orqur fortnite cheat source 1[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

orqur fortnite cheat source 1.rar
Size

13.1MB
MD5

bb4fdfaa20a51a46a7a8e3fcda5a04af
SHA1

36c6fdf8e0e0f39b502292fc1e513669cd2ce94c
SHA256

e4a79eb911f1afd1f7bc96b687dbad7db35479af32a0bda32bff47a742b2be47
SHA512

686e82c4d5e7faf476b38f0bc19464f5710312ff21741f0ee30840bdefb44191f5f3c3a0e5da9980f1eaed5b5a930158ff9be08c271fe5ce1ab3f80d351d4bc0
SSDEEP

393216:mPRFhtWVdVij5D66/PL108Idi0xMhvNqP:mPRTwVaF+Kz21EJhvNqP

Score

3^/10

Malware Config

Signatures

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
unpack001/orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/build/driver/driver.sys
unpack001/orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/build/driver/hostedgyat.sys
unpack001/orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/build/usermode/Leflemappa.exe
unpack001/orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/build/usermode/Orqur private/Orqur protected loader.exe
unpack001/orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/build/usermode/driver.sys
unpack001/orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/build/usermode/usermode.exe

Files

orqur fortnite cheat source 1.rar
.rar
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/build/driver/driver.pdb
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/build/driver/driver.sys
.sys windows:10 windows x64 arch:x64

f26d4d130d47de058333610b89631dea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Corleone\Desktop\ioctl base lefleme\build\driver\driver.pdb

Imports

ntoskrnl.exe

RtlInitUnicodeString
MmGetSystemRoutineAddress
ExAllocatePool
ExFreePoolWithTag
IofCompleteRequest
IoCreateDevice
IoCreateSymbolicLink
IoDeleteDevice
IoDeleteSymbolicLink
ObfDereferenceObject
MmGetPhysicalMemoryRanges
MmGetVirtualForPhysical
MmIsAddressValid
PsLookupProcessByProcessId
IoCreateDriver
PsGetProcessSectionBaseAddress
ZwQuerySystemInformation

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 602B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/build/driver/hostedgyat.sys
.sys windows:10 windows x64 arch:x64

df552bc149e9cfef3db42fe67d0113d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Matty\Desktop\KMDF Driver1\x64\Release\KMDFDriver1.pdb

Imports

ntoskrnl.exe

ExAllocatePoolWithTag
ExFreePoolWithTag
ZwQuerySystemInformation
RtlInitString
RtlInitUnicodeString
ExAllocatePool
IoGetDeviceObjectPointer
DbgPrintEx
RtlGetVersion
KeEnterGuardedRegion
KeLeaveGuardedRegion
KeQueryUnbiasedInterruptTime
MmMapIoSpace
MmUnmapIoSpace
isupper
islower
isdigit
strstr
KeQueryTimeIncrement
RtlRandomEx
_vsnwprintf

hal

KeQueryPerformanceCounter

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/build/usermode/Leflemappa.exe
.exe windows:6 windows x64 arch:x64

abcddde26938eb489d338a6d7545e48b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Corleone\Desktop\vertex public\driver\saturn-mapper-main\mapper\build\saturn.pdb

Imports

kernel32

VirtualFree
GetModuleHandleA
GetProcAddress
VirtualAlloc
Sleep
GetTempPathW
VirtualQuery
GetCurrentThreadId
GetCurrentProcessId
DeviceIoControl
CloseHandle
SetUnhandledExceptionFilter
CreateFileW
GetProcessHeap
HeapFree
HeapAlloc
GetStartupInfoW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
RaiseException
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
WideCharToMultiByte
MultiByteToWideChar
CreateSymbolicLinkW
GetFileInformationByHandleEx
CreateHardLinkW
MoveFileExW
CopyFileW
CreateDirectoryExW
GetModuleHandleW
GetLastError
AreFileApisANSI
SetFileTime
SetFileInformationByHandle
SetFileAttributesW
GetFullPathNameW
GetFinalPathNameByHandleW
GetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesW
GetDiskFreeSpaceExW
FindNextFileW
FindFirstFileExW
FindFirstFileW
FindClose
CreateDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetLocaleInfoEx
FormatMessageA
LocalFree
FreeLibrary

