkeleton@4
_GrannyConvertSingleObject@20
_GrannyFindMatchingMember@16
_GrannyGetMaterialTextureByType@8
_GrannyGetFileInfo@4
_GrannyPlayControlledAnimation@12
_GrannySetControlRawLocalClock@8
_GrannyGetControlRawLocalClock@4
_GrannyReadEntireFileFromMemory@8
_GrannyFreeFile@4
_GrannySetControlEaseOut@8
_GrannySetControlEaseOutCurve@28
_GrannySetLogCallback@4
GrannyPNT332VertexType
_GrannyDeformVertices@24
_GrannyFreeMeshDeformer@4
_GrannyNewMeshDeformer@16
_GrannyCopyMeshIndices@12
_GrannyGetMeshVertices@4
_GrannyCopyMeshVertices@12
_GrannyGetMeshVertexType@4
_GrannyGetMeshTriangleGroups@4
_GrannyGetMeshTriangleGroupCount@4
_GrannySetTrackGroupLOD@16
_GrannySetTrackGroupTarget@12
_GrannyEndControlledAnimation@4
_GrannyCompleteControlAt@8
_GrannyBeginControlledAnimation@8
mss32
_AIL_update_3D_position@8
_AIL_3D_sample_volume@4
_AIL_3D_sample_status@4
_AIL_set_3D_sample_loop_count@8
_AIL_set_3D_sample_volume@8
_AIL_set_3D_sample_file@8
_AIL_end_3D_sample@4
_AIL_resume_3D_sample@4
_AIL_stop_3D_sample@4
_AIL_start_3D_sample@4
_AIL_release_3D_sample_handle@4
_AIL_allocate_3D_sample_handle@4
_AIL_sample_volume_pan@12
_AIL_sample_status@4
_AIL_set_sample_loop_count@8
_AIL_set_sample_volume_pan@12
_AIL_end_sample@4
_AIL_resume_sample@4
_AIL_stop_sample@4
_AIL_start_sample@4
_AIL_set_sample_file@12
_AIL_init_sample@4
_AIL_release_sample_handle@4
_AIL_allocate_sample_handle@4
_AIL_last_error@0
_AIL_stream_status@4
_AIL_auto_update_3D_position@8
_AIL_stream_volume_levels@12
_AIL_set_stream_volume_levels@12
_AIL_pause_stream@8
_AIL_start_stream@4
_AIL_close_stream@4
_AIL_set_redist_directory@4
_AIL_shutdown@0
_AIL_startup@0
_AIL_set_3D_orientation@28
_AIL_set_3D_velocity@20
_AIL_set_3D_position@16
_AIL_close_3D_listener@4
_AIL_open_3D_listener@4
_AIL_close_3D_provider@4
_AIL_open_3D_provider@4
_AIL_enumerate_3D_providers@12
_AIL_close_digital_driver@4
_AIL_open_stream@12
_AIL_open_digital_driver@16
_AIL_file_type@8
_AIL_decompress_ADPCM@12
_AIL_decompress_ASI@24
_AIL_WAV_info@8
_AIL_set_file_callbacks@16
_AIL_file_read@8
_AIL_mem_free_lock@4
_AIL_set_stream_loop_count@8
speedtreert
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z
?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
?GetCurrentError@CSpeedTreeRT@@SAPBDXZ
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?GetLeafLodSizeAdjustments@CSpeedTreeRT@@QAEPBMXZ
?GetLeafBillboardTable@CSpeedTreeRT@@QBEPBMAAI@Z
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z
?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafLightingAdjustment@CSpeedTreeRT@@QBEMXZ
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z
?DeleteTransientData@CSpeedTreeRT@@QAEXXZ
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
??3CSpeedTreeRT@@SAXPAX@Z
??2CSpeedTreeRT@@SAPAXI@Z
??1CSpeedTreeRT@@QAE@XZ
??0CSpeedTreeRT@@QAE@XZ
??1STextures@CSpeedTreeRT@@QAE@XZ
??0STextures@CSpeedTreeRT@@QAE@XZ
??1SGeometry@CSpeedTreeRT@@QAE@XZ
??0SGeometry@CSpeedTreeRT@@QAE@XZ
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
?SetLightState@CSpeedTreeRT@@SAXI_N@Z
?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?SetTime@CSpeedTreeRT@@SAXM@Z
dinput8
DirectInput8Create
ws2_32
ntohs
gethostname
bind
WSASetLastError
setsockopt
getsockopt
getsockname
sendto
recvfrom
WSACleanup
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
freeaddrinfo
getaddrinfo
listen
accept
htonl
WSAIoctl
gethostbyname
__WSAFDIsSet
closesocket
connect
ioctlsocket
ntohl
inet_addr
htons
getpeername
WSAStartup
WSAGetLastError
recv
select
socket
send
ddraw
DirectDrawCreate
oleaut32
SafeArrayDestroy
SafeArrayCreate
VariantInit
SafeArrayAccessData
VariantClear
SysAllocString
SysFreeString
crypt32
CertEnumCertificatesInStore
CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CryptStringToBinaryA
CertFreeCertificateChain
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringA
CertFindExtension
CertAddCertificateContextToStore
CryptDecodeObjectEx
PFXImportCertStore
CertOpenStore
wldap32
ord301
ord30
ord79
ord35
ord33
ord32
ord27
ord26
ord22
ord41
ord50
ord45
ord60
ord211
ord200
ord217
ord143
ord46
normaliz
IdnToUnicode
IdnToAscii
Sections
.text Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 762KB - Virtual size: 762KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 161KB - Virtual size: 646KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 194KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