| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date |
2026-Mar-04 21:28:58
|
| TLS Callbacks |
2 callback(s) detected.
|
| Debug artifacts |
Embedded COFF debugging symbols
|
| Suspicious |
The PE is possibly packed. |
Unusual section name found: .xdata
Unusual section name found: /4
Unusual section name found: /19
Unusual section name found: /31
Unusual section name found: /45
Unusual section name found: /57
Unusual section name found: /70
Unusual section name found: /81
Unusual section name found: /92
Unusual section name found: /106
Unusual section name found: /122
Unusual section name found: /138
|
| Suspicious |
The file contains overlay data. |
79079 bytes of data starting at offset 0x65200.
|
| Malicious |
VirusTotal score: 4/72 (Scanned on 2026-03-05 00:49:05) |
APEX:
Malicious
Google:
Detected
Ikarus:
Trojan.Win64.Agent
Microsoft:
Trojan:Win32/Wacatac.B!ml
|
| MD5 |
41124b950264d681e70868ab6eb0f3e4
|
| SHA1 |
1fbfb27b9c506ec7f15c9aa7c235c6ce2e1fe700
|
| SHA256 |
1cd341f7affcffb4285de2727b8ee3a60d8e5f5a3822233610f505c3e213ff10
|
| SHA3 |
4a5e502b63c3fa1f25331fdcf64e7f49053911bf5b763e8268886000efb7bf4e
|
| SSDeep |
6144:ZbjTdDkAOJCs5k1MjNiVbSJlU67jd3eC7ggw4O+AG47wTweAYZsY89H9/:JHxymyjN0c3dz1O+AV7wTwOsH9/
|
| Imports Hash |
7c8c93347d97e967763d356f99490b45
|
| e_magic |
MZ
|
| e_cblp |
0x90
|
| e_cp |
0x3
|
| e_crlc |
0
|
| e_cparhdr |
0x4
|
| e_minalloc |
0
|
| e_maxalloc |
0xffff
|
| e_ss |
0
|
| e_sp |
0xb8
|
| e_csum |
0
|
| e_ip |
0
|
| e_cs |
0
|
| e_ovno |
0
|
| e_oemid |
0
|
| e_oeminfo |
0
|
| e_lfanew |
0x80
|
| Signature |
PE
|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections |
21
|
| TimeDateStamp |
2026-Mar-04 21:28:58
|
| PointerToSymbolTable |
0x65200
|
| NumberOfSymbols |
3583
|
| SizeOfOptionalHeader |
0xf0
|
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_LINE_NUMS_STRIPPED
|
| Magic |
PE32+
|
| LinkerVersion |
2.0
|
| SizeOfCode |
0x1ea00
|
| SizeOfInitializedData |
0x32200
|
| SizeOfUninitializedData |
0x5a00
|
| AddressOfEntryPoint |
0x00000000000013E0 (Section: .text)
|
| BaseOfCode |
0x1000
|
| ImageBase |
0x140000000
|
| SectionAlignment |
0x1000
|
| FileAlignment |
0x200
|
| OperatingSystemVersion |
4.0
|
| ImageVersion |
0.0
|
| SubsystemVersion |
5.2
|
| Win32VersionValue |
0
|
| SizeOfImage |
0x76000
|
| SizeOfHeaders |
0x600
|
| Checksum |
0x84aa2
|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
|
| SizeofStackReserve |
0x200000
|
| SizeofStackCommit |
0x1000
|
| SizeofHeapReserve |
0x100000
|
| SizeofHeapCommit |
0x1000
|
| LoaderFlags |
0
|
| NumberOfRvaAndSizes |
16
|
| MD5 |
951a21acdfed84bd73aeb0b12e15d2c5
|
| SHA1 |
4353dfa494916ad8de167fb8dbb1d946bcbf1995
|
| SHA256 |
d30d4339cba86a5d3393a594c9b6b2157559c25d517c9a370b23c305f3f38659
|
| SHA3 |
57113cbcbcfe44a86f63856e3b35bd7b7eff554759528e91aa5ed2587b5b1109
|
| VirtualSize |
0x1e9d8
|
| VirtualAddress |
0x1000
|
