12b73ffbc82f157b39bf9c8c83eb6695f723257aae1bab8af765b473aa915396

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-Sep-14 16:55:17
Detected languages English - United States
Debug artifacts winmm.pdb
CompanyName SOVEREIGN
FileDescription SOVEREIGN Steamclient Proxy
FileVersion 1.0.0.0
InternalName winmm.dll
OriginalFilename winmm.dll
ProductName SOVEREIGN
ProductVersion 1.0.0.0

Plugin Output

Info Matching compiler(s): MASM/TASM - sig1(h)
Suspicious The PE contains functions most legitimate programs don't use. [!] The program may be hiding some of its imports:
  • LoadLibraryA
  • GetProcAddress
  • LoadLibraryW
 Functions which can be used for anti-debugging purposes:
  • CreateToolhelp32Snapshot
 Can access the registry:
  • RegSetValueExW
  • RegCloseKey
  • RegCreateKeyExW
 Uses Windows's Native API:
  • NtReadFile
  • NtWriteFile
 Memory manipulation functions often used by packers:
  • VirtualAlloc
  • VirtualProtect
Malicious VirusTotal score: 22/71 (Scanned on 2026-09-29 03:53:50) Alibaba: Trojan:Win32/DLLhijack.946a62ac
Antiy-AVL: Trojan/Win32.DLLhijack
CAT-QuickHeal: Trojan.DLLhijack
CTX: dll.trojan.dllhijack
Cylance: Unsafe
Fortinet: W32/PossibleThreat
Google: Detected
Ikarus: Win32.SuspectCrc
Kaspersky: Trojan.Win32.DLLhijack.apfk
Kingsoft: Win32.Trojan.DLLhijack.apfk
Lionic: Trojan.Win32.DLLhijack.4!c
MaxSecure: Trojan.Malware.720578706.susgen
McAfeeD: ti!12B73FFBC82F
Microsoft: Trojan:Win32/Wacatac.B!ml
Rising: Trojan.DLLhijack!8.1B50 (CLOUD)
Sophos: Mal/Generic-S
Symantec: Trojan.Gen.MBT
TrellixENS: Artemis!FAD972F3AB28
TrendMicro: Trojan.Win32.DLLHIJACK.USBLIO26
TrendMicro-HouseCall: Trojan.Win32.DLLHIJACK.USBLIO26
Varist: W64/ABTrojan.NOYK-7981
alibabacloud: Trojan:Win/Sabsik.FE

Hashes

MD5 fad972f3ab28e0b06ce5d25c863f5019 🔍
SHA1 7896a747b345a75f760b3403006d623adc2ceda6 🔍
SHA256 12b73ffbc82f157b39bf9c8c83eb6695f723257aae1bab8af765b473aa915396 🔍
SHA3 bbfdfbc6c6fa2533e0b1b7cda1ba6da2c1b9269e02952825003b9be192ce7a34 🔍
SSDeep 3072:WzqaMfwG0M1kf2z4Dd1NAxYDQraLbYhzgl:Vaap0MzONAInYlg 🔍
Imports Hash c574d0c43b8418a3c53f0d7c07559049 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x110

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 6
TimeDateStamp 2026-Sep-14 16:55:17
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_DLL
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x1ca00
SizeOfInitializedData 0xce00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000000000001BEE0 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x180000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x2e000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 3a795dbc5bebabfbe40695a21533f9b0 🔍
SHA1 16b71cadf59a61db940dddc2eb49e61e7e0b2430 🔍
SHA256 29d1f965890b1ae4888f58cd54e87b03c1e72f0e86f90f6ce01d31189782b36a 🔍
SHA3 56e391eb51e2f788d8b9ebd1ef90c5183507af2c436039ac77801a988778e11e 🔍
VirtualSize 0x1c948
VirtualAddress 0x1000
SizeOfRawData 0x1ca00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.43697

.rdata

MD5 4cc9c159d5bde50e097befe003f23054 🔍
SHA1 9a5dd2849a0837e5034f95e533a6a416a091d951 🔍
SHA256 f7b4b9fbd87bf0ae45ae2560876da005ff72b4ade499db4bd854ec2da01503c0 🔍
SHA3 c306584dc1c6ead49a39a844c8f9bf58434585df65812c22c49951f308d72fb7 🔍
VirtualSize 0xa798
VirtualAddress 0x1e000
SizeOfRawData 0xa800
PointerToRawData 0x1ce00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.78072