advapi32

RegSetKeyValueW
RegOpenKeyW
RegCreateKeyW
RegCloseKey
RegDeleteTreeW

msvcp140d

??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEBX@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?id@?$ctype@_W@std@@2V0locale@2@A
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAHH@Z
_Mbrtowc
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_Getdays@_Locinfo@std@@QEBAPEBDXZ
?_Getmonths@_Locinfo@std@@QEBAPEBDXZ
?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ
?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?_Xlength_error@std@@YAXPEBD@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Xout_of_range@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?widen@?$ctype@_W@std@@QEBA_WD@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??7ios_base@std@@QEBA_NXZ
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?setf@ios_base@std@@QEAAHHH@Z
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

ntdll

NtQuerySystemInformation
RtlInitUnicodeString

vcruntime140d

__vcrt_LoadLibraryExW
__vcrt_GetModuleHandleW
__vcrt_GetModuleFileNameW
__current_exception_context
__current_exception
__C_specific_handler
memcmp
_CxxThrowException
__std_exception_destroy
__std_exception_copy
wcsstr
memset
memmove
memcpy
__std_type_info_destroy_list
__C_specific_handler_noexcept

vcruntime140_1d

__CxxFrameHandler4

ucrtbased

_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
strcpy_s
strcat_s
__stdio_common_vsprintf_s
terminate
_wmakepath_s
_wsplitpath_s
wcscpy_s
_seh_filter_dll
_cexit
__p___wargv
__p___argc
_set_fmode
_exit
exit
_initterm_e
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
__setusermatherr
_set_app_type
_seh_filter_exe
__p__commode
malloc
_callnewh
abort
_malloc_dbg
_free_dbg
_calloc_dbg
_wcsicmp
_time64
_unlock_file
_lock_file
ungetc
setvbuf
fwrite
_fseeki64
fsetpos
fread
fputc
fgetpos
fgetc
fflush
fclose
_get_stream_buffer_pointers
_wremove
_CrtDbgReport
rand
srand
strlen
_stricmp
wcslen
_invalid_parameter
_set_new_mode
_configthreadlocale
_register_thread_local_exe_atexit_callback
_CrtDbgReportW
_c_exit
___lc_codepage_func

Sections

.textbss
Size: - Virtual size: 181KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 402KB - Virtual size: 402KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msvcjmc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 777B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 373B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/build/usermode/Orqur private/Orqur protected loader.exe
.exe windows:6 windows x64 arch:x64

c62eef9e140664e50aafeec2aa5075b8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\orqur source code\all orqur source\fortnite source\FixMenu (1)\FixMenu\build\usermode\usermode.pdb

Imports

d3d9

Direct3DCreate9Ex

kernel32

OutputDebugStringW
GetFileAttributesExW
WideCharToMultiByte
GetProcessHeap
GetCurrentProcessId
FindFirstFileW
GetFileInformationByHandleEx
CreateDirectoryW
GetProcAddress
GetThreadContext
HeapSetInformation
CreateThread
K32GetModuleBaseNameA
CloseHandle
Process32Next
GetLocaleInfoEx
DeleteFileA
LoadLibraryA
GetCurrentThread
GetLastError
Sleep
MultiByteToWideChar
CreateToolhelp32Snapshot
GetModuleHandleA
GetCurrentThreadId
FindClose
CreateFileW
Thread32First
Thread32Next
VirtualAlloc
DeviceIoControl
InitializeSListHead
GetSystemTimeAsFileTime
CheckRemoteDebuggerPresent
IsDebuggerPresent
OpenThread
GetTickCount
K32EnumProcessModules
lstrcmpiA
GetCurrentDirectoryW
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetFileSizeEx
CreateFileA
WaitForMultipleObjects
PeekNamedPipe
ReadFile
GetFileType
GetEnvironmentVariableA
WaitForSingleObjectEx
MoveFileExA
VerifyVersionInfoA
FreeLibrary
GetSystemDirectoryA
SleepEx
LeaveCriticalSection
EnterCriticalSection
LocalFree
FormatMessageA
QueryFullProcessImageNameW
GetModuleHandleW
GetModuleFileNameW
GetModuleFileNameA
UnmapViewOfFile
OutputDebugStringA
GetStdHandle
GetCurrentProcess
VirtualFree
SetLastError
VirtualProtect
Process32First
QueryPerformanceCounter
QueryPerformanceFrequency
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
DeleteCriticalSection
CreateFileMappingW
MapViewOfFile
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
InitializeCriticalSectionEx
AreFileApisANSI

