22e7d55cad20f4b6e9f1641107ddae1544904814d7f457ba06842a3b5ef49766

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2014-May-26 08:27:05
Detected languages English - United States
Debug artifacts C:\BuildAgent\temp\buildTmp\UnityPlayer_Symbols.pdb
FileVersion 4.5.0.149807
ProductVersion 4.5.0.149807
Unity Version 4.5.0f6_fd4616464986

Plugin Output

Info Matching compiler(s): Microsoft Visual C++ v6.0 DLL
Microsoft Visual C++ 6.0 - 8.0
MASM/TASM - sig1(h)
Microsoft Visual C++
Microsoft Visual C++ v6.0
Suspicious Strings found in the binary may indicate undesirable behavior: Contains references to system / monitoring tools:
  • rundll32.exe
Contains references to internet browsers:
  • firefox.exe
  • iexplore.exe
Tries to detect virtualized environments:
  • HARDWARE\DESCRIPTION\System
  • b3 eb 36 e4 4f 52 ce 11 9f 53 00 20 af 0b a7 70
Looks for VMWare presence:
  • VMWare
Accesses the WMI:
  • root\cimv2
Contains domain names:
  • connectiontester.unity3d.com
  • connectiontesterbeta.unity3d.com
  • curl.haxx.se
  • example.com
  • eyePosition.xyz
  • facilitator.unity3d.com
  • facilitatorbeta.unity3d.com
  • http://curl.haxx.se
  • http://curl.haxx.se/rfc/cookie_spec.html
  • http://msdl.microsoft.com
  • http://msdl.microsoft.com/download/symbols
  • http://stats.unity3d.com
  • http://stats.unity3d.com/HWStats.cgi
  • http://unity3d.com
  • http://www.openssl.org
  • http://www.openssl.org/support/faq.html
  • light.position.xyz
  • masterserver.unity3d.com
  • masterserverbeta.unity3d.com
  • microsoft.com
  • msdl.microsoft.com
  • normal.xyz
  • openssl.org
  • position.xyz
  • proxy.unity3d.com
  • proxybeta.unity3d.com
  • stats.unity3d.com
  • tangent.xyz
  • unity3d.com
  • vertex.xyz
  • www.openssl.org
Info Cryptographic algorithms detected in the binary: Uses constants related to CRC32
Uses constants related to MD5
Uses constants related to SHA1
Uses constants related to SHA256
Uses constants related to SHA512
Uses constants related to AES
Uses constants related to Blowfish
Uses known Mersenne Twister constants
Microsoft's Cryptography API
Suspicious The PE is possibly packed. Unusual section name found: .trace
Suspicious The PE contains functions most legitimate programs don't use. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryW
  • LoadLibraryA
Can access the registry:
  • SHDeleteKeyA
  • RegDeleteValueA
  • RegCreateKeyExW
  • RegQueryValueExW
  • RegOpenKeyExW
  • RegSetValueExW
  • RegCreateKeyA
  • RegSetValueExA
  • RegOpenKeyExA
  • RegQueryValueExA
  • RegCloseKey
Possibly launches other programs:
  • CreateProcessW
  • ShellExecuteW
Uses Microsoft's cryptographic API:
  • CryptGetHashParam
  • CryptImportKey
  • CryptVerifySignatureA
  • CryptDestroyKey
  • CryptDestroyHash
  • CryptHashData
  • CryptReleaseContext
  • CryptCreateHash
  • CryptAcquireContextA
Can create temporary files:
  • GetTempPathW
  • CreateFileA
  • CreateFileW
Has Internet access capabilities:
  • WinHttpGetIEProxyConfigForCurrentUser
Leverages the raw socket API to access the Internet:
  • htonl
  • inet_addr
  • closesocket
  • WSACleanup
  • getsockname
  • connect
  • gethostbyname
  • htons
  • WSAStartup
  • WSAAsyncGetHostByName
  • WSACancelAsyncRequest
  • gethostbyaddr
  • getaddrinfo
  • freeaddrinfo
  • getpeername
  • getsockopt
  • send
  • recv
  • shutdown
  • listen
  • accept
  • ntohs
  • bind
  • recvfrom
  • sendto
  • __WSAFDIsSet
  • WSASetLastError
  • select
  • setsockopt
  • inet_ntoa
  • ioctlsocket
  • gethostname
  • socket
  • WSAGetLastError
Enumerates local disk drives:
  • GetDriveTypeA
  • GetDriveTypeW
Can use the microphone to record audio:
  • waveInOpen
Reads the contents of the clipboard:
  • GetClipboardData
Safe VirusTotal score: 0/70 (Scanned on 2023-05-26 21:59:58) All the AVs think this file is safe.