.data

MD5 4a8102e8e59ac049d14b9b5ac9b42496 🔍
SHA1 55b23104e10e10810b66e69d93a379c172127c2b 🔍
SHA256 ee3ec5eda15dc28416ddab7aa3b52667e3c76ec5b212aaca8d6dd6d865340f1d 🔍
SHA3 e43854da8c4fcd175be83d5d226dddfd8d2d9b83425155cfd236da22ff32beb1 🔍
VirtualSize 0x4f0
VirtualAddress 0x29000
SizeOfRawData 0x400
PointerToRawData 0x27600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 3.51456

.pdata

MD5 97d615e31c1df17566e3027aa0ac80ee 🔍
SHA1 c971050b6e40e67d8f94854153d7faf6c2db3546 🔍
SHA256 b633cac9a41c610ae6853f56547095b535f562075fe90daac0115296900857d8 🔍
SHA3 d2e57050bd9fab82b9d6d6c564174d2c98e19dc55b3fd63452f76c5b62ef2984 🔍
VirtualSize 0x17a0
VirtualAddress 0x2a000
SizeOfRawData 0x1800
PointerToRawData 0x27a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.16517

.rsrc

MD5 699536b800cce96b8f8323138a2f6485 🔍
SHA1 5296dd02727d5ace4a7b64cad3c67ef4086d1a43 🔍
SHA256 455c5be45e3cc6efc4fa6456bc6e829d0cf8e6faf2b72c51dab35c2ee85bba1e 🔍
SHA3 43c4ed898bda5db6a2af253c4d29f6b3fdcc15f9d83434984f9992a53bc71f03 🔍
VirtualSize 0x2d8
VirtualAddress 0x2c000
SizeOfRawData 0x400
PointerToRawData 0x29200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 2.37229

.reloc

MD5 6f422df13c8d5ae48e5357034f3743dc 🔍
SHA1 a151b41c13143870d49b436b2e98438f6341049d 🔍
SHA256 b3efbacbadab468d70be136d4a63859b4effe0655e344c73f1b683fb8b944ada 🔍
SHA3 d179e406c238aba6ed14e002562fd47b30d6ac5bbe52754464adf3a705e7aa58 🔍
VirtualSize 0x230
VirtualAddress 0x2d000
SizeOfRawData 0x400
PointerToRawData 0x29600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 3.61319

Imports

api-ms-win-core-synch-l1-2-0.dll WakeByAddressSingle
WakeByAddressAll
WaitOnAddress
ADVAPI32.dll RegSetValueExW
RegCloseKey
RegCreateKeyExW
KERNEL32.dll GetSystemTimeAsFileTime
InitializeSListHead
Sleep
GetModuleHandleA
GetModuleFileNameW
GetPrivateProfileStringA
GetPrivateProfileIntA
VirtualAlloc
CloseHandle
GetCurrentProcessId
CreateThread
GetProcessHeap
HeapFree
HeapReAlloc
GetLastError
SetLastError
GetEnvironmentVariableW
GetCurrentThreadId
GetCurrentDirectoryW
RtlCaptureContext
GetCurrentProcess
RtlLookupFunctionEntry
WaitForSingleObjectEx
LoadLibraryA
GetProcAddress
lstrlenW
CreateMutexA
ReleaseMutex
WideCharToMultiByte
RtlVirtualUnwind
GetModuleHandleW
FormatMessageW
GetStdHandle
GetConsoleMode
GetConsoleOutputCP
WaitForSingleObject
MultiByteToWideChar
WriteConsoleW
HeapAlloc
GetFullPathNameW
CreateFileW
SetFileTime
SetFileInformationByHandle
GetFileInformationByHandle
GetFileInformationByHandleEx
LoadLibraryW
GetFileAttributesW
SetEnvironmentVariableA
GetSystemDirectoryA
HeapCreate
OpenThread
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualProtect
CreateToolhelp32Snapshot
Thread32First
Thread32Next
GetSystemInfo
VirtualFree
VirtualQuery
QueryPerformanceCounter
ntdll.dll NtReadFile
RtlNtStatusToDosError
NtWriteFile
VCRUNTIME140.dll __std_type_info_destroy_list
memcpy
memcmp
__CxxFrameHandler3
memset
__C_specific_handler
api-ms-win-crt-runtime-l1-1-0.dll _initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit
_initterm

