Manalyze report for d6264ec4749b0aa769320af5808008603f4b2fe60cfce07256876f872dfdac50

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2020-Dec-27 21:25:33
Detected languages	English - United States Korean - Korea
TLS Callbacks	1 callback(s) detected.
Debug artifacts	c:\GamePackages\Client\Tools\Patcher\Src\TorrentPatchSfxBuilder\TorrentPatch_x86_MT_VC90.pdb
FileDescription	Metin2 Patcher
FileVersion	`1.0.2.2`
InternalName	Patcher Metin2
LegalCopyright	Copyright (C) 2016
OriginalFilename	Official Metin2-Test.exe
ProductName	Metin2 Patcher
ProductVersion	`1, 0, 2, 2`

Plugin Output

Info	Matching compiler(s):	`Microsoft Visual C++ 6.0 - 8.0` `MASM/TASM - sig2(h)` `MASM/TASM - sig1(h)`
Suspicious	Strings found in the binary may indicate undesirable behavior:	`Miscellaneous malware strings: exploit` `Contains domain names: http://schemas.xmlsoap.org http://schemas.xmlsoap.org/soap/encoding/ http://schemas.xmlsoap.org/soap/envelope/ schemas.xmlsoap.org xmlsoap.org`
Info	Cryptographic algorithms detected in the binary:	`Uses constants related to CRC32` `Uses constants related to SHA1` `Uses constants related to SHA256` `Uses constants related to SHA512` `Uses constants related to Whirlpool` `Uses constants related to AES` `Uses constants related to Twofish` `Uses constants related to TEA`
Suspicious	The PE is possibly packed.	`Unusual section name found: .SHARED`
Malicious	The PE contains functions mostly used by malware.	`[!] The program may be hiding some of its imports: LoadLibraryW GetProcAddress LoadLibraryA` `Can access the registry: RegisterHotKey RegQueryValueExW RegOpenKeyExW RegCloseKey` `Possibly launches other programs: CreateProcessW ShellExecuteW` `Uses Windows's Native API: ntohl ntohs` `Can create temporary files: GetTempPathW CreateFileA CreateFileW` `Uses functions commonly found in keyloggers: CallNextHookEx GetForegroundWindow GetAsyncKeyState` `Has Internet access capabilities: InternetConnectW InternetOpenW InternetReadFile InternetCloseHandle InternetQueryDataAvailable` `Leverages the raw socket API to access the Internet: getpeername WSAStartup WSACleanup ntohl htonl WSASetLastError WSAAddressToStringA WSAGetLastError WSAStringToAddressA htons ntohs setsockopt WSASocketW closesocket bind listen WSAIoctl WSASend getservbyname gethostbyname getsockopt getsockname WSASendTo WSARecvFrom ioctlsocket connect WSARecv accept inet_addr select __WSAFDIsSet socket` `Functions related to the privilege level: OpenProcessToken` `Enumerates local disk drives: GetDriveTypeA` `Manipulates other processes: OpenProcess` `Can take screenshots: GetDC BitBlt CreateCompatibleDC`
Malicious	The file contains overlay data.	`3566960 bytes of data starting at offset 0x34a800.` `The file contains a Zip Compressed Archive after the PE data.`
Suspicious	VirusTotal score: 2/66 (Scanned on 2026-06-19 03:00:06)	`CrowdStrike: win/grayware_confidence_60% (D)` `Trapmine: suspicious.low.ml.score`

Hashes

MD5	`f0b29c2d6467aef49d9836e3b1ca289d`
SHA1	`ae8cb05f2384a6f54e36fad726320a2611efb8fc`
SHA256	`d6264ec4749b0aa769320af5808008603f4b2fe60cfce07256876f872dfdac50`
SHA3	`3396d634db43d0e33d422a81f2dfb65ba1729de0c3d86d9a518ed399c34bcb2d`
SSDeep	`196608:PPoQHMgtFkCGSZql25iKmqX7bt62USDB/1Bd:IQHMgtFkCGlFKj7h6+99z`
Imports Hash	`7a8c15a433b2d17cd5700deee519f00f`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x100`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`7`
TimeDateStamp	2020-Dec-27 21:25:33
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_32BIT_MACHINE` `IMAGE_FILE_EXECUTABLE_IMAGE`

