FreeFireESP.dll

Description:

Authors:

Version:

Architecture: 64-bit

Operating System:

SHA256: 42abbd87aeb9b1d60232dbceb94a44bb

File Size: 563.5 KB

Uploaded At: June 16, 2026, 2:06 a.m.

Views: 20

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

No exported functions.

Imported DLLs & Functions

ADVAPI32.dll

RegCloseKey (Address: 0x180058010)
RegOpenKeyExA (Address: 0x180058000)
RegQueryValueExA (Address: 0x180058008)

GDI32.dll

CreateCompatibleDC (Address: 0x180058030)
CreateDIBSection (Address: 0x180058028)
DeleteDC (Address: 0x180058038)
DeleteObject (Address: 0x180058040)
SelectObject (Address: 0x180058020)

gdiplus.dll

GdipAddPathArc (Address: 0x180058680)
GdipAlloc (Address: 0x1800585e0)
GdipClosePathFigure (Address: 0x180058648)
GdipCreateFont (Address: 0x180058608)
GdipCreateFontFamilyFromName (Address: 0x1800586b8)
GdipCreateFromHDC (Address: 0x180058660)
GdipCreatePath (Address: 0x1800585f8)
GdipCreatePen1 (Address: 0x1800586b0)
GdipCreateSolidFill (Address: 0x180058610)
GdipCreateStringFormat (Address: 0x1800585a8)
GdipDeleteBrush (Address: 0x1800585d8)
GdipDeleteFont (Address: 0x180058698)
GdipDeleteFontFamily (Address: 0x1800585b0)
GdipDeleteGraphics (Address: 0x180058688)
GdipDeletePath (Address: 0x1800585e8)
GdipDeletePen (Address: 0x1800586a8)
GdipDeleteStringFormat (Address: 0x180058690)
GdipDrawEllipse (Address: 0x180058678)
GdipDrawLine (Address: 0x180058628)
GdipDrawLines (Address: 0x1800586a0)
GdipDrawRectangle (Address: 0x180058630)
GdipDrawString (Address: 0x180058658)
GdipFillEllipse (Address: 0x180058668)
GdipFillPath (Address: 0x180058618)
GdipFillRectangle (Address: 0x180058640)
GdipFree (Address: 0x180058650)
GdiplusShutdown (Address: 0x1800585a0)
GdiplusStartup (Address: 0x1800585b8)
GdipSetPenColor (Address: 0x1800585c8)
GdipSetPenEndCap (Address: 0x180058670)
GdipSetPenStartCap (Address: 0x1800585d0)
GdipSetPenWidth (Address: 0x180058620)
GdipSetPixelOffsetMode (Address: 0x180058638)
GdipSetSmoothingMode (Address: 0x1800585f0)
GdipSetStringFormatAlign (Address: 0x1800585c0)
GdipSetStringFormatLineAlign (Address: 0x180058600)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x180058440)
AcquireSRWLockShared (Address: 0x180058448)
CancelWaitableTimer (Address: 0x180058240)
CloseHandle (Address: 0x1800581c8)
ConnectNamedPipe (Address: 0x180058278)
CreateFileW (Address: 0x180058260)
CreateMutexW (Address: 0x180058178)
CreateNamedPipeW (Address: 0x180058258)
CreatePipe (Address: 0x180058168)
CreateProcessA (Address: 0x1800581d8)
CreateThread (Address: 0x1800581d0)
CreateToolhelp32Snapshot (Address: 0x180058198)
CreateWaitableTimerExW (Address: 0x180058250)
CreateWaitableTimerW (Address: 0x180058228)
DecodePointer (Address: 0x180058498)
DeleteCriticalSection (Address: 0x180058248)
DisableThreadLibraryCalls (Address: 0x1800581e8)
DisconnectNamedPipe (Address: 0x180058268)
EncodePointer (Address: 0x180058490)
EnterCriticalSection (Address: 0x180058220)
EnumSystemLocalesW (Address: 0x1800580e0)
ExitProcess (Address: 0x180058350)
ExitThread (Address: 0x180058360)
FindClose (Address: 0x1800580a8)
FindFirstFileExW (Address: 0x1800580a0)
FindNextFileW (Address: 0x180058098)
FlsAlloc (Address: 0x180058120)
FlsFree (Address: 0x180058108)
FlsGetValue (Address: 0x180058118)
FlsSetValue (Address: 0x180058110)
FlushFileBuffers (Address: 0x1800580c8)
FlushInstructionCache (Address: 0x180058338)
FreeEnvironmentStringsW (Address: 0x180058060)
FreeLibrary (Address: 0x180058370)
FreeLibraryAndExitThread (Address: 0x1800581e0)
GetACP (Address: 0x180058088)
GetCommandLineA (Address: 0x180058078)
GetCommandLineW (Address: 0x180058070)
GetConsoleMode (Address: 0x1800580b8)
GetConsoleOutputCP (Address: 0x1800580c0)
GetCPInfo (Address: 0x1800584b0)
GetCurrentProcess (Address: 0x1800582d8)
GetCurrentProcessId (Address: 0x180058328)
GetCurrentThread (Address: 0x180058280)