user32

GetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
GetCursorPos
SetCursorPos
GetClientRect
SetCursor
ClientToScreen
GetActiveWindow
ScreenToClient
LoadCursorA
GetKeyState
SetClipboardData
UpdateWindow
RegisterClassExA
FindWindowA
GetDesktopWindow
PeekMessageA
LoadIconA
mouse_event
TranslateMessage
SetLayeredWindowAttributes
CreateWindowExA
DefWindowProcA
GetForegroundWindow
MessageBoxA
SetWindowLongA
GetAsyncKeyState
ShowWindow
SendInput
GetSystemMetrics
SetWindowPos
DestroyWindow
GetWindowRect
DispatchMessageA
GetWindow

advapi32

ConvertSidToStringSidA
GetLengthSid
InitializeAcl
IsValidSid
SetSecurityInfo
CopySid
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
CryptGenRandom
CryptCreateHash
GetTokenInformation
OpenProcessToken
CryptEncrypt
CryptImportKey
CryptDestroyKey
CryptDestroyHash
CryptHashData
AddAccessAllowedAce

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?fail@ios_base@std@@QEBA_NXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
??Bid@locale@std@@QEAA_KXZ
?setf@ios_base@std@@QEAAHHH@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
_Query_perf_frequency
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?uncaught_exceptions@std@@YAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Winerror_map@std@@YAHH@Z
?_Xbad_function_call@std@@YAXXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Random_device@std@@YAIXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Syserror_map@std@@YAPEBDH@Z
_Query_perf_counter
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??7ios_base@std@@QEBA_NXZ

ntdll

RtlCaptureContext
VerSetConditionMask
RtlLookupFunctionEntry
RtlVirtualUnwind

wininet

InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile

dwmapi

DwmExtendFrameIntoClientArea

normaliz

IdnToAscii

wldap32

ord79
ord30
ord35
ord33
ord32
ord27
ord143
ord217
ord46
ord211
ord60
ord45
ord50
ord41
ord22
ord26
ord200
ord301

crypt32

CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringA
CertFindExtension
CertAddCertificateContextToStore
CertFreeCertificateChain
CertOpenStore
PFXImportCertStore
CryptStringToBinaryA
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CryptDecodeObjectEx

ws2_32

accept
closesocket
recv
send
WSAGetLastError
bind
connect
getpeername
getsockname
getsockopt
htons
ntohs
setsockopt
socket
WSASetLastError
WSAIoctl
WSAStartup
WSACleanup
htonl
listen
ioctlsocket
__WSAFDIsSet
select
getaddrinfo
ntohl
gethostname
sendto
recvfrom
freeaddrinfo

shlwapi

PathFindFileNameW

rpcrt4

UuidCreate
UuidToStringA
RpcStringFreeA

psapi

GetModuleInformation

userenv

UnloadUserProfile

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException
__std_exception_copy
__std_exception_destroy
memchr
__std_terminate
strstr
memcmp
memcpy
__C_specific_handler
__current_exception_context
__current_exception
strrchr
memset
memmove
strchr

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s
__stdio_common_vfprintf
__acrt_iob_func
fwrite
_read
_lseeki64
_wfopen
_write
__stdio_common_vsprintf
fread
fflush
feof
__p__commode
fopen
__stdio_common_vsscanf
_close
_open
fseek
fclose
fputc
fgetc
ftell
_popen
_pclose
fgets
_get_stream_buffer_pointers
fputs
_fseeki64
fsetpos
ungetc
__stdio_common_vsnprintf_s
setvbuf
fgetpos
_set_fmode

api-ms-win-crt-string-l1-1-0

_stricmp
_strdup
isupper
strspn
isprint
strncmp
strncpy
strpbrk
tolower
strcmp
strcspn