Image Optional Header

Magic	`PE32`
LinkerVersion	`9.0`
SizeOfCode	`0x23a200`
SizeOfInitializedData	`0x13ec00`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x001BB540 (Section: .text)`
BaseOfCode	`0x1000`
BaseOfData	`0x23c000`
ImageBase	`0x400000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`5.0`
ImageVersion	`0.0`
SubsystemVersion	`5.0`
Win32VersionValue	`0`
SizeOfImage	`0x37e000`
SizeOfHeaders	`0x400`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`3d19f184876c0df32a2605ad536ed560`
SHA1	`885a08a28f0fa12eb4cdf1c8b06509b56988177d`
SHA256	`8fb2214725fe6deb858caaf345ffcf95d355080ad5bb99b42ced4fe3accac5c9`
SHA3	`af92bd9cc583bded5073e014872d870918c230ef860e3da22495fb94061cd337`
VirtualSize	`0x23a18a`
VirtualAddress	`0x1000`
SizeOfRawData	`0x23a200`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.64174`

.rdata

MD5	`e27b5600974d888bdcd389d28a2c4833`
SHA1	`1efee2e20d97e45d1b4c2d57e90cea18abc3f358`
SHA256	`a03375ce9953c165071a5424cd7805d6e91a5f61c0b2e7e298eb23a549c736de`
SHA3	`1730eb4eab620328cd952bd155c0b1873dc05b1a42179338b9dceea680bae631`
VirtualSize	`0x9d782`
VirtualAddress	`0x23c000`
SizeOfRawData	`0x9d800`
PointerToRawData	`0x23a600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.06065`

.data

MD5	`b4862234c2b12954e12bd0f652c71271`
SHA1	`d9ddfe89b72fffe1a566fbf4f1204051e23b62c1`
SHA256	`b3e69399ff1a55a601d2bf947d498e25e06607fccf8d7effab59ee54eeb1759f`
SHA3	`679c34685924dd8c7193ce724b50ad17931720eceb039ed77827737470e0a058`
VirtualSize	`0x48228`
VirtualAddress	`0x2da000`
SizeOfRawData	`0x19a00`
PointerToRawData	`0x2d7e00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`5.54761`

.tls

MD5	`bf619eac0cdf3f68d496ea9344137e8b`
SHA1	`5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5`
SHA256	`076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560`
SHA3	`622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59`
VirtualSize	`0x2`
VirtualAddress	`0x323000`
SizeOfRawData	`0x200`
PointerToRawData	`0x2f1800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0`

.SHARED

MD5	`bf619eac0cdf3f68d496ea9344137e8b`
SHA1	`5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5`
SHA256	`076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560`
SHA3	`622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59`
VirtualSize	`0x4`
VirtualAddress	`0x324000`
SizeOfRawData	`0x200`
PointerToRawData	`0x2f1a00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_SHARED` `IMAGE_SCN_MEM_WRITE`
Entropy	`0`

.rsrc

MD5	`c0ca4e3ceaac0742c694ad7907f3e655`
SHA1	`99578e826bb15e45f27f792c03e998a8478753ba`
SHA256	`5100128c54a69ec5a34636d78e7709e13292fb9a3c3ea4647b5062e69f8ba4c7`
SHA3	`2e335077bf098d6f6c9f5d1f097fa570d230aea394e262d3e417a5732a8eaa40`
VirtualSize	`0x10bdc`
VirtualAddress	`0x325000`
SizeOfRawData	`0x10c00`
PointerToRawData	`0x2f1c00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`3.56613`

.reloc

MD5	`ead6c4e2ad09d03c6a7e781ebded8240`
SHA1	`5e6bb7d0e7f592f4ded58611db08ea165d03a050`
SHA256	`25f13be43b30d4f5f94ba4e60e131e56575f7dd0e9c89285241868415fb554f7`
SHA3	`70c2367363cc0f20dbae72c474f720c0a18a8281d2dad9935d56d372f036a1a5`
VirtualSize	`0x47e8c`
VirtualAddress	`0x336000`
SizeOfRawData	`0x48000`
PointerToRawData	`0x302800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`4.71976`