Hashes

MD5 16bd2f439ef6e7aeab5e306f14728498
SHA1 cb3aac4f7021c0d930c746686a93b2c9f5ef710c
SHA256 22e7d55cad20f4b6e9f1641107ddae1544904814d7f457ba06842a3b5ef49766
SHA3 bfc3a6fdb61abf32144f89cc6b0b760ba4c559d367c869fe90d15d6a2acd259e
SSDeep 196608:GHylFqzTxAB9D8jQPDAQ1B/khdIPeMnEChcI5VOYceyRT8oogSaj8TBoQzpIfYf:GHylFqzTxAB9D80PkQ1B/khdIPeMECh
Imports Hash fbff86371372de2d5793d93b4bbfe0a6

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x140

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 7
TimeDateStamp 2014-May-26 08:27:05
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32
LinkerVersion 10.0
SizeOfCode 0x850400
SizeOfInitializedData 0x34ba00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x00491843 (Section: .text)
BaseOfCode 0x1000
BaseOfData 0x852000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 5.1
ImageVersion 0.0
SubsystemVersion 5.1
Win32VersionValue 0
SizeOfImage 0xba1000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 58ffb939084d56da90369fdf0a932dae
SHA1 8917337fda4b0b31c2fd1bc13ddcf88233369686
SHA256 0a6d1d0d5ff97d4fb042986e4a1b20e6deafd3dc4403140ca69fb7ddf9b916a2
SHA3 0e55020a90cf8b2d0dc5e75b527bbf02451db2ab9ea9e93f6f7860ef08839492
VirtualSize 0x8503dc
VirtualAddress 0x1000
SizeOfRawData 0x850400
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.75629

.rdata

MD5 8ceab1f406039c3f062356cdd6c5a1cc
SHA1 591f0adca8e9589647a597475ddc3d654a187bd1
SHA256 b264ac6252f54e6ed534d90bbba8dac2465d532e3868414db621cfa7df41d80a
SHA3 f97d3c31a3a1e2e881c9be11151bd6c07ecbf154de9123ce2813c39655be1520
VirtualSize 0x197bfc
VirtualAddress 0x852000
SizeOfRawData 0x197c00
PointerToRawData 0x850800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.93644

.data

MD5 679d82dcb81c1b451fdbdc0206bf4e0e
SHA1 f6ecc1729bcdadac48591f7392d4999f74ead6b0
SHA256 23f7a7e0dde2c8e2dc9adbe0c25f1b99d58b0b8ef41bdb473c64232787e97e28
SHA3 c2d15088ed912092a7fff4c812ba96072c1ee4ef83e6a14e58920b1d9cb671cb
VirtualSize 0xcbae0
VirtualAddress 0x9ea000
SizeOfRawData 0x2e200
PointerToRawData 0x9e8400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 5.64423

.trace

MD5 f774f29285243c9f4d3f03928b177ee6
SHA1 c6bb679d08e73d28381ee3990ee7b115a1fe51b4
SHA256 c8e2a4b02e9116cbcdb52b2f9eb1ad3d3325dbbb11708cbd4c4519f6fc6af9fe
SHA3 d1dc612875786aa22f266a6af1600b61aa7eb66bda86067837baedc9dfc6c05a
VirtualSize 0x1474
VirtualAddress 0xab6000
SizeOfRawData 0x1600
PointerToRawData 0xa16600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.18494

_RDATA

MD5 cee1da4353d7cf57605e8ff27e253b89
SHA1 12b088e9d5505b996d58bbf405325be6a48ec21a
SHA256 baf9627716401041a15edba7ee66c90c5ebcb0b7ff90b0355f0c4f25e3922349
SHA3 9ce792b1785a1219b2b84e6de95481e6f348d5fcf91fefe458f9cee40091441e
VirtualSize 0x540
VirtualAddress 0xab8000
SizeOfRawData 0x600
PointerToRawData 0xa17c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.33534

.rsrc

MD5 aa251729f60e95c699799181c82329cf
SHA1 65a8cc6bfa2bce9b4b106b2b4ec8e450bb3471ae
SHA256 57ddde8c56aab59c9b9096ae371041eafe5004150c6f28bd0ff61338a79104ed
SHA3 22274037c1d8028e0fe36bf8626c9ccf857f00a0201cf6dd8ee618b92361d4b3
VirtualSize 0x8a2b8
VirtualAddress 0xab9000
SizeOfRawData 0x8a400
PointerToRawData 0xa18200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.51406