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

_set_new_mode
free
calloc
realloc
malloc
_callnewh

api-ms-win-crt-convert-l1-1-0

strtol
atoi
strtoull
strtoul
strtoll
strtod
atof

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
system
strerror
__sys_nerr
abort
exit
_resetstkoflw
_beginthreadex
_getpid
terminate
_register_thread_local_exe_atexit_callback
_c_exit
__p___argv
__p___argc
_configure_narrow_argv
_exit
_initterm_e
_initterm
_get_initial_narrow_environment
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_errno

api-ms-win-crt-math-l1-1-0

_dclass
atan2
__setusermatherr
asin
_dsign
tanf
cosf
floorf
fmodf
pow
powf
sinf
sqrt
sqrtf
ceilf

api-ms-win-crt-filesystem-l1-1-0

_fstat64
_stat64
_access
_unlink
_lock_file
remove
_unlock_file

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func
_configthreadlocale
localeconv

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-time-l1-1-0

_time64
strftime
_localtime64
_gmtime64

shell32

ShellExecuteA

Sections

.text
Size: 758KB - Virtual size: 758KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 279KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 113KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/build/usermode/Orqur private/use this file if u get any driver error (most for win 11).reg
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/build/usermode/config.json
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/build/usermode/driver.sys
.sys windows:10 windows x64 arch:x64

f26d4d130d47de058333610b89631dea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\orqur source code\all orqur source\fortnite source\redshirt source build\awesome redshirtfan source\awesome redshirtfan source\build\driver\driver.pdb

Imports

ntoskrnl.exe

RtlInitUnicodeString
MmGetSystemRoutineAddress
ExAllocatePool
ExFreePoolWithTag
IofCompleteRequest
IoCreateDevice
IoCreateSymbolicLink
IoDeleteDevice
IoDeleteSymbolicLink
ObfDereferenceObject
MmGetPhysicalMemoryRanges
MmGetVirtualForPhysical
MmIsAddressValid
PsLookupProcessByProcessId
IoCreateDriver
PsGetProcessSectionBaseAddress
ZwQuerySystemInformation

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 602B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/build/usermode/imgui.ini
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/build/usermode/usermode.exe
.exe windows:6 windows x64 arch:x64

3a0f02d94c9b23fc91a15034c03780f9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\orqur source code\all orqur source\fortnite source\old source\orqur fortnite cheat source 1\orqur fortnite cheat source 1\Ghosty\build\usermode\usermode.pdb

Imports

d3d9

Direct3DCreate9Ex

kernel32

OutputDebugStringW
GetFileAttributesExW
WideCharToMultiByte
GetProcessHeap
GetCurrentProcessId
FindFirstFileW
FindClose
GetProcAddress
GetThreadContext
HeapSetInformation
CreateThread
K32GetModuleBaseNameA
GetCurrentDirectoryW
CloseHandle
Process32Next
DeleteFileA
LoadLibraryA
GetCurrentThread
GetLastError
Sleep
MultiByteToWideChar
CreateToolhelp32Snapshot
GetModuleHandleA
GetCurrentThreadId
GetFileInformationByHandleEx
CreateFileW
Thread32First
Thread32Next
VirtualAlloc
DeviceIoControl
GetLocaleInfoEx
InitializeSListHead
GetSystemTimeAsFileTime
AreFileApisANSI
CheckRemoteDebuggerPresent
IsDebuggerPresent
OpenThread
GetTickCount
K32EnumProcessModules
CreateDirectoryW
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetFileSizeEx
CreateFileA
WaitForMultipleObjects
PeekNamedPipe
ReadFile
GetFileType
GetEnvironmentVariableA
WaitForSingleObjectEx
MoveFileExA
VerifyVersionInfoA
FreeLibrary
GetSystemDirectoryA
SleepEx
LeaveCriticalSection
EnterCriticalSection
LocalFree
FormatMessageA
QueryFullProcessImageNameW
GetModuleHandleW
GetModuleFileNameW
GetModuleFileNameA
lstrcmpiA
OutputDebugStringA
GetStdHandle
GetCurrentProcess
VirtualFree
SetLastError
VirtualProtect
Process32First
QueryPerformanceCounter
QueryPerformanceFrequency
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
MapViewOfFile
UnmapViewOfFile
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
InitializeCriticalSectionEx
DeleteCriticalSection
CreateFileMappingW

