| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2026-Jul-21 22:47:01 |
| Detected languages |
English - United States
|
| Debug artifacts |
C:\Users\marce\Downloads\Clover OSU\out\build\x64-Debug\CloverOSU.pdb
|
| Info | Matching compiler(s): | MASM/TASM - sig1(h) |
| Info | Interesting strings found in the binary: |
Contains domain names:
|
| Malicious | The PE contains functions mostly used by malware. |
[!] The program may be hiding some of its imports:
|
| Suspicious | VirusTotal score: 2/68 (Scanned on 2026-09-03 02:06:43) |
MaxSecure:
Trojan.Malware.300983.susgen
Symantec: ML.Attribute.HighConfidence |
| MD5 | 43f0a73c54503b3917a0eb5e8faade26 🔍 |
|---|---|
| SHA1 | c8e170aca1a7efc181a2553742d36e554bcd9fb5 🔍 |
| SHA256 | 651c49d9f0e7556469b95b4eddf97092b5184b539847385a13c1a5212b9d1f4a 🔍 |
| SHA3 | 938c7191339528849d0a0882daf6683e5af33ba70a812da46b180a339f63bd93 🔍 |
| SSDeep | 24576:/CXGGsUn9CLSx2QDM3QEYSkVtPGPDEAF6Y6uMIVTKZ/Gbnob8ZsXaEheliEnNR:oGVUiNAERY1gE8ZsXaGeEEnN 🔍 |
| Imports Hash | c9c116af15b91d0039e9aedfd27bc3e9 🔍 |
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0xf8 |
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections | 9 |
| TimeDateStamp | 2026-Jul-21 22:47:01 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xf0 |
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
| Magic | PE32+ |
|---|---|
| LinkerVersion | 14.0 |
| SizeOfCode | 0x246000 |
| SizeOfInitializedData | 0xd3c00 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x0000000000002103 (Section: .text) |
| BaseOfCode | 0x1000 |
| ImageBase | 0x140000000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 6.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 6.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x31f000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
| MD5 | cb6e19bd753d11a127f2496dcbcf1ed4 🔍 |
|---|---|
| SHA1 | a86dde5f6ed4488b3d085ab5ddf36dbb688466dd 🔍 |
| SHA256 | 5c765dc15a9fce248ac8c5ffc92ad4a11737afd5e8bcbd10cfd81a7e74e40651 🔍 |
| SHA3 | 6cd95fb7cf7ad1c406aa5481719c7addd53081fbc01994c9762abc847bb56bdc 🔍 |
| VirtualSize | 0x245fcc |
| VirtualAddress | 0x1000 |
| SizeOfRawData | 0x246000 |
| PointerToRawData | 0x400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy | 5.24962 |
| MD5 | d9b466bbd4721d0f520847d11dfbeeb2 🔍 |
|---|---|
| SHA1 | ecb412d2e2ab35d7c6cb49ed4d759d91dd099563 🔍 |
| SHA256 | d16f800cca0e46ba6e6fbd9d65e0aa4d7fe9a4414bc8b5677c016bcc81360651 🔍 |
| SHA3 | 1688177936822466f7de91a120c37b14c9b91b3b87bcf4b13d24884804666b00 🔍 |
| VirtualSize | 0xa8cb4 |
| VirtualAddress | 0x247000 |
| SizeOfRawData | 0xa8e00 |
| PointerToRawData | 0x246400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 3.89864 |
| MD5 | 7a49231ea2056dbdfffb93094ea93916 🔍 |
|---|---|
| SHA1 | 092b6bd461efbfe5f753204b1f5da1d32d38d88f 🔍 |
| SHA256 | ba3bb6700102e1213c9b2fb289ccda4b36a0c7ad57bc66237b888cc50efd79a5 🔍 |
| SHA3 | bd65a700b3358e4eb9835a3cc3ff15d2496f4453c91d79a2142702395a4b6085 🔍 |
| VirtualSize | 0xf0a1 |
| VirtualAddress | 0x2f0000 |
| SizeOfRawData | 0x6200 |
| PointerToRawData | 0x2ef200 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 0.950092 |
| MD5 | 7c6c0fa46a89d39118c7f9f5d035070c 🔍 |
|---|---|
| SHA1 | 3385515b118b70737bb22affd98c70ceb017c714 🔍 |
| SHA256 | 07516936ae1cf6d0073b70314d8fc10bad19f9465952d5fa071e9cea2931f594 🔍 |
| SHA3 | a8bde727ecf701ad67bbc9520cfeaca1645cc49d5da6d863ee3389bacd793bde 🔍 |
| VirtualSize | 0x1377c |
| VirtualAddress | 0x300000 |
| SizeOfRawData | 0x13800 |
| PointerToRawData | 0x2f5400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 5.76349 |
| MD5 | d00aae4eeb59db57c81cef174fdb058e 🔍 |
|---|---|
| SHA1 | 42e8187ad52fc9e8e3e0c0354db8aba7a0488e51 🔍 |