.reloc

MD5 32273012797b5bce45f4db2cffeffd89
SHA1 093fb1bd302ff47c1bbce4e396577553de8af882
SHA256 faa9a84ffc0aeae41cecb37a764deff5948ad9cea009af6576e5cb91dedb967b
SHA3 538adb8607562c7d95fe22491ee0e63ad3b93d160056dc7bec75e999edb771c3
VirtualSize 0x5c0e0
VirtualAddress 0xb44000
SizeOfRawData 0x5c200
PointerToRawData 0xaa2600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 5.85355

Imports

HID.DLL HidP_GetButtonCaps
HidP_GetCaps
HidD_GetProductString
HidP_GetValueCaps
HidP_MaxDataListLength
HidP_GetData
HidD_GetPreparsedData
HidD_FreePreparsedData
HidD_GetHidGuid
WS2_32.dll htonl
inet_addr
closesocket
WSACleanup
getsockname
connect
gethostbyname
htons
WSAStartup
WSAAsyncGetHostByName
WSACancelAsyncRequest
gethostbyaddr
getaddrinfo
freeaddrinfo
getpeername
getsockopt
send
recv
shutdown
listen
accept
ntohs
bind
recvfrom
sendto
__WSAFDIsSet
WSASetLastError
select
setsockopt
inet_ntoa
ioctlsocket
gethostname
socket
WSAGetLastError
KERNEL32.dll WriteFile
FindClose
DeleteFileW
RemoveDirectoryW
FindNextFileW
FindFirstFileW
GetModuleFileNameW
lstrcpynA
lstrcpyA
lstrcpynW
FreeLibrary
GetCommandLineW
GetProcAddress
LoadLibraryW
CancelIo
GetOverlappedResult
CreateEventW
ExpandEnvironmentStringsA
CreateMutexA
GetCurrentThreadId
RaiseException
GetCurrentProcess
GetModuleHandleA
GetSystemInfo
GlobalMemoryStatusEx
GetUserDefaultLangID
GetVersionExA
GetComputerNameW
LoadLibraryA
GetTempPathW
GetModuleHandleW
GetCurrentProcessId
SetUnhandledExceptionFilter
WaitForSingleObject
CreateThread
OutputDebugStringA
SetLastError
GetEnvironmentVariableA
GetFileAttributesA
GetModuleFileNameA
GetCurrentDirectoryA
ResumeThread
GetThreadContext
SuspendThread
GetCurrentThread
IsBadReadPtr
GetWindowsDirectoryA
GetFullPathNameW
CreateSemaphoreA
Sleep
WaitForSingleObjectEx
ReleaseSemaphore
InterlockedCompareExchange
SleepEx
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
SetThreadPriority
CreateEventA
GlobalAlloc
SetEvent
ResetEvent
FileTimeToDosDateTime
FileTimeToLocalFileTime
lstrlenA
GetFileTime
VirtualQuery
GlobalMemoryStatus
GetSystemTimeAsFileTime
MoveFileExW
CreateDirectoryW
SetErrorMode
WritePrivateProfileStringW
HeapAlloc
HeapReAlloc
HeapFree
RtlUnwind
EncodePointer
DecodePointer
ExitProcess
SetConsoleCtrlHandler
ExitThread
DuplicateHandle
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetStdHandle
HeapCreate
IsProcessorFeaturePresent
InterlockedIncrement
InterlockedDecrement
HeapSize
GetLocaleInfoW
UnhandledExceptionFilter
TerminateProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
InterlockedExchange
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetHandleCount
GetFileType
SetStdHandle
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
CompareStringW
SetEnvironmentVariableA
CreateFileA
WriteConsoleW
GetProcessHeap
GetFullPathNameA
lstrcmpiA
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
VirtualFree
VirtualAlloc
GetProcessAffinityMask
OpenEventA
GetSystemDirectoryA
GetDateFormatA
GetTimeFormatA
CreateSemaphoreW
CreateMutexW
SignalObjectAndWait
ReleaseMutex
FlushConsoleInputBuffer
GetVersion
GetFileAttributesW
CreateProcessW
SetFileAttributesW
GlobalLock
GlobalUnlock
GetFileSize
ReadFile
CreateFileW
SetEndOfFile
SetFilePointer
CloseHandle
IsDebuggerPresent
WideCharToMultiByte
FormatMessageA
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
GetLastError
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
InterlockedExchangeAdd
FileTimeToSystemTime
GetFileInformationByHandle
PeekNamedPipe
GetDriveTypeA
FindFirstFileExA
GetTimeZoneInformation
ReadConsoleInputA
SetConsoleMode
GetCurrentDirectoryW
GetDriveTypeW
WaitForMultipleObjects
TerminateThread
SetThreadAffinityMask
HeapValidate
CopyFileW
HeapWalk
USER32.dll EnumWindows
SendMessageA
SetForegroundWindow
ShowWindow
IsIconic
RegisterWindowMessageA
GetUserObjectInformationA
GetThreadDesktop
GetParent
GetWindowRect
GetWindowLongA
SetWindowPos
SendMessageTimeoutA
CreateDialogParamA
SetWindowLongA
GetDlgItem
ChangeDisplaySettingsA
AdjustWindowRectEx
EnumDisplaySettingsA
GetDesktopWindow