| SizeOfRawData |
0x1ea00
|
| PointerToRawData |
0x600
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy |
6.07086
|
| MD5 |
5476184029f42070bde8b9435e228468
|
| SHA1 |
7f74a60c3c70e108a30620fffa2bb57c3ded5dbb
|
| SHA256 |
3051d1a07e875c346c7ccf59c9a0c251e31d29ae981ba8a7c979ec07ed1ee114
|
| SHA3 |
d9c333be7cb66f136e379779ecd676825ab631c3dc12117da6484ee7b3becc02
|
| VirtualSize |
0xab90
|
| VirtualAddress |
0x20000
|
| SizeOfRawData |
0xac00
|
| PointerToRawData |
0x1f000
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy |
1.58598
|
| MD5 |
5d5f5a251684aa06931d3e97bccbd58d
|
| SHA1 |
2992fb57c20af04b5812bb7b069fa241f12a4905
|
| SHA256 |
0048bdab31b79c01fb30a328898564b3feb28df9f2076cc3d3b026e9c7c32b99
|
| SHA3 |
1d133e795516e42406d2bfae294c69e6326757f1f79aec39c1810d38e98a2fcf
|
| VirtualSize |
0x5a10
|
| VirtualAddress |
0x2b000
|
| SizeOfRawData |
0x5c00
|
| PointerToRawData |
0x29c00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy |
3.10791
|
| MD5 |
8ba02f5d205d549dc545d6d7cee543d7
|
| SHA1 |
f320a08af8f6126825b61e13ab08f8531bd9811c
|
| SHA256 |
669a8860bf8adad7edbab5cf4eb05bbd1335f6a75d22af1bbe44c2c10226ab87
|
| SHA3 |
d84a292b542b44d6515e005f3b91f8fad921901618a092beacd4d35fe0b13298
|
| VirtualSize |
0x990
|
| VirtualAddress |
0x31000
|
| SizeOfRawData |
0xa00
|
| PointerToRawData |
0x2f800
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy |
5.11782
|
| MD5 |
39e773af4f9255464f993a19d2720be4
|
| SHA1 |
e71990336009a82543de1d1e7a5c35a6534af1cc
|
| SHA256 |
0aab6ae039d83be7afb0a3512fa2fbaa31b75e07562bc6eef7ddac7783171fdf
|
| SHA3 |
858de6de3aa8f737f67b6e58f9f85afb56c24a70b40eaa704a35a1cf5b49a947
|
| VirtualSize |
0xa28
|
| VirtualAddress |
0x32000
|
| SizeOfRawData |
0xc00
|
| PointerToRawData |
0x30200
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy |
4.14536
|
| MD5 |
d41d8cd98f00b204e9800998ecf8427e
|
| SHA1 |
da39a3ee5e6b4b0d3255bfef95601890afd80709
|
| SHA256 |
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
|
| SHA3 |
a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
|
| VirtualSize |
0x5920
|
| VirtualAddress |
0x33000
|
| SizeOfRawData |
0
|
| PointerToRawData |
0
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| MD5 |
112c2094c4f8ce497defe143819ed428
|
| SHA1 |
4aa6dc662c591c79e78e33f81ed7301df68fe1ff
|
| SHA256 |
238c8df6986a73f7e6c2480e8ccfc42d7a57c32fd643715efcf60e9f66328391
|
| SHA3 |
a621335d3c9e41651601a1d93fac90fd2f6a6f962b8bbc0fedbfb31cb9e2ecd0
|
| VirtualSize |
0x1318
|
| VirtualAddress |
0x39000
|
| SizeOfRawData |
0x1400
|
| PointerToRawData |
0x30e00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy |
4.35933
|
| MD5 |
6ee65dda6fc922408f3caed024586baa
|
| SHA1 |
31312912dac7d5dc795c15e3b5feb5fdd9595fb4
|
| SHA256 |
cc3ebab5947e3d874ca771883c4ab6f99e562d4f07a14d90443093f6be24f9a5
|
| SHA3 |
e6a0b193b3476c87cdeef826f76aed714a56f4970b24b71913bdb2ef69bba8c0
|
| VirtualSize |
0x60
|