user32

GetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
GetCursorPos
SetCursorPos
GetClientRect
SetCursor
ClientToScreen
GetActiveWindow
ScreenToClient
LoadCursorA
GetKeyState
SendInput
SetClipboardData
UpdateWindow
RegisterClassExA
FindWindowA
GetDesktopWindow
PeekMessageA
LoadIconA
mouse_event
TranslateMessage
SetLayeredWindowAttributes
CreateWindowExA
DefWindowProcA
GetForegroundWindow
MessageBoxA
SetWindowLongA
GetAsyncKeyState
ShowWindow
GetSystemMetrics
SetWindowPos
DestroyWindow
GetWindowRect
DispatchMessageA
GetWindow

advapi32

CryptAcquireContextA
GetLengthSid
InitializeAcl
IsValidSid
SetSecurityInfo
CopySid
ConvertSidToStringSidA
CryptReleaseContext
CryptGetHashParam
CryptGenRandom
CryptCreateHash
GetTokenInformation
OpenProcessToken
CryptEncrypt
CryptImportKey
CryptDestroyKey
CryptDestroyHash
CryptHashData
AddAccessAllowedAce

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext

msvcp140

?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?fail@ios_base@std@@QEBA_NXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??7ios_base@std@@QEBA_NXZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
??Bid@locale@std@@QEAA_KXZ
?setf@ios_base@std@@QEAAHHH@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
_Query_perf_frequency
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Throw_Cpp_error@std@@YAXH@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uncaught_exceptions@std@@YAHXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Winerror_map@std@@YAHH@Z
?_Xbad_function_call@std@@YAXXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Random_device@std@@YAIXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Syserror_map@std@@YAPEBDH@Z
_Query_perf_counter
_Thrd_detach
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z

ntdll

RtlCaptureContext
VerSetConditionMask
RtlLookupFunctionEntry
RtlVirtualUnwind

wininet

InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile

dwmapi

DwmExtendFrameIntoClientArea

normaliz

IdnToAscii

wldap32

ord35
ord79
ord30
ord33
ord143
ord32
ord27
ord217
ord46
ord211
ord60
ord45
ord50
ord41
ord22
ord26
ord200
ord301

crypt32

CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringA
CertFindExtension
CertAddCertificateContextToStore
CertFreeCertificateChain
CryptDecodeObjectEx
PFXImportCertStore
CryptStringToBinaryA
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore

ws2_32

htonl
closesocket
recv
send
ioctlsocket
__WSAFDIsSet
select
WSAGetLastError
bind
connect
getpeername
getaddrinfo
getsockname
freeaddrinfo
getsockopt
htons
ntohs
accept
setsockopt
socket
WSASetLastError
WSAIoctl
WSAStartup
WSACleanup
recvfrom
ntohl
gethostname
sendto
listen

shlwapi

PathFindFileNameW

rpcrt4

RpcStringFreeA
UuidToStringA
UuidCreate

psapi

GetModuleInformation

userenv

UnloadUserProfile

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memchr
__std_exception_copy
_CxxThrowException
memcmp
__std_terminate
strstr
strchr
memcpy
memmove
__C_specific_handler
__current_exception_context
__current_exception
strrchr
memset
__std_exception_destroy