UnregisterClassW
GetAncestor
wsprintfA
GetKeyState
GetRawInputDeviceList
GetRawInputDeviceInfoW
GetRawInputData
GetClientRect
RegisterRawInputDevices
OpenClipboard
EmptyClipboard
CloseClipboard
SetClipboardData
CreateWindowExW
CopyRect
DestroyWindow
DefWindowProcW
DestroyCursor
LoadCursorA
SetCursor
GetSystemMetrics
GetDC
GetCursorPos
CreateIconIndirect
GetUserObjectInformationW
GetProcessWindowStation
wvsprintfA
MonitorFromWindow
EnumDisplayDevicesA
GetCaretBlinkTime
PeekMessageA
GetMessageA
DispatchMessageA
ValidateRect
LoadImageA
DialogBoxParamA
IsDlgButtonChecked
CheckDlgButton
CreateDialogParamW
EnableWindow
PeekMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
MsgWaitForMultipleObjects
SetWindowTextW
RegisterClassW
PostQuitMessage
SetWindowLongW
GetWindowLongW
SetCursorPos
IsWindowVisible
ScreenToClient
GetClipboardData
IsClipboardFormatAvailable
SetCapture
ReleaseCapture
RegisterDeviceNotificationW
UnregisterDeviceNotification
SystemParametersInfoW
ClientToScreen
GetAsyncKeyState
ClipCursor
ShowCursor
GetFocus
SetFocus
WindowFromPoint
MessageBoxW
RegisterClassExW
DialogBoxParamW
OffsetRect
LoadIconA
SendDlgItemMessageW
SetDlgItemTextA
SetDlgItemTextW
MessageBoxA
ReleaseDC
EndDialog
VERSION.dll GetFileVersionInfoW
GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
ole32.dll CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
StringFromGUID2
CoCreateGuid
CoInitialize
CoUninitialize
CoSetProxyBlanket
SHLWAPI.dll PathIsDirectoryW
PathCanonicalizeW
SHDeleteKeyA
PathFileExistsW
ADVAPI32.dll CryptGetHashParam
CryptImportKey
CryptVerifySignatureA
CryptDestroyKey
RegDeleteValueA
GetUserNameA
RegCreateKeyExW
RegQueryValueExW
CryptDestroyHash
CryptHashData
CryptReleaseContext
RegOpenKeyExW
RegSetValueExW
RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegisterEventSourceA
ReportEventA
DeregisterEventSource
CryptCreateHash
CryptAcquireContextA
GDI32.dll SwapBuffers
GetObjectA
GetDeviceCaps
ChoosePixelFormat
SetPixelFormat
DeleteObject
CreateBitmap
CreateDIBSection
SHELL32.dll SHGetFolderPathW
CommandLineToArgvW
ShellExecuteW
OPENGL32.dll glIsTexture
glGetTexParameteriv
glTexSubImage2D
glPixelStorei
glCopyTexSubImage2D
glDrawBuffer
glReadBuffer
glDrawArrays
wglDeleteContext
glTexParameteri
glBegin
glVertex3f
glNormal3f
glColor4f
glEnd
glHint
glLightModelf
glLoadIdentity
glMaterialfv
glMaterialf
glGenTextures
glBindTexture
glTexImage2D
glReadPixels
glDeleteTextures
glFinish
glFogi
glFogf
glFogfv
glLightModelfv
glLightf
glLightfv
glTexGeni
glTexGenfv
glTexEnvfv
glScissor
glColor4fv
glLightModeli
glColorMaterial
glGetFloatv
glMultMatrixf
glMatrixMode
glLoadMatrixf
glPolygonMode
glFrontFace
glClearColor
glClearDepth
glClearStencil
glClear
glIsEnabled
glStencilFunc
glStencilOp
glStencilMask
glDepthFunc
glDepthMask
glCullFace
glPolygonOffset
glColorMask
glDisable
glBlendFunc
glEnable
glAlphaFunc
glTexEnvi
glTexEnvf
glDisableClientState
glEnableClientState
glColorPointer
glVertexPointer
glNormalPointer
glTexCoordPointer
glDrawElements
glGetString
glGetError
wglGetProcAddress
glGetIntegerv
wglShareLists
wglGetCurrentDC
wglGetCurrentContext
wglMakeCurrent
wglCreateContext
glViewport
WINMM.dll waveInOpen
waveInStart
waveInGetDevCapsW
waveInGetDevCapsA
waveInUnprepareHeader
waveInPrepareHeader
waveInAddBuffer
waveOutGetPosition
waveOutReset
waveOutWrite
waveInClose
waveOutOpen
waveOutClose
waveOutGetDevCapsW
waveOutGetDevCapsA
waveOutGetNumDevs
waveInGetNumDevs
timeBeginPeriod
timeEndPeriod
timeGetTime
waveInReset
waveOutUnprepareHeader
waveOutPrepareHeader
OLEAUT32.dll SysStringLen
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysFreeString
MSACM32.dll acmStreamConvert
acmStreamUnprepareHeader
acmFormatSuggest
acmStreamOpen
acmStreamSize
acmStreamPrepareHeader
IMM32.dll ImmReleaseContext
ImmSetOpenStatus
ImmGetConversionStatus
ImmGetCompositionStringW
ImmAssociateContextEx
ImmAssociateContext
ImmGetContext
ImmSetCompositionStringW
DNSAPI.dll DnsQuery_A
DnsFree
IPHLPAPI.DLL GetIpAddrTable
WINHTTP.dll WinHttpGetIEProxyConfigForCurrentUser