| VirtualAddress |
0x3b000
|
| SizeOfRawData |
0x200
|
| PointerToRawData |
0x32200
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy |
0.30935
|
| MD5 |
bf619eac0cdf3f68d496ea9344137e8b
|
| SHA1 |
5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5
|
| SHA256 |
076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560
|
| SHA3 |
622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59
|
| VirtualSize |
0x10
|
| VirtualAddress |
0x3c000
|
| SizeOfRawData |
0x200
|
| PointerToRawData |
0x32400
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy |
0
|
| MD5 |
8d7a2f0046f789a4ae8560a8913f103c
|
| SHA1 |
b42a00b996fdb8e8fbde1e24200a03f582c6f379
|
| SHA256 |
9a52359acd894b0479c61d227ed3488cf44617c031afeff345ee0b12c0dacd43
|
| SHA3 |
edba5d4136bf1a2cc0c5292e4941209d95f5b9cc9f75d431d3ea553b52e148ef
|
| VirtualSize |
0xc4
|
| VirtualAddress |
0x3d000
|
| SizeOfRawData |
0x200
|
| PointerToRawData |
0x32600
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
2.33246
|
| MD5 |
02d936f5a229f9eb6e8a4a9b12c2106d
|
| SHA1 |
f0f4f5ff0e9526852e338b7ee0f6aa5c5f8e44ed
|
| SHA256 |
10fe3f7492b79a38c7ff94d83d6fff6102be8bc3cc05b8adc0bbf3d9c5820559
|
| SHA3 |
dfb458333193aec88db596b7848ea3784beb031d1d41e5ccb3c4465dbd187512
|
| VirtualSize |
0x950
|
| VirtualAddress |
0x3e000
|
| SizeOfRawData |
0xa00
|
| PointerToRawData |
0x32800
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
1.87723
|
| MD5 |
17454b2e4255c67092a0c58507408533
|
| SHA1 |
2d13e2539c22f25e6b430de8f829fcb6a890b8dd
|
| SHA256 |
43ca3a6c1083dbe2b1bfec2821e45745858ffec29ef2e2a340787bda014b7466
|
| SHA3 |
cf49daeb91b2b2fa6df0ca0d5621df419c4216a0bd26000d1ca107b8778cda90
|
| VirtualSize |
0x16f88
|
| VirtualAddress |
0x3f000
|
| SizeOfRawData |
0x17000
|
| PointerToRawData |
0x33200
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
5.86554
|
| MD5 |
481a800426430865d464715f4994264f
|
| SHA1 |
f41c1de04fc9339d65f0236cf5dbcab7eee1f506
|
| SHA256 |
a825b2a832518ea049a97b947df5ad96a3f3ef52979fafa4a491a00ff7c08107
|
| SHA3 |
259dd79f12c75c3dfd5d75e7f57350e1cc03937f1c92b00b5f0f88a55cb02eba
|
| VirtualSize |
0x4405
|
| VirtualAddress |
0x56000
|
| SizeOfRawData |
0x4600
|
| PointerToRawData |
0x4a200
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
4.78901
|
| MD5 |
0ed8e84253c5b20173a9ee9c96f626ce
|
| SHA1 |
84d9bef3cfff1b4cbda8a1308cbbc6daf05379a4
|
| SHA256 |
465768fc80dbf9b1a4259fcf09c5f848ce8d0294edf8c7cd81c57cbc28d5e7ab
|
| SHA3 |
f4227132d2c2ebc0bdfaad290d5ddc4bdee96f3836f599112c151abfb528cbd0
|
| VirtualSize |
0x837f
|
| VirtualAddress |
0x5b000
|
| SizeOfRawData |
0x8400
|
| PointerToRawData |
0x4e800
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
5.11101
|
| MD5 |
b9917ddf0f9e91ed3ecf5a442eaecf65
|
| SHA1 |
8fc5e9ca3c376da6eb9984788ad7ee9b6c9bf26e
|
| SHA256 |
827bb9eaa3dfcc1e61bed976b380ef1525e2da9ad6e1c8b96762d968951cfe19
|
| SHA3 |