| SHA256 | 70cd9eede6acca1da199a4b96506b21e867ff9257f61eb8af3d19f4d96e38635 🔍 |
| SHA3 | e2c9fb58c9406677e6bc1122bcf142ba1aeaaf5c98e741ea5175f8c49a9caecf 🔍 |
| VirtualSize | 0x3d80 |
| VirtualAddress | 0x314000 |
| SizeOfRawData | 0x3e00 |
| PointerToRawData | 0x308c00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 4.09717 |
| MD5 | c573bd7cea296a9c5d230ca6b5aee1a6 🔍 |
|---|---|
| SHA1 | 04a0b9fde89c71864acaf5e74689fe4c269bd7a8 🔍 |
| SHA256 | 13bde09a110c13b533dc985f3e2c475b6f6bcf514d1a23fce5b784a653548e91 🔍 |
| SHA3 | 3679da6860e8ab20485113de9ac22dfe22ddc29d53f14ddc33a648aa98196361 🔍 |
| VirtualSize | 0x309 |
| VirtualAddress | 0x318000 |
| SizeOfRawData | 0x400 |
| PointerToRawData | 0x30ca00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 0.0111738 |
| MD5 | 1e76f6a957b2682e92b8afab8fb6cf6e 🔍 |
|---|---|
| SHA1 | 90028a5bf0db916783785d5ee344d20454ebf4b2 🔍 |
| SHA256 | 669ea5a3a7d11c0578cfedc2144f91f9d55250b57b8d6caeab4adf61a5e979b1 🔍 |
| SHA3 | 9ddb4f203cddcb3e3f49c98d29e27c64a2b62878a0756265c033856bad0bacfc 🔍 |
| VirtualSize | 0x175 |
| VirtualAddress | 0x319000 |
| SizeOfRawData | 0x200 |
| PointerToRawData | 0x30ce00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 0.431939 |
| MD5 | e6d553b38b729de5fe5a7ddfa007af2c 🔍 |
|---|---|
| SHA1 | 2f2fdc42947b7a2ec94b55d0c5d8f5e95ea865ab 🔍 |
| SHA256 | 467bd53a6c8eb7e377c9008d96efe0b353ab6363fac2714f694424a74ace807e 🔍 |
| SHA3 | 88d3183588a48c76a143635c402851ebb52ad0eb5123b74c926d87d84fced919 🔍 |
| VirtualSize | 0x459 |
| VirtualAddress | 0x31a000 |
| SizeOfRawData | 0x600 |
| PointerToRawData | 0x30d000 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 2.25118 |
| MD5 | 68f222c0a15a0de7709c8b7f688b6c39 🔍 |
|---|---|
| SHA1 | 836775ad2f29175449df72e50c87a1fbd25fa68e 🔍 |
| SHA256 | 685cdc0f5a11032e502c718166fc300e3ead9aa8ecf728fd1eaaf5a95b22c3dc 🔍 |
| SHA3 | 74dfe3b45a4ee9944c16ab8c7a8053ee9ca3c2897b59783727399477405c50f5 🔍 |
| VirtualSize | 0x399f |
| VirtualAddress | 0x31b000 |
| SizeOfRawData | 0x3a00 |
| PointerToRawData | 0x30d600 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 2.90312 |
| USER32.dll |
GetClientRect
ClientToScreen GetCursorPos TranslateMessage DispatchMessageA PeekMessageA SetProcessDPIAware MonitorFromWindow LoadCursorA ScreenToClient SetCursor SetCursorPos ReleaseDC GetDC GetWindowTextA IsWindowUnicode ReleaseCapture SetCapture GetCapture GetKeyState DefWindowProcW GetMessageExtraInfo TrackMouseEvent GetKeyboardLayout EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard SetWindowLongPtrA GetWindowLongPtrA GetForegroundWindow GetWindowRect SetForegroundWindow UpdateWindow MapVirtualKeyA GetKeyNameTextA DefWindowProcA PostQuitMessage UnregisterClassA RegisterClassExA CreateWindowExA IsWindow DestroyWindow ShowWindow SetLayeredWindowAttributes SetWindowPos GetAsyncKeyState |
|---|---|
| dwmapi.dll |
DwmEnableBlurBehindWindow
DwmGetColorizationColor DwmIsCompositionEnabled |
| d3d11.dll |
D3D11CreateDeviceAndSwapChain
|
| D3DCOMPILER_47.dll |
D3DCompile
|
| KERNEL32.dll |
SetUnhandledExceptionFilter
RaiseException IsDebuggerPresent GetModuleHandleW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive GetStartupInfoW GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime SleepConditionVariableSRW GetLastError HeapAlloc HeapFree IsDBCSLeadByte GetLocaleInfoA FreeLibrary QueryPerformanceFrequency QueryPerformanceCounter VerSetConditionMask WideCharToMultiByte MultiByteToWideChar GlobalFree GlobalLock GlobalUnlock GlobalAlloc OutputDebugStringA FreeConsole AllocConsole VirtualQuery GetTickCount Sleep LoadLibraryA GetProcAddress GetModuleHandleA GetProcessHeap InitializeSListHead |
| GDI32.dll |
CreateRectRgn
DeleteObject GetDeviceCaps |
| SHELL32.dll |
ShellExecuteA
ShellExecuteW |