GetCurrentThreadId (Address: 0x1800582f0)
GetEnvironmentStringsW (Address: 0x180058068)
GetExitCodeThread (Address: 0x180058468)
GetFileAttributesA (Address: 0x1800581b0)
GetFileSizeEx (Address: 0x1800580d8)
GetFileType (Address: 0x180058128)
GetLastError (Address: 0x180058270)
GetLocaleInfoW (Address: 0x1800580f8)
GetModuleFileNameW (Address: 0x180058138)
GetModuleHandleA (Address: 0x180058428)
GetModuleHandleExW (Address: 0x180058358)
GetModuleHandleW (Address: 0x180058330)
GetNativeSystemInfo (Address: 0x180058470)
GetOEMCP (Address: 0x180058080)
GetProcAddress (Address: 0x180058208)
GetProcessHeap (Address: 0x180058058)
GetStartupInfoW (Address: 0x1800583d8)
GetStdHandle (Address: 0x180058130)
GetStringTypeW (Address: 0x1800584a8)
GetSystemInfo (Address: 0x1800582b0)
GetSystemTimeAsFileTime (Address: 0x180058488)
GetTempPathA (Address: 0x180058298)
GetThreadContext (Address: 0x180058320)
GetTickCount (Address: 0x1800581f0)
GetTickCount64 (Address: 0x1800581a8)
GetUserDefaultLCID (Address: 0x1800580e8)
HeapAlloc (Address: 0x180058310)
HeapCreate (Address: 0x1800582c0)
HeapDestroy (Address: 0x180058318)
HeapFree (Address: 0x1800582d0)
HeapReAlloc (Address: 0x180058308)
HeapSize (Address: 0x180058420)
InitializeCriticalSection (Address: 0x180058238)
InitializeCriticalSectionAndSpinCount (Address: 0x180058398)
InitializeCriticalSectionEx (Address: 0x180058480)
InitializeSListHead (Address: 0x1800583d0)
InterlockedFlushSList (Address: 0x1800583a8)
IsDebuggerPresent (Address: 0x1800583e0)
IsProcessorFeaturePresent (Address: 0x1800583e8)
IsValidCodePage (Address: 0x180058090)
IsValidLocale (Address: 0x1800580f0)
LCMapStringEx (Address: 0x1800584a0)
LCMapStringW (Address: 0x180058100)
LeaveCriticalSection (Address: 0x180058230)
LoadLibraryExW (Address: 0x180058368)
MultiByteToWideChar (Address: 0x1800581f8)
OpenProcess (Address: 0x180058190)
OpenThread (Address: 0x180058348)
PeekNamedPipe (Address: 0x180058170)
Process32FirstW (Address: 0x1800581c0)
Process32NextW (Address: 0x1800581b8)
QueryPerformanceCounter (Address: 0x180058290)
QueryPerformanceFrequency (Address: 0x180058288)
RaiseException (Address: 0x1800583b8)
ReadConsoleW (Address: 0x1800580b0)
ReadFile (Address: 0x180058140)
ReleaseMutex (Address: 0x180058188)
ReleaseSRWLockExclusive (Address: 0x180058430)
ReleaseSRWLockShared (Address: 0x180058438)
ResumeThread (Address: 0x180058300)
RtlCaptureContext (Address: 0x180058410)
RtlLookupFunctionEntry (Address: 0x180058408)
RtlPcToFileHeader (Address: 0x1800583c0)
RtlUnwind (Address: 0x1800583b0)
RtlUnwindEx (Address: 0x1800583c8)
RtlVirtualUnwind (Address: 0x180058400)
SetEndOfFile (Address: 0x180058418)
SetFilePointerEx (Address: 0x1800580d0)
SetHandleInformation (Address: 0x180058148)
SetLastError (Address: 0x1800583a0)
SetStdHandle (Address: 0x180058050)
SetThreadContext (Address: 0x180058340)
SetThreadPriority (Address: 0x180058160)
SetUnhandledExceptionFilter (Address: 0x1800583f0)
SetWaitableTimer (Address: 0x180058218)
Sleep (Address: 0x1800581a0)
SleepConditionVariableSRW (Address: 0x180058458)
SuspendThread (Address: 0x1800582f8)
TerminateProcess (Address: 0x180058158)
Thread32First (Address: 0x1800582e8)
Thread32Next (Address: 0x1800582e0)
TlsAlloc (Address: 0x180058390)
TlsFree (Address: 0x180058378)
TlsGetValue (Address: 0x180058388)
TlsSetValue (Address: 0x180058380)
TryAcquireSRWLockExclusive (Address: 0x180058450)
UnhandledExceptionFilter (Address: 0x1800583f8)
VirtualAlloc (Address: 0x1800582a8)
VirtualFree (Address: 0x1800582a0)
VirtualProtect (Address: 0x1800582c8)
VirtualQuery (Address: 0x1800582b8)
WaitForSingleObject (Address: 0x180058180)
WaitForSingleObjectEx (Address: 0x180058460)
WakeAllConditionVariable (Address: 0x180058478)
WideCharToMultiByte (Address: 0x180058210)
WriteConsoleW (Address: 0x180058200)
WriteFile (Address: 0x180058150)

USER32.dll

BeginPaint (Address: 0x180058520)
ClientToScreen (