30e84dbe0af98c17a9cd9f1fd9f73684dc193cc19123bc9a8db0c57b7d736de0
|
| VirtualSize |
0x1cb0
|
| VirtualAddress |
0x64000
|
| SizeOfRawData |
0x1e00
|
| PointerToRawData |
0x56c00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
4.71746
|
| MD5 |
c92af07e4973dc016cc494dd9410d048
|
| SHA1 |
e6ec26ab2cea03d30cb7020d77e045e7ea025490
|
| SHA256 |
ee800a844e2f239a18574ad56fea9178ede6efbd1b1c483bc60b96c96484c692
|
| SHA3 |
4d2e4e3d1bd8b938a38353a139e6d5fc1c6c9f7749ac6853eafa13fc5ad161f7
|
| VirtualSize |
0x47c
|
| VirtualAddress |
0x66000
|
| SizeOfRawData |
0x600
|
| PointerToRawData |
0x58a00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
4.31323
|
| MD5 |
c87cd3d40ac319eb950e25fadf420d27
|
| SHA1 |
9c616161cabe5018a6dc44db4282b0bceba264f7
|
| SHA256 |
8f228a03f2a7834fe9680fd013c4ee137098d8a9697953b2c8243248258a23b5
|
| SHA3 |
61bca71947e46bf90ad65b6949ef84cb2a46f2b45cfd85954a78597142396240
|
| VirtualSize |
0x46e
|
| VirtualAddress |
0x67000
|
| SizeOfRawData |
0x600
|
| PointerToRawData |
0x59000
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
1.35376
|
| MD5 |
a0d92bfa8c4d5994936e2a056e640bf2
|
| SHA1 |
78e41986b88aa94cddfd80673fc0afbc309eba0f
|
| SHA256 |
9ff01ae5ae441268be5542a07721b0979afe1a5343e28a397ee11ce38a74adc1
|
| SHA3 |
e4e6cfb030b7f54dd8267a998a97b8fb533ef2906d68f62c47660de6e0d1a871
|
| VirtualSize |
0x60
|
| VirtualAddress |
0x68000
|
| SizeOfRawData |
0x200
|
| PointerToRawData |
0x59600
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
0.204488
|
| MD5 |
a298033eca3e20901129f6715eefb810
|
| SHA1 |
8b6ea61be96bbeed02adc7c52b8489da75f7fad0
|
| SHA256 |
5b3a1249558987efa3f9dd4fb9bafd1156c8d6b7b5dffc420545d521f7f0cfdb
|
| SHA3 |
85f33f6cdc0f1852d3e093559a7b0fe6277510d9c4b902027b8ab41e74dec550
|
| VirtualSize |
0x29d6
|
| VirtualAddress |
0x69000
|
| SizeOfRawData |
0x2a00
|
| PointerToRawData |
0x59800
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
4.75378
|
| MD5 |
2e7bed3e50cc3097c2986ff6b13c333c
|
| SHA1 |
3d8d5812f21bbb69cc1873fdd7eb905c1d42376b
|
| SHA256 |
86f65b430af0d12acd313a9eacdd949d72fe56b9ecf53510099248cf28ff4198
|
| SHA3 |
a3c2b473eaa1c69a6f88df1eb6205f6b57a46b3428cfa383d766b920317641c7
|
| VirtualSize |
0x866e
|
| VirtualAddress |
0x6c000
|
| SizeOfRawData |
0x8800
|
| PointerToRawData |
0x5c200
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
5.77899
|
| MD5 |
aec9697e13d10cad55927803f047a13b
|
| SHA1 |
34e2d1dfb5fa8250e5d1ce1e0a8bc797d758eed1
|
| SHA256 |
642153c0cb4f2ca8bb0b5fb6ebc75a2561fb4fd0bfb40970712c571e9664f698
|
| SHA3 |
590d11808fd45af835e3914c62014d362d1574d593c4e7cd1fada8b89225af48
|
| VirtualSize |
0x64d
|
| VirtualAddress |
0x75000
|
| SizeOfRawData |
0x800
|
| PointerToRawData |
0x64a00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
4.91452
|
| KERNEL32.dll |
DeleteCriticalSection
EnterCriticalSection
GetCommandLineW
GetLastError
GetProcessHeap
GetStartupInfoA
HeapAlloc
HeapFree