| MSVCP140D.dll |
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z ?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Id_cnt@id@locale@std@@0HA ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A _Thrd_detach _Mtx_lock ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ _Mtx_unlock _Cnd_do_broadcast_at_thread_exit ?_Throw_Cpp_error@std@@YAXH@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ ?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ??0_Lockit@std@@QEAA@H@Z ??1_Lockit@std@@QEAA@XZ ?_Xlength_error@std@@YAXPEBD@Z ?_Xbad_alloc@std@@YAXXZ ?_Xinvalid_argument@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?always_noconv@codecvt_base@std@@QEBA_NXZ ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ??Bios_base@std@@QEBA_NXZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ |
| IMM32.dll |
ImmReleaseContext
ImmSetCompositionWindow ImmSetCandidateWindow ImmGetContext |
| VCRUNTIME140D.dll |
__current_exception
__current_exception_context __C_specific_handler_noexcept __std_type_info_destroy_list __vcrt_GetModuleFileNameW __vcrt_GetModuleHandleW __vcrt_LoadLibraryExW strchr memchr __C_specific_handler memcpy memset __std_exception_copy __std_exception_destroy _CxxThrowException memmove memcmp strstr |
| VCRUNTIME140_1D.dll |
__CxxFrameHandler4
|
| ucrtbased.dll |
fread
fsetpos _fseeki64 fwrite setvbuf _get_stream_buffer_pointers _lock_file _unlock_file srand _time64 __acrt_iob_func freopen_s __stdio_common_vfprintf terminate _beginthreadex roundf strcmp strncpy _wassert _wfopen fseek ftell __stdio_common_vsprintf __stdio_common_vsscanf free malloc qsort ceilf strcpy strncmp strtof floorf powf acosf atof log pow logf _rotl _free_dbg _malloc_dbg fputc _CrtDbgReportW _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit _crt_at_quick_exit _cexit _seh_filter_exe _set_app_type __setusermatherr _get_narrow_winmain_command_line _initterm _initterm_e exit _exit _set_fmode _c_exit _register_thread_local_exe_atexit_callback _configthreadlocale _set_new_mode __p__commode strcpy_s strcat_s __stdio_common_vsprintf_s _wmakepath_s _wsplitpath_s wcscpy_s fgetpos rand _errno sqrtf sinf fmodf cosf atan2f fabs strlen _CrtDbgReport strtol fgetc fflush _callnewh fclose toupper ungetc |
| Type |
RT_MANIFEST
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x196 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 4.93317 |
| MD5 | 7cb71b006fcdcf8ade80e31fd5ab8060 🔍 |
| SHA1 | 655380fb2cca01b0ca707f748fc7dcf006732518 🔍 |
| SHA256 | be8918559280a2e74748bf8f6238b568ed7cbf75183b2180a6a8a979a1ebf243 🔍 |
| SHA3 | 1a03e76e664cba5cc9c5b4570c991d3f72475aebcf3d870270d080dcf1246092 🔍 |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2026-Jul-21 22:47:01 |
| Version | 0.0 |
| SizeofData | 94 |
| AddressOfRawData | 0x2dc900 |
| PointerToRawData | 0x2dbd00 |
| Referenced File | C:\Users\marce\Downloads\Clover OSU\out\build\x64-Debug\CloverOSU.pdb |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2026-Jul-21 22:47:01 |
| Version | 0.0 |
| SizeofData | 20 |
| AddressOfRawData | 0x2dc960 |
| PointerToRawData | 0x2dbd60 |
| StartAddressOfRawData | 0x140318000 |
|---|---|
| EndAddressOfRawData | 0x140318208 |
| AddressOfIndex | 0x1402ff00c |
| AddressOfCallbacks | 0x140247998 |
| SizeOfZeroFill | 0 |
| Characteristics |
IMAGE_SCN_ALIGN_4BYTES
|
| Callbacks | (EMPTY) |
| Size | 0x140 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0x1402f5900 |
| XOR Key | 0xb4702291 |
|---|---|
| Unmarked objects | 0 |
| ASM objects (35721) | 4 |
| C objects (35721) | 10 |
| C++ objects (35721) | 37 |
| Imports (35721) | 6 |
| Imports (33145) | 19 |
| Total imports | 270 |
| C++ objects (36248) | 12 |
| Resource objects (36248) | 1 |
| Linker (36248) | 1 |