Delayed Imports

CloseDriver

Ordinal 1
Address 0x1000

DefDriverProc

Ordinal 2
Address 0x1043

DllMain

Ordinal 3
Address 0x1092

DriverCallback

Ordinal 4
Address 0x2409

DrvGetModuleHandle

Ordinal 5
Address 0x2451

GetDriverModuleHandle

Ordinal 6
Address 0x2482

OpenDriver

Ordinal 7
Address 0x24b3

PlaySound

Ordinal 8
Address 0x24f6

PlaySoundA

Ordinal 9
Address 0x2539

PlaySoundW

Ordinal 10
Address 0x257c

SOVEREIGN_LoadRealSteamclient

Ordinal 11
Address 0x16a9f

SendDriverMessage

Ordinal 12
Address 0x25bf

WOWAppExit

Ordinal 13
Address 0x260c

auxGetDevCapsA

Ordinal 14
Address 0x263d

auxGetDevCapsW

Ordinal 15
Address 0x2680

auxGetNumDevs

Ordinal 16
Address 0x26c3

auxGetVolume

Ordinal 17
Address 0x26eb

auxOutMessage

Ordinal 18
Address 0x2723

auxSetVolume

Ordinal 19
Address 0x276b

joyConfigChanged

Ordinal 20
Address 0x27a1

joyGetDevCapsA

Ordinal 21
Address 0x27d0

joyGetDevCapsW

Ordinal 22
Address 0x2813

joyGetNumDevs

Ordinal 23
Address 0x2856

joyGetPos

Ordinal 24
Address 0x287e

joyGetPosEx

Ordinal 25
Address 0x28b6

joyGetThreshold

Ordinal 26
Address 0x28ee

joyReleaseCapture

Ordinal 27
Address 0x2926

joySetCapture

Ordinal 28
Address 0x2955

joySetThreshold

Ordinal 29
Address 0x29a2

mciDriverNotify

Ordinal 30
Address 0x29d8

mciDriverYield

Ordinal 31
Address 0x2a19

mciExecute

Ordinal 32
Address 0x2a48

mciFreeCommandResource

Ordinal 33
Address 0x2a79

mciGetCreatorTask

Ordinal 34
Address 0x2aaa

mciGetDeviceIDA

Ordinal 35
Address 0x2ad9

mciGetDeviceIDFromElementIDA

Ordinal 36
Address 0x2b0a

mciGetDeviceIDFromElementIDW

Ordinal 37
Address 0x2b42

mciGetDeviceIDW

Ordinal 38
Address 0x2b7a

mciGetDriverData

Ordinal 39
Address 0x2bab

mciGetErrorStringA

Ordinal 40
Address 0x2bda

mciGetErrorStringW

Ordinal 41
Address 0x2c1b

mciGetYieldProc

Ordinal 42
Address 0x2c5c

mciLoadCommandResource

Ordinal 43
Address 0x2c94

mciSendCommandA

Ordinal 44
Address 0x2cd7

mciSendCommandW

Ordinal 45
Address 0x2d1f

mciSendStringA

Ordinal 46
Address 0x2d67

mciSendStringW

Ordinal 47
Address 0x2db6

mciSetDriverData

Ordinal 48
Address 0x2e05

mciSetYieldProc

Ordinal 49
Address 0x2e3d

midiConnect

Ordinal 50
Address 0x2e7e

midiDisconnect

Ordinal 51
Address 0x2ec1

midiInAddBuffer

Ordinal 52
Address 0x2f04

midiInClose

Ordinal 53
Address 0x2f47

midiInGetDevCapsA

Ordinal 54
Address 0x2f78

midiInGetDevCapsW

Ordinal 55
Address 0x2fbb

midiInGetErrorTextA

Ordinal 56
Address 0x2ffe

midiInGetErrorTextW

Ordinal 57
Address 0x303f

midiInGetID

Ordinal 58
Address 0x3080

midiInGetNumDevs

Ordinal 59
Address 0x30ba

midiInMessage

Ordinal 60
Address 0x30e2

midiInOpen

Ordinal 61
Address 0x312f

midiInPrepareHeader

Ordinal 62
Address 0x317c

midiInReset

Ordinal 63
Address 0x31bf

midiInStart

Ordinal 64
Address 0x31f0

midiInStop

Ordinal 65
Address 0x3221

midiInUnprepareHeader

Ordinal 66
Address 0x3252

midiOutCacheDrumPatches

Ordinal 67
Address 0x3295

midiOutCachePatches

Ordinal 68
Address 0x32e2

midiOutClose

Ordinal 69
Address 0x332f

midiOutGetDevCapsA

Ordinal 70
Address 0x3360

midiOutGetDevCapsW

Ordinal 71
Address 0x33a3

midiOutGetErrorTextA

Ordinal 72
Address 0x33e6

midiOutGetErrorTextW