Delayed Imports

??$Transfer@V?$StreamedBinaryRead@$00@@@AnimationEvent@@QAEXAAV?$StreamedBinaryRead@$00@@@Z

Ordinal 1
Address 0x342f50

??$Transfer@V?$StreamedBinaryRead@$00@@@Behaviour@@QAEXAAV?$StreamedBinaryRead@$00@@@Z

Ordinal 2
Address 0xec4f0

??$Transfer@V?$StreamedBinaryRead@$00@@@Component@Unity@@QAEXAAV?$StreamedBinaryRead@$00@@@Z

Ordinal 3
Address 0xbcc0

??$Transfer@V?$StreamedBinaryRead@$00@@@GameObject@Unity@@QAEXAAV?$StreamedBinaryRead@$00@@@Z

Ordinal 4
Address 0xf070

??$Transfer@V?$StreamedBinaryRead@$00@@@GlobalGameManager@@QAEXAAV?$StreamedBinaryRead@$00@@@Z

Ordinal 5
Address 0xd05f0

??$Transfer@V?$StreamedBinaryRead@$00@@@LevelGameManager@@QAEXAAV?$StreamedBinaryRead@$00@@@Z

Ordinal 6
Address 0xd05f0

??$Transfer@V?$StreamedBinaryRead@$00@@@NamedObject@@QAEXAAV?$StreamedBinaryRead@$00@@@Z

Ordinal 7
Address 0x13320

??$Transfer@V?$StreamedBinaryRead@$00@@@Object@@IAEXAAV?$StreamedBinaryRead@$00@@@Z

Ordinal 8
Address 0x80ada0

??$Transfer@V?$StreamedBinaryRead@$00@@@Renderer@@QAEXAAV?$StreamedBinaryRead@$00@@@Z

Ordinal 9
Address 0xeaa20

??$Transfer@V?$StreamedBinaryRead@$0A@@@@AnimationEvent@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z

Ordinal 10
Address 0x342e70

??$Transfer@V?$StreamedBinaryRead@$0A@@@@Behaviour@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z

Ordinal 11
Address 0xec4a0

??$Transfer@V?$StreamedBinaryRead@$0A@@@@Component@Unity@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z

Ordinal 12
Address 0xb630

??$Transfer@V?$StreamedBinaryRead@$0A@@@@GameObject@Unity@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z

Ordinal 13
Address 0xef60

??$Transfer@V?$StreamedBinaryRead@$0A@@@@GlobalGameManager@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z

Ordinal 14
Address 0xd05f0

??$Transfer@V?$StreamedBinaryRead@$0A@@@@LevelGameManager@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z

Ordinal 15
Address 0xd05f0

??$Transfer@V?$StreamedBinaryRead@$0A@@@@NamedObject@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z

Ordinal 16
Address 0x132a0

??$Transfer@V?$StreamedBinaryRead@$0A@@@@Object@@IAEXAAV?$StreamedBinaryRead@$0A@@@@Z

Ordinal 17
Address 0x80ada0

??$Transfer@V?$StreamedBinaryRead@$0A@@@@Renderer@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z