api-ms-win-crt-stdio-l1-1-0

__p__commode
__acrt_iob_func
fwrite
__stdio_common_vsprintf_s
_lseeki64
_wfopen
__stdio_common_vsprintf
fread
__stdio_common_vsscanf
feof
fputs
fopen
_read
_write
_close
_open
fputc
fseek
fgetc
fclose
_popen
_pclose
fgets
_get_stream_buffer_pointers
ftell
_fseeki64
fsetpos
ungetc
__stdio_common_vsnprintf_s
setvbuf
fgetpos
_set_fmode
__stdio_common_vfprintf
fflush

api-ms-win-crt-string-l1-1-0

_strdup
isupper
strspn
strncpy
isprint
strncmp
tolower
strpbrk
strcspn
strcmp
_stricmp

api-ms-win-crt-utility-l1-1-0

rand
qsort

api-ms-win-crt-heap-l1-1-0

_set_new_mode
realloc
free
_callnewh
malloc
calloc

api-ms-win-crt-convert-l1-1-0

strtoll
atof
strtoull
atoi
strtol
strtoul
strtod

api-ms-win-crt-runtime-l1-1-0

strerror
_errno
_invalid_parameter_noinfo_noreturn
system
_beginthreadex
abort
__sys_nerr
_invalid_parameter_noinfo
_resetstkoflw
exit
_getpid
terminate
_register_thread_local_exe_atexit_callback
_c_exit
__p___argv
__p___argc
_exit
_initterm_e
_initterm
_get_initial_narrow_environment
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv

api-ms-win-crt-math-l1-1-0

atan2
__setusermatherr
atan2f
ceilf
_dsign
asin
_dclass
cosf
floorf
fmodf
pow
powf
sinf
sqrt
sqrtf
tanf

api-ms-win-crt-filesystem-l1-1-0

_stat64
_fstat64
_access
remove
_lock_file
_unlink
_unlock_file

api-ms-win-crt-locale-l1-1-0

_configthreadlocale
___lc_codepage_func
localeconv

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-time-l1-1-0

_time64
strftime
_localtime64
_gmtime64

shell32

ShellExecuteA

Sections

.text
Size: 762KB - Virtual size: 762KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 281KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 113KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/build/usermode/usermode.pdb
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/ioctl base lefleme.sln
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/Auth/auth.hpp
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/Auth/json.hpp
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/Auth/libcurl.lib
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/Auth/library_x64.lib
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/Auth/skStr.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/Auth/utils.hpp
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/Classes.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/Custom.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/D3DX/d3dx9.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/D3DX/d3dx9.lib
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/D3DX/d3dx9anim.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/D3DX/d3dx9core.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/D3DX/d3dx9effect.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/D3DX/d3dx9math.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/D3DX/d3dx9math.inl
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/D3DX/d3dx9mesh.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/D3DX/d3dx9shader.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/D3DX/d3dx9shape.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/D3DX/d3dx9tex.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/D3DX/d3dx9xof.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/ImGuard.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/ImGui/imconfig.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/ImGui/imgui.cpp
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/ImGui/imgui.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/ImGui/imgui_demo.cpp
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/ImGui/imgui_draw.cpp
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/ImGui/imgui_impl_dx9.cpp
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/ImGui/imgui_impl_dx9.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/ImGui/imgui_impl_win32.cpp
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/ImGui/imgui_impl_win32.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/ImGui/imgui_internal.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/ImGui/imgui_widgets.cpp
.vbs
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/ImGui/imstb_rectpack.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/ImGui/imstb_textedit.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/ImGui/imstb_truetype.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/SkCrypt.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/String Hider 2.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/XorStr.hpp
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/config.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/drawing.cpp
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/drawing.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/driver.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/font.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/fontawesome.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/ida.hpp
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/main.cpp
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/protections/anti_dbg.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/protections/encryption.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/protections/fake_strings.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/radar.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/sdk.h
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/usermode.vcxproj
.xml
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/usermode.vcxproj.filters
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/usermode.vcxproj.user
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/x64/intermediates/usermode/imgui.obj
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/x64/intermediates/usermode/imgui_demo.obj
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/x64/intermediates/usermode/imgui_draw.obj
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/x64/intermediates/usermode/imgui_impl_dx9.obj
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/x64/intermediates/usermode/imgui_impl_win32.obj
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/x64/intermediates/usermode/imgui_widgets.obj
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/x64/intermediates/usermode/main.obj
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/x64/intermediates/usermode/usermode.exe.recipe
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/x64/intermediates/usermode/usermode.iobj
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/x64/intermediates/usermode/usermode.ipdb
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/x64/intermediates/usermode/usermode.log
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/x64/intermediates/usermode/usermode.tlog/CL.command.1.tlog
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/x64/intermediates/usermode/usermode.tlog/CL.read.1.tlog
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/x64/intermediates/usermode/usermode.tlog/CL.write.1.tlog
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/x64/intermediates/usermode/usermode.tlog/Cl.items.tlog
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/x64/intermediates/usermode/usermode.tlog/link.command.1.tlog
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/x64/intermediates/usermode/usermode.tlog/link.read.1.tlog
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/x64/intermediates/usermode/usermode.tlog/link.secondary.1.tlog
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/x64/intermediates/usermode/usermode.tlog/link.write.1.tlog
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/x64/intermediates/usermode/usermode.tlog/usermode.lastbuildstate
orqur fortnite cheat source 1/orqur fortnite cheat source 1/Ghosty/usermode/x64/intermediates/usermode/vc143.pdb