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LocalFree
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte
|
| msvcrt.dll |
__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_errno
_fmode
_initterm
_ismbblead
_lock
_onexit
_time64
_unlock
abort
calloc
exit
fclose
fopen
fprintf
fputc
fread
free
fwrite
localeconv
malloc
memcpy
memset
printf
rand
signal
srand
strerror
strlen
strncmp
vfprintf
wcslen
|
| SHELL32.dll |
CommandLineToArgvW
|
| SDL2.dll |
SDL_CreateRenderer
SDL_CreateTexture
SDL_CreateTextureFromSurface
SDL_CreateWindow
SDL_Delay
SDL_DestroyRenderer
SDL_DestroyTexture
SDL_DestroyWindow
SDL_FreeSurface
SDL_GetError
SDL_GetKeyboardState
SDL_GetTicks
SDL_GetWindowFlags
SDL_Init
SDL_LoadBMP_RW
SDL_MapRGB
SDL_PollEvent
SDL_QueryTexture
SDL_Quit
SDL_RWFromFile
SDL_RenderClear
SDL_RenderCopy
SDL_RenderDrawPoint
SDL_RenderDrawRect
SDL_RenderFillRect
SDL_RenderPresent
SDL_RenderSetIntegerScale
SDL_RenderSetLogicalSize
SDL_SetColorKey
SDL_SetHint
SDL_SetMainReady
SDL_SetRenderDrawBlendMode
SDL_SetRenderDrawColor
SDL_SetRenderTarget
SDL_SetTextureColorMod
SDL_SetWindowFullscreen
SDL_ShowSimpleMessageBox
SDL_free
SDL_iconv_string
SDL_memcpy
SDL_strlen
SDL_wcslen
|
| SDL2_mixer.dll |
Mix_CloseAudio
Mix_FadeInMusic
Mix_FreeChunk
Mix_FreeMusic
Mix_HaltChannel
Mix_HaltMusic
Mix_Init
Mix_LoadMUS
Mix_LoadWAV
Mix_OpenAudio
Mix_PlayChannel
Mix_Volume
Mix_VolumeMusic
|
| SDL2_ttf.dll |
TTF_CloseFont
TTF_Init
TTF_OpenFont
TTF_Quit
TTF_RenderText_Solid
TTF_SizeText
|
| StartAddressOfRawData |
0x14003c000
|
| EndAddressOfRawData |
0x14003c008
|
| AddressOfIndex |
0x140037e0c
|
| AddressOfCallbacks |
0x14003b038
|
| SizeOfZeroFill |
0
|
| Characteristics |
IMAGE_SCN_TYPE_REG
|
| Callbacks |
0x0000000140017F20
0x0000000140017EF0
|
[*] Warning: Tried to read outside the COFF string table to get the name of section /4!
[*] Warning: Tried to read outside the COFF string table to get the name of section /19!
[*] Warning: Tried to read outside the COFF string table to get the name of section /31!
[*] Warning: Tried to read outside the COFF string table to get the name of section /45!
[*] Warning: Tried to read outside the COFF string table to get the name of section /57!
[*] Warning: Tried to read outside the COFF string table to get the name of section /70!
[*] Warning: Tried to read outside the COFF string table to get the name of section /81!
[*] Warning: Tried to read outside the COFF string table to get the name of section /92!
[*] Warning: Tried to read outside the COFF string table to get the name of section /106!
[*] Warning: Tried to read outside the COFF string table to get the name of section /122!
[*] Warning: Tried to read outside the COFF string table to get the name of section /138!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF String Table's reported size is bigger than the remaining bytes!
[*] Warning: Section .bss has a size of 0!