Ordinal 18
Address 0xea890

??$Transfer@V?$StreamedBinaryWrite@$0A@@@@AnimationEvent@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z

Ordinal 19
Address 0x342ab0

??$Transfer@V?$StreamedBinaryWrite@$0A@@@@Behaviour@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z

Ordinal 20
Address 0xec660

??$Transfer@V?$StreamedBinaryWrite@$0A@@@@Component@Unity@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z

Ordinal 21
Address 0xbcf0

??$Transfer@V?$StreamedBinaryWrite@$0A@@@@GameObject@Unity@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z

Ordinal 22
Address 0xdfb0

??$Transfer@V?$StreamedBinaryWrite@$0A@@@@GlobalGameManager@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z

Ordinal 23
Address 0xd05f0

??$Transfer@V?$StreamedBinaryWrite@$0A@@@@LevelGameManager@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z

Ordinal 24
Address 0xd05f0

??$Transfer@V?$StreamedBinaryWrite@$0A@@@@NamedObject@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z

Ordinal 25
Address 0x133c0

??$Transfer@V?$StreamedBinaryWrite@$0A@@@@Object@@IAEXAAV?$StreamedBinaryWrite@$0A@@@@Z

Ordinal 26
Address 0x80ada0

??$Transfer@V?$StreamedBinaryWrite@$0A@@@@Renderer@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z