Imports

KERNEL32.dll	`DeleteCriticalSection` `GetCurrentThreadId` `LoadLibraryW` `CreateSemaphoreW` `ReleaseSemaphore` `InterlockedIncrement` `InterlockedDecrement` `SetThreadPriority` `TerminateThread` `ResumeThread` `TlsGetValue` `TlsSetValue` `GetProcessAffinityMask` `GetCurrentProcess` `ExitProcess` `GetACP` `GetUserDefaultLCID` `IsValidLocale` `GetLocaleInfoW` `SystemTimeToFileTime` `GetTempPathW` `FindClose` `FindFirstFileW` `GetTempFileNameW` `GetStdHandle` `InitializeCriticalSection` `GetTimeZoneInformation` `GetThreadLocale` `GetCurrentProcessId` `GetEnvironmentVariableW` `GetCPInfo` `IsValidCodePage` `GetDiskFreeSpaceW` `SetEnvironmentVariableW` `GetFileType` `GetFileAttributesW` `GetWindowsDirectoryW` `FindNextFileW` `RaiseException` `CreateThread` `DuplicateHandle` `ExpandEnvironmentStringsW` `GetCommandLineW` `SetErrorMode` `SetLastError` `LocalAlloc` `HeapSize` `GetProcessHeap` `InterlockedCompareExchange` `InterlockedExchange` `UnhandledExceptionFilter` `SetUnhandledExceptionFilter` `IsDebuggerPresent` `HeapAlloc` `HeapFree` `MoveFileA` `GetFileAttributesA` `GetSystemTimeAsFileTime` `GetCommandLineA` `GetStartupInfoA` `RtlUnwind` `HeapReAlloc` `ExitThread` `SetStdHandle` `GetConsoleCP` `GetConsoleMode` `FlushFileBuffers` `GetDriveTypeA` `GetFullPathNameA` `GetFullPathNameW` `MoveFileW` `RemoveDirectoryW` `WriteConsoleW` `LCMapStringA` `LCMapStringW` `GetStringTypeW` `GetModuleFileNameA` `GetCurrentThread` `SetHandleCount` `VirtualFree` `VirtualAlloc` `HeapCreate` `GetOEMCP` `FreeEnvironmentStringsA` `GetEnvironmentStrings` `FreeEnvironmentStringsW` `GetEnvironmentStringsW` `QueryPerformanceCounter` `GetModuleHandleA` `InitializeCriticalSectionAndSpinCount` `GetStringTypeA` `GetTimeFormatA` `GetDateFormatA` `GetLocaleInfoA` `EnumSystemLocalesA` `WriteConsoleA` `GetConsoleOutputCP` `GetCurrentDirectoryA` `CompareStringW` `SetEnvironmentVariableA` `SetEndOfFile` `CompareStringA` `CreateFileMappingW` `QueryPerformanceFrequency` `CreateEventA` `CreateSemaphoreA` `CreateIoCompletionPort` `GetQueuedCompletionStatus` `InterlockedExchangeAdd` `PostQueuedCompletionStatus` `QueueUserAPC` `SleepEx` `DeviceIoControl` `SetFilePointerEx` `ReadFileScatter` `GetOverlappedResult` `WriteFileGather` `VirtualLock` `VirtualUnlock` `GetFileAttributesExW` `FormatMessageA` `ResetEvent` `WaitForMultipleObjects` `SetWaitableTimer` `CreateWaitableTimerA` `lstrcpyA` `GetSystemTime` `SetThreadAffinityMask` `LeaveCriticalSection` `EnterCriticalSection` `CreateDirectoryA` `CreateFileA` `ReadFile` `SetFilePointer` `UnmapViewOfFile` `GetSystemInfo` `CreateFileMappingA` `OutputDebugStringA` `MapViewOfFile` `SetEvent` `WaitForSingleObject` `CreateEventW` `TlsFree` `TlsAlloc` `GetModuleHandleW` `DeleteFileW` `WriteFile` `CreateDirectoryW` `DeleteFileA` `GetTickCount` `lstrlenW` `WideCharToMultiByte` `MultiByteToWideChar` `LocalFree` `FormatMessageW` `CreateProcessW` `SetFileTime` `TerminateProcess` `OpenProcess` `FreeLibrary` `GetProcAddress` `LoadLibraryA` `GetVersionExW` `GetFileSize` `GetCurrentDirectoryW` `GlobalFree` `GlobalAlloc` `GlobalUnlock` `GlobalLock` `GetFileTime` `GetFileSizeEx` `CreateFileW` `SetCurrentDirectoryW` `CopyFileW` `GetModuleFileNameW` `Sleep` `OpenMutexW` `ReleaseMutex` `CloseHandle` `GetLastError` `OutputDebugStringW` `CreateMutexW` `VirtualQuery`