Sharing

General

Malware Config

Signatures

Files

f26d4d130d47de058333610b89631dea

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ntoskrnl.exe

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 152B

.pdata Size: 512B - Virtual size: 216B

INIT Size: 1024B - Virtual size: 602B

.reloc Size: 512B - Virtual size: 36B

df552bc149e9cfef3db42fe67d0113d2

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ntoskrnl.exe

hal

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 112B

.pdata Size: 512B - Virtual size: 324B

INIT Size: 1024B - Virtual size: 700B

.reloc Size: 512B - Virtual size: 36B

abcddde26938eb489d338a6d7545e48b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

msvcp140d

ntdll

vcruntime140d

vcruntime140_1d

ucrtbased

Sections

.textbss Size: - Virtual size: 181KB

.text Size: 402KB - Virtual size: 402KB

.rdata Size: 137KB - Virtual size: 137KB

.data Size: 2KB - Virtual size: 4KB

.pdata Size: 26KB - Virtual size: 26KB

.idata Size: 15KB - Virtual size: 15KB

.msvcjmc Size: 2KB - Virtual size: 2KB

.tls Size: 1024B - Virtual size: 777B

.00cfg Size: 512B - Virtual size: 373B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 3KB

c62eef9e140664e50aafeec2aa5075b8

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

d3d9

kernel32

user32

advapi32

imm32

msvcp140

ntdll

wininet

dwmapi

normaliz

wldap32

crypt32

ws2_32

shlwapi

rpcrt4

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 152B

.pdata
Size: 512B - Virtual size: 216B

INIT
Size: 1024B - Virtual size: 602B

.reloc
Size: 512B - Virtual size: 36B

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 112B

.pdata
Size: 512B - Virtual size: 324B

INIT
Size: 1024B - Virtual size: 700B

.reloc
Size: 512B - Virtual size: 36B

.textbss
Size: - Virtual size: 181KB

.text
Size: 402KB - Virtual size: 402KB

.rdata
Size: 137KB - Virtual size: 137KB

.data
Size: 2KB - Virtual size: 4KB

.pdata
Size: 26KB - Virtual size: 26KB

.idata
Size: 15KB - Virtual size: 15KB

.msvcjmc
Size: 2KB - Virtual size: 2KB

.tls
Size: 1024B - Virtual size: 777B

.00cfg
Size: 512B - Virtual size: 373B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 3KB

.text
Size: 758KB - Virtual size: 758KB

.rdata
Size: 279KB - Virtual size: 279KB

.data
Size: 113KB - Virtual size: 118KB

.pdata
Size: 29KB - Virtual size: 29KB

.rsrc
Size: 512B - Virtual size: 488B

.reloc
Size: 2KB - Virtual size: 1KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 152B

.pdata
Size: 512B - Virtual size: 216B

INIT
Size: 1024B - Virtual size: 602B

.reloc
Size: 512B - Virtual size: 36B