Ordinal 27
Address 0xeabc0

??$Transfer@VProxyTransfer@@@AnimationEvent@@QAEXAAVProxyTransfer@@@Z

Ordinal 28
Address 0x342b90

??$Transfer@VProxyTransfer@@@Behaviour@@QAEXAAVProxyTransfer@@@Z

Ordinal 29
Address 0xec450

??$Transfer@VProxyTransfer@@@Component@Unity@@QAEXAAVProxyTransfer@@@Z

Ordinal 30
Address 0xc760

??$Transfer@VProxyTransfer@@@GameObject@Unity@@QAEXAAVProxyTransfer@@@Z

Ordinal 31
Address 0xebe0

??$Transfer@VProxyTransfer@@@GlobalGameManager@@QAEXAAVProxyTransfer@@@Z

Ordinal 32
Address 0xd05f0

??$Transfer@VProxyTransfer@@@LevelGameManager@@QAEXAAVProxyTransfer@@@Z

Ordinal 33
Address 0xd05f0

??$Transfer@VProxyTransfer@@@NamedObject@@QAEXAAVProxyTransfer@@@Z

Ordinal 34
Address 0x13180

??$Transfer@VProxyTransfer@@@Object@@IAEXAAVProxyTransfer@@@Z

Ordinal 35
Address 0x80ada0

??$Transfer@VProxyTransfer@@@Renderer@@QAEXAAVProxyTransfer@@@Z

Ordinal 36
Address 0xeb270

??$Transfer@VRemapPPtrTransfer@@@AnimationEvent@@QAEXAAVRemapPPtrTransfer@@@Z

Ordinal 37
Address 0x3427f0

??$Transfer@VRemapPPtrTransfer@@@Behaviour@@QAEXAAVRemapPPtrTransfer@@@Z

Ordinal 38
Address 0x64720

??$Transfer@VRemapPPtrTransfer@@@Component@Unity@@QAEXAAVRemapPPtrTransfer@@@Z

Ordinal 39
Address 0xb150

??$Transfer@VRemapPPtrTransfer@@@GameObject@Unity@@QAEXAAVRemapPPtrTransfer@@@Z

Ordinal 40
Address 0xcd40

??$Transfer@VRemapPPtrTransfer@@@GlobalGameManager@@QAEXAAVRemapPPtrTransfer@@@Z

Ordinal 41
Address 0xd05f0

??$Transfer@VRemapPPtrTransfer@@@LevelGameManager@@QAEXAAVRemapPPtrTransfer@@@Z

Ordinal 42
Address 0xd05f0

??$Transfer@VRemapPPtrTransfer@@@NamedObject@@QAEXAAVRemapPPtrTransfer@@@Z

Ordinal 43
Address 0x13400

??$Transfer@VRemapPPtrTransfer@@@Object@@IAEXAAVRemapPPtrTransfer@@@Z

Ordinal 44
Address 0x80ada0

??$Transfer@VRemapPPtrTransfer@@@Renderer@@QAEXAAVRemapPPtrTransfer@@@Z

Ordinal 45
Address 0xea810

??$Transfer@VSafeBinaryRead@@@AnimationEvent@@QAEXAAVSafeBinaryRead@@@Z

Ordinal 46
Address 0x342c90

??$Transfer@VSafeBinaryRead@@@Behaviour@@QAEXAAVSafeBinaryRead@@@Z

Ordinal 47
Address 0xec5c0

??$Transfer@VSafeBinaryRead@@@Component@Unity@@QAEXAAVSafeBinaryRead@@@Z

Ordinal 48
Address 0xc7b0

??$Transfer@VSafeBinaryRead@@@GameObject@Unity@@QAEXAAVSafeBinaryRead@@@Z

Ordinal 49
Address 0xee10

??$Transfer@VSafeBinaryRead@@@GlobalGameManager@@QAEXAAVSafeBinaryRead@@@Z

Ordinal 50
Address 0xd05f0

??$Transfer@VSafeBinaryRead@@@LevelGameManager@@QAEXAAVSafeBinaryRead@@@Z

Ordinal 51
Address 0xd05f0

??$Transfer@VSafeBinaryRead@@@NamedObject@@QAEXAAVSafeBinaryRead@@@Z

Ordinal 52
Address 0x13260

??$Transfer@VSafeBinaryRead@@@Object@@IAEXAAVSafeBinaryRead@@@Z

Ordinal 53
Address 0x80ada0

??$Transfer@VSafeBinaryRead@@@Renderer@@QAEXAAVSafeBinaryRead@@@Z

Ordinal 54
Address 0xeb540

AgPmDestroySourceConnection

Ordinal 55
Address 0x8415a0

AgPmEventEnabled

Ordinal 56
Address 0x841600

AgPmEventLoggingEnabled

Ordinal 57
Address 0x841620

AgPmSubmitEvent

Ordinal 58
Address 0x8415e0

NxCreateCoreSDK

Ordinal 59
Address 0x717010

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.22943
MD5 9899318625d993501abf42ee8ba4306a
SHA1 b3767282da7d85a5bf999cdf2040f1506a2c384e
SHA256 ffff2bcdb232f0faa30a38472afaad8d0bf40c37cd83fb8895c6bb55833f1105
SHA3 6732494d1cb2c91a8d130e5fab15258b6e4b26f969a5f9b59de12898c2a9ddae

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.36503
MD5 3600dc6f9582e3c6718ccbe32b34e8cd
SHA1 8aa32216d29ab2ab7a81c0e61f4dc0947636d04c
SHA256 3252aa9d50ef270d60ceb39afcbc33f0a0b9fb3017fe24d8ecb4925528522151
SHA3 749117288412fa5e1957c7f3a070360db030f7b0e785070c508c6d0ef96a57f2

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.48442
MD5 699424833578d421edcadeffee60cc1e
SHA1 3cc10ee13b1cf2a29c1920ebee53aaf8dba374ac
SHA256 b1c4f21ed120e24a96f5f15c6da62b7c9fc737a55b37f09f5af00627272d97a4
SHA3 d6287e5ff1749f84c421a9444f777f9523f696e27f4cc32879d0a738f36bfa92

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.45193
MD5 a85e1212bb288ffa0a58ef25a24ecd9c
SHA1 560cb5851127d23a35f2b5e1404946c241da7d7c
SHA256 b413e4028c9ca5fb078f89f292c44edd8b1e53ff9418ba31d3a353e6e1e9ec30
SHA3 641c175f9e3b709405ded41844afb9b2ccfbab1ec4635c1ff59c23151aad68be

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.48102
MD5 e175ebf42539f21afb4bcc77e27bf013
SHA1 0dce57cd9a6ac14429b1d239acbedd733c8e147f
SHA256 d517ceda7958c0bbd38047bb7b13c437c1c1e2e5224776afdc914d9d12237348
SHA3 831ecbfb7b4d86421157e83fba0516de25e263951e1a22fb9b4d272e8488a4db

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.52968
MD5 534666172bf313dadfe55bc7331f9c39
SHA1 89cdf3e7ffe6e0ff15446ce2af211ae68d1473f2
SHA256 e7a4ba8de6f0c2bdb6190d27aaf9c97ced6d807c3ddbb8111cb619b2d35aaeae
SHA3 04dc85f2f275c1ccd46b3cb8e242c61d38f61c8bcdb897c00b7e9525668f20fb

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.51675
MD5 8c7ba05e1f5aca21d0782e3d383dab09
SHA1 0d1a40e7fc7bee986d19c83359ed22786f4dae25
SHA256 e8136550304231db9c29b68198dc38448d69d775cbecdc0cd52cee12d42f7869
SHA3 f40bb1559b9d59fb4e36a1ddd867231577b3cf9ed76e6b030de8c3444bf4e879