Ordinal 73
Address 0x3427

midiOutGetID

Ordinal 74
Address 0x3468

midiOutGetNumDevs

Ordinal 75
Address 0x34a2

midiOutGetVolume

Ordinal 76
Address 0x34ca

midiOutLongMsg

Ordinal 77
Address 0x3504

midiOutMessage

Ordinal 78
Address 0x3547

midiOutOpen

Ordinal 79
Address 0x3594

midiOutPrepareHeader

Ordinal 80
Address 0x35e1

midiOutReset

Ordinal 81
Address 0x3624

midiOutSetVolume

Ordinal 82
Address 0x3655

midiOutShortMsg

Ordinal 83
Address 0x368d

midiOutUnprepareHeader

Ordinal 84
Address 0x36c5

midiStreamClose

Ordinal 85
Address 0x3708

midiStreamOpen

Ordinal 86
Address 0x3739

midiStreamOut

Ordinal 87
Address 0x3788

midiStreamPause

Ordinal 88
Address 0x37cb

midiStreamPosition

Ordinal 89
Address 0x37fc

midiStreamProperty

Ordinal 90
Address 0x383f

midiStreamRestart

Ordinal 91
Address 0x3882

midiStreamStop

Ordinal 92
Address 0x38b3

mixerClose

Ordinal 93
Address 0x38e4

mixerGetControlDetailsA

Ordinal 94
Address 0x3915

mixerGetControlDetailsW

Ordinal 95
Address 0x3958

mixerGetDevCapsA

Ordinal 96
Address 0x399b

mixerGetDevCapsW

Ordinal 97
Address 0x39de

mixerGetID

Ordinal 98
Address 0x3a21

mixerGetLineControlsA

Ordinal 99
Address 0x3a5b

mixerGetLineControlsW

Ordinal 100
Address 0x3a9e

mixerGetLineInfoA

Ordinal 101
Address 0x3ae1

mixerGetLineInfoW

Ordinal 102
Address 0x3b24

mixerGetNumDevs

Ordinal 103
Address 0x3b67

mixerMessage

Ordinal 104
Address 0x3b8f

mixerOpen

Ordinal 105
Address 0x3bdc

mixerSetControlDetails

Ordinal 106
Address 0x3c29

mmioAdvance

Ordinal 107
Address 0x3c6c

mmioAscend

Ordinal 108
Address 0x3caf

mmioClose

Ordinal 109
Address 0x3cf2

mmioCreateChunk

Ordinal 110
Address 0x3d2a

mmioDescend

Ordinal 111
Address 0x3d6d

mmioFlush

Ordinal 112
Address 0x3dbc

mmioGetInfo

Ordinal 113
Address 0x3df4

mmioInstallIOProcA

Ordinal 114
Address 0x3e37

mmioInstallIOProcW

Ordinal 115
Address 0x3e78

mmioOpenA

Ordinal 116
Address 0x3eb9

mmioOpenW

Ordinal 117
Address 0x3efc

mmioRead

Ordinal 118
Address 0x3f3f

mmioRenameA

Ordinal 119
Address 0x3f82

mmioRenameW

Ordinal 120
Address 0x3fd1

mmioSeek

Ordinal 121
Address 0x4020

mmioSendMessage

Ordinal 122
Address 0x4061

mmioSetBuffer

Ordinal 123
Address 0x40ae

mmioSetInfo

Ordinal 124
Address 0x40fd

mmioStringToFOURCCA

Ordinal 125
Address 0x4140

mmioStringToFOURCCW

Ordinal 126
Address 0x4178

mmioWrite

Ordinal 127
Address 0x41b0

mmsystemGetVersion

Ordinal 128
Address 0x41f3

sndPlaySoundA

Ordinal 129
Address 0x421b

sndPlaySoundW

Ordinal 130
Address 0x4253

timeBeginPeriod

Ordinal 131
Address 0x428b

timeEndPeriod

Ordinal 132
Address 0x42ba

timeGetDevCaps

Ordinal 133
Address 0x42e9

timeGetSystemTime

Ordinal 134
Address 0x4321

timeGetTime

Ordinal 135
Address 0x4359

timeKillEvent

Ordinal 136
Address 0x4381

timeSetEvent

Ordinal 137
Address 0x43b0

waveInAddBuffer

Ordinal 138
Address 0x43f8

waveInClose

Ordinal 139
Address 0x443b

waveInGetDevCapsA

Ordinal 140
Address 0x446c

waveInGetDevCapsW

Ordinal 141
Address 0x44af

waveInGetErrorTextA

Ordinal 142
Address 0x44f2

waveInGetErrorTextW

Ordinal 143
Address 0x4533

waveInGetID

Ordinal 144
Address 0x4574

waveInGetNumDevs

Ordinal 145
Address 0x45ae

waveInGetPosition