USER32.dll	`SetWindowTextW` `InvalidateRect` `EndDeferWindowPos` `BeginDeferWindowPos` `GetWindow` `GetMessageTime` `SystemParametersInfoW` `GetMenuItemInfoW` `GetActiveWindow` `CallNextHookEx` `RegisterHotKey` `UnregisterHotKey` `UnhookWindowsHookEx` `GetCapture` `PtInRect` `IsWindow` `TrackPopupMenu` `IsDialogMessageW` `SetWindowsHookExW` `GetSysColor` `GetUpdateRgn` `InflateRect` `GetIconInfo` `CreateIconIndirect` `EndPaint` `GetWindowDC` `BeginPaint` `LoadBitmapW` `DestroyIcon` `LoadImageW` `CreateDialogParamW` `GetDlgItem` `DrawFrameControl` `DrawIconEx` `GetClassNameW` `GetWindowTextW` `GetWindowTextLengthW` `SetMenu` `DrawIcon` `GetUpdateRect` `BringWindowToTop` `IsZoomed` `IsIconic` `GetDesktopWindow` `GetSystemMenu` `FlashWindow` `CreateDialogIndirectParamW` `GetForegroundWindow` `DrawTextW` `CopyRect` `DrawFocusRect` `OffsetRect` `GetMessageW` `ValidateRect` `MapWindowPoints` `DestroyCursor` `keybd_event` `IsClipboardFormatAvailable` `HideCaret` `DestroyAcceleratorTable` `CreateAcceleratorTableW` `TranslateAcceleratorW` `DrawEdge` `UnionRect` `ChildWindowFromPoint` `DefFrameProcW` `TranslateMDISysAccel` `DefMDIChildProcW` `GetMenuStringW` `GetMessagePos` `DrawStateW` `DrawStateA` `RegisterClipboardFormatW` `ChangeDisplaySettingsW` `EnumDisplaySettingsW` `SetScrollInfo` `KillTimer` `GetFocus` `DispatchMessageA` `PeekMessageA` `SetWindowPos` `SetWindowLongW` `FillRect` `GetWindowRect` `GetAsyncKeyState` `VkKeyScanW` `DispatchMessageW` `TranslateMessage` `ReleaseDC` `GetDC` `CheckMenuRadioItem` `CheckMenuItem` `InsertMenuItemW` `EnableMenuItem` `GetMenuItemCount` `GetSubMenu` `CreateMenu` `AppendMenuW` `DrawMenuBar` `GetMenuState` `InsertMenuW` `RemoveMenu` `ModifyMenuW` `DestroyMenu` `CreatePopupMenu` `SetMenuItemInfoW` `UnregisterClassW` `GetKeyState` `RegisterWindowMessageW` `DdePostAdvise` `DdeConnect` `DdeNameService` `DdeCreateStringHandleW` `DdeClientTransaction` `DdeDisconnect` `DdeInitializeW` `DdeGetLastError` `DdeCreateDataHandle` `DdeGetData` `DdeFreeDataHandle` `DdeUninitialize` `DdeQueryStringW` `DdeFreeStringHandle` `DestroyWindow` `SendMessageW` `SetCursor` `RegisterClassW` `MessageBeep` `PeekMessageW` `MessageBoxW` `PostThreadMessageW` `MessageBoxA` `GetScrollInfo` `IsWindowEnabled` `SetCursorPos` `ReleaseCapture` `SetCapture` `IsWindowVisible` `CallWindowProcW` `DeferWindowPos` `ClientToScreen` `ScreenToClient` `UpdateWindow` `RedrawWindow` `SetParent` `GetCursorPos` `WindowFromPoint` `SetForegroundWindow` `RegisterClipboardFormatA` `OpenClipboard` `SetClipboardData` `CloseClipboard` `SetWindowRgn` `GetWindowLongW` `GetClientRect` `AdjustWindowRectEx` `PostQuitMessage` `DefWindowProcW` `LoadIconW` `LoadCursorW` `CreateWindowExW` `MoveWindow` `GetSystemMetrics` `PostMessageW` `GetParent` `SetTimer` `ScrollWindow` `ShowWindow` `EnableWindow` `ShowCursor` `SetFocus`