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.51087
MD5 9adece1e5e90ce2491dc640ecad526ad
SHA1 d21484460f6a6b6a45f84db12046f9807c704e78
SHA256 d1d82137c3f182de2b4bc0b845c0ecf7c7ad78942bc05e51f877b18340c73ddf
SHA3 2ac820bcbe49c94dabb532a5a9b2a0190154b9e82f10e1b44d4a108ebdc5a177

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x42028
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.51547
MD5 4daaebe37a6d45bc2b20257811acdba5
SHA1 8c1e74208057a6a3f241a2abda0d2238eba2a14e
SHA256 e7913bccae80206e443bd68ca71716d6385b0c75a7af85530d9fc84e65c8340a
SHA3 9cbef39a7897316551a5ceb2e122f47bedf648c8377fee4b524cb7b0c40d24ce

9 (#2)

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x124
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.99471
MD5 b62b6b1e4cd3054ab1b07b033356d108
SHA1 c0170ce1c06de46e62508e1d774d64e952cd111a
SHA256 6a3c71d7f89e83280ff2aa75c76d49c3239060f8ee53cfc2692e05c4fc9c7eab
SHA3 9e885ae1d0f740d603c9ef2ca1a92c8a61ddb587a0f50bee653496e0ac8fe4f6

106

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x10c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.98084
MD5 2165d3c35627dfb0f24dfa8839b650c1
SHA1 5168d394292dd31902f3f8112b22cd604529f378
SHA256 7aa854f2b6bf3241c666d0b851ecaea27082934a4b2fa43db752591dfcf9434e
SHA3 395d76a75afaab97318d9ea2f3785b5ade74331f689f98e69f22f301be84d67a

107

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.19731
MD5 0e6aa2292352c8f495f2e6451d67ef4b
SHA1 e2fa8cfad9347763200e2521d871dc3fe2733014
SHA256 336aeb2d43e4c8dee0a5b237f44eaa2675aa2a028d8ae09e6e528d5a457c9130
SHA3 fbf59c28104fc329ef6909029e4cabaf7c2c31216f1b2650bb6d144be25b0165

108

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xdc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.23439
MD5 89647fd8d7ee80b9e9e46db2a1053a29
SHA1 10dd88f00a8f56cce48908628abe1215235f624a
SHA256 692985cf029eb28098357336ea128b16211fb8fb8ab3e8f90949a952a2514f65
SHA3 01c77f889f7bb48a0744fe4f076df03cf74591df831c9d043237c2a7a7426f3e

109

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x8e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.09377
MD5 839f2e562a1f062fd873414ab28cf1d2
SHA1 ed961a5852bd1ac5b55fa8fd70fa8213754abc57
SHA256 296b7d861a9ee473d4e8a62f9d7adb025d1fbe8e61206870f426e5c870a98936
SHA3 6a4b1fab7319e07585d923be21a3d852ecc1988286973bf8440e25f2a35a3cd0

103

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.04448
Detected Filetype Icon file
MD5 3bf2dac037ce87794e66ff7f054e913f
SHA1 52ca961fd37ad960905a681d1db5157508ef1602
SHA256 2a87b1f32c5d0435090c72c392b75394f706e5750eff64fd85d25e1c622ee581
SHA3 8454d3273522657b5926068082b2cb88f6dbf352e7e9568008c0e33c792f349b

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x1a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.27443
MD5 457d8c958b77c579624fad81d57ca194
SHA1 9a558162aaeacc5d4b114ab3fbf4aeb8e7e5c860
SHA256 7a4f68dc371c399542a9fb91e66e1e44e19173d2e9680bcb38fea35cac647f88
SHA3 86669a0579e3980bc4448dc9d6186ae617357d131920f917227852455ff3f666

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x259
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.99263
MD5 a96f61e092d98c5af6806d31f3c6905e
SHA1 ee20f6337e6cfcefb40a77db7a39cf00b4e6cf3e
SHA256 9048e1792df503d40fce72e1a9552c0e52e719f8a5750f6ad443b9a16df4a002
SHA3 2a676b7e44773421ac4a2aca02cdb22b423549cdcea5946f03e5171ef06ab378

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 4.5.0.18735
ProductVersion 4.5.0.18735
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_UNKNOWN
Language English - United States
FileVersion (#2) 4.5.0.149807
ProductVersion (#2) 4.5.0.149807
Unity Version 4.5.0f6_fd4616464986
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2014-May-26 08:27:05
Version 0.0
SizeofData 76
AddressOfRawData 0x9c8ac0
PointerToRawData 0x9c72c0
Referenced File C:\BuildAgent\temp\buildTmp\UnityPlayer_Symbols.pdb

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.