Ordinal 146
Address 0x45d6

waveInMessage

Ordinal 147
Address 0x4619

waveInOpen

Ordinal 148
Address 0x4666

waveInPrepareHeader

Ordinal 149
Address 0x46b3

waveInReset

Ordinal 150
Address 0x46f6

waveInStart

Ordinal 151
Address 0x4727

waveInStop

Ordinal 152
Address 0x4758

waveInUnprepareHeader

Ordinal 153
Address 0x4789

waveOutBreakLoop

Ordinal 154
Address 0x47cc

waveOutClose

Ordinal 155
Address 0x47fd

waveOutGetDevCapsA

Ordinal 156
Address 0x482e

waveOutGetDevCapsW

Ordinal 157
Address 0x4871

waveOutGetErrorTextA

Ordinal 158
Address 0x48b4

waveOutGetErrorTextW

Ordinal 159
Address 0x48f5

waveOutGetID

Ordinal 160
Address 0x4936

waveOutGetNumDevs

Ordinal 161
Address 0x4970

waveOutGetPitch

Ordinal 162
Address 0x4998

waveOutGetPlaybackRate

Ordinal 163
Address 0x49d2

waveOutGetPosition

Ordinal 164
Address 0x4a0c

waveOutGetVolume

Ordinal 165
Address 0x4a4f

waveOutMessage

Ordinal 166
Address 0x4a89

waveOutOpen

Ordinal 167
Address 0x4ad6

waveOutPause

Ordinal 168
Address 0x4b23

waveOutPrepareHeader

Ordinal 169
Address 0x4b54

waveOutReset

Ordinal 170
Address 0x4b97

waveOutRestart

Ordinal 171
Address 0x4bc8

waveOutSetPitch

Ordinal 172
Address 0x4bf9

waveOutSetPlaybackRate

Ordinal 173
Address 0x4c31

waveOutSetVolume

Ordinal 174
Address 0x4c69

waveOutUnprepareHeader

Ordinal 175
Address 0x4ca1

waveOutWrite

Ordinal 176
Address 0x4ce4

1

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x278
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.24769
MD5 27a456ee2047b75e2e104255f969b316 🔍
SHA1 7dd2f1f82e09604320d84fb77d2c9ee0fce3a401 🔍
SHA256 a1a980a51b8a9d1c178bfacf4566c49428e457d839f5f7abc4b90c9a7bf8c9b8 🔍
SHA3 2d08bf1fb72f46deed6c521f6af8b1c02bf5d08b1fa6b034e08828efe1ff93b8 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 0.1.0.0
ProductVersion 0.1.0.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
FileType VFT_APP
Language UNKNOWN
CompanyName SOVEREIGN
FileDescription SOVEREIGN Steamclient Proxy
FileVersion (#2) 1.0.0.0
InternalName winmm.dll
OriginalFilename winmm.dll
ProductName SOVEREIGN
ProductVersion (#2) 1.0.0.0
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2026-Sep-14 16:55:17
Version 0.0
SizeofData 34
AddressOfRawData 0x24a1c
PointerToRawData 0x2381c
Referenced File winmm.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2026-Sep-14 16:55:17
Version 0.0
SizeofData 20
AddressOfRawData 0x24a40
PointerToRawData 0x23840

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-Sep-14 16:55:17
Version 0.0
SizeofData 752
AddressOfRawData 0x24a54
PointerToRawData 0x23854

TLS Callbacks

StartAddressOfRawData 0x180024d68
EndAddressOfRawData 0x180024d88
AddressOfIndex 0x180029468
AddressOfCallbacks 0x18001e348
SizeOfZeroFill 0
Characteristics IMAGE_SCN_ALIGN_8BYTES
Callbacks (EMPTY)

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x1800292c0

RICH Header

XOR Key 0x932fbc10
Unmarked objects 0
Imports (VS2008 SP1 build 30729) 2
Imports (35721) 2
ASM objects (35721) 4
C objects (35721) 8
C++ objects (35721) 12
Imports (33145) 7
Total imports 96
C objects (35228) 4
Unmarked objects (#2) 5
Exports (36257) 1
Resource objects (36257) 1
Linker (36257) 1

Errors

Leave a comment

No comments yet.