GDI32.dll	`Arc` `CreateSolidBrush` `SelectClipRgn` `GetTextColor` `GetBkColor` `SetMapMode` `GetRegionData` `ExtCreateRegion` `OffsetRgn` `SetViewportExtEx` `SetWindowExtEx` `SetViewportOrgEx` `SetWindowOrgEx` `GetTextExtentExPointW` `GetCharABCWidthsW` `SetROP2` `TextOutW` `PolyBezier` `Polyline` `SetPixel` `GetPixel` `ExtFloodFill` `ExtSelectClipRgn` `GetClipBox` `SetTextColor` `SetStretchBltMode` `SaveDC` `RestoreDC` `SetBkMode` `SetBkColor` `CreateBitmap` `CreateCompatibleBitmap` `BitBlt` `DeleteDC` `CreateCompatibleDC` `GetPaletteEntries` `GetObjectW` `ExcludeClipRect` `CreateRectRgn` `GetTextExtentPoint32W` `SelectPalette` `RealizePalette` `GdiFlush` `SelectObject` `GetTextMetricsW` `GetDeviceCaps` `CreateFontIndirectW` `DeleteEnhMetaFile` `CopyEnhMetaFileW` `GetEnhMetaFileW` `CreateDCW` `StartDocW` `EndPage` `StartPage` `EndDoc` `SetAbortProc` `EnumFontFamiliesExW` `CreateICW` `PatBlt` `GetDIBColorTable` `CreateDIBitmap` `GetDIBits` `CreateDIBSection` `SetTextAlign` `CreateRectRgnIndirect` `GetSystemPaletteEntries` `CombineRgn` `RectInRegion` `PtInRegion` `EqualRgn` `GetRgnBox` `MoveToEx` `LineTo` `CreatePen` `ExtCreatePen` `CreatePatternBrush` `CreateHatchBrush` `CreatePalette` `GetNearestPaletteIndex` `Pie` `Polygon` `SetPolyFillMode` `PolyPolygon` `Rectangle` `RoundRect` `Ellipse` `GetStockObject` `SetBrushOrgEx` `MaskBlt` `StretchBlt` `StretchDIBits` `DeleteObject`
SHELL32.dll	`ShellExecuteW` `ShellExecuteExW` `SHGetMalloc` `SHGetPathFromIDListW` `SHGetSpecialFolderLocation` `Shell_NotifyIconW` `DragAcceptFiles` `DragFinish` `DragQueryPoint` `DragQueryFileW` `ExtractIconW` `ExtractIconExW` `SHFileOperationW`
ole32.dll	`OleInitialize` `OleUninitialize` `CoCreateInstance` `RegisterDragDrop` `CoLockObjectExternal` `RevokeDragDrop` `OleSetClipboard` `OleIsCurrentClipboard` `OleFlushClipboard` `ReleaseStgMedium` `OleGetClipboard` `OleCreate` `OleSetContainedObject`
OLEAUT32.dll	`SysAllocString` `VariantClear`
COMCTL32.dll	`ImageList_BeginDrag` `#17` `#16` `CreateStatusWindowW` `ImageList_GetIconSize` `ImageList_Draw` `ImageList_GetImageCount` `ImageList_Create` `ImageList_Destroy` `ImageList_ReplaceIcon` `ImageList_Add` `ImageList_SetDragCursorImage` `ImageList_EndDrag` `ImageList_DragMove` `ImageList_DragEnter` `ImageList_DragLeave`
WININET.dll	`HttpQueryInfoW` `HttpSendRequestW` `HttpOpenRequestW` `InternetConnectW` `InternetOpenW` `InternetReadFile` `InternetCloseHandle` `InternetQueryDataAvailable`
WS2_32.dll	`getpeername` `WSAStartup` `WSACleanup` `ntohl` `htonl` `WSASetLastError` `WSAAddressToStringA` `WSAGetLastError` `WSAStringToAddressA` `htons` `ntohs` `setsockopt` `WSASocketW` `closesocket` `bind` `listen` `WSAIoctl` `WSASend` `getservbyname` `gethostbyname` `getsockopt` `getsockname` `WSASendTo` `WSARecvFrom` `ioctlsocket` `connect` `WSARecv` `accept` `inet_addr` `select` `__WSAFDIsSet` `socket`
MSWSOCK.dll	`GetAcceptExSockaddrs` `AcceptEx`
WINMM.dll	`timeGetTime`
COMDLG32.dll	`PageSetupDlgW` `CommDlgExtendedError` `PrintDlgW` `ChooseColorW` `GetSaveFileNameW` `GetOpenFileNameW` `ChooseFontW`
ADVAPI32.dll	`EqualSid` `GetTokenInformation` `AllocateAndInitializeSid` `FreeSid` `RegQueryValueExW` `RegOpenKeyExW` `RegCloseKey` `OpenProcessToken` `OpenThreadToken`

Delayed Imports

1

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x10828`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.51883`
MD5	`88170ae36e34397bfeaca74bdcb5a980`
SHA1	`f7ee046526d74e07ff560a4e909f25e9137851ec`
SHA256	`12b7484419bd165dfd0e72948945c61129ac5af856f1466e5bbd3c54a8936023`
SHA3	`4fd7ff62e9096b2d62c9550d6feb8712755b2807f05ecbccf963e8b763270820`

101

Type	`RT_GROUP_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.98048`
Detected Filetype	Icon file
MD5	`38388dda6548693f4d42f2241a4218d7`
SHA1	`78bedd12a20f97e31e58742381f3d0ca1edb4715`
SHA256	`cd0991dd595a1392452a8c7ccf089e73626bc6eed1fd3f54ee4c6aa7ffbaedba`
SHA3	`9ace1e9f008d60580379cdfdcd4119706c82d52d2e5fdb9e5745fa00864cc1a8`

1 (#2)

Type	`RT_VERSION`
Language	Korean - Korea
Codepage	UNKNOWN
Size	`0x2b8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.34264`
MD5	`5b010fd53f8abf7ab1a5efe290e80ad9`
SHA1	`388dc934f0dbb0ee17b650ad4d105c35c54c13e0`
SHA256	`1af3c044d3054dbf09662b001820dbcf2ddd6ce5a934dfde0b832756a94f6758`
SHA3	`40a6e2209b3a2a354a255db958991723cdfb4d20f5956d0f405b31f38948dd29`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	1.0.2.2
ProductVersion	1.0.2.2
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT_WINDOWS32` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	UNKNOWN
FileDescription	Metin2 Patcher
FileVersion (#2)	1.0.2.2
InternalName	Patcher Metin2
LegalCopyright	Copyright (C) 2016
OriginalFilename	Official Metin2-Test.exe
ProductName	Metin2 Patcher
ProductVersion (#2)	1, 0, 2, 2

Resource LangID	Korean - Korea

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	2020-Dec-27 21:25:33
Version	`0.0`
SizeofData	`117`
AddressOfRawData	`0x2910d8`
PointerToRawData	`0x28f6d8`
Referenced File	c:\GamePackages\Client\Tools\Patcher\Src\TorrentPatchSfxBuilder\TorrentPatch_x86_MT_VC90.pdb

TLS Callbacks

StartAddressOfRawData	`0x723000`
EndAddressOfRawData	`0x723001`
AddressOfIndex	`0x71af90`
AddressOfCallbacks	`0x63d97c`
SizeOfZeroFill	`0`
Characteristics	`IMAGE_SCN_TYPE_REG`
Callbacks	`0x005EE040`

Load Configuration

RICH Header

XOR Key	`0x4cecfb0a`
Unmarked objects	`0`
C++ objects (VS98 SP6 build 8804)	`11`
150 (20413)	`1`
ASM objects (VS2008 SP1 build 30729)	`56`
C objects (VS2008 SP1 build 30729)	`289`
C++ objects (VS2008 SP1 build 30729)	`332`
C objects (VS2012 build 50727 / VS2005 build 50727)	`7`
Imports (VS2012 build 50727 / VS2005 build 50727)	`27`
Total imports	`642`
138 (VS2008 SP1 build 30729)	`172`
Linker (VS2008 SP1 build 30729)	`1`
Resource objects (VS2008 SP1 build 30729)	`1`

Errors

Leave a comment

No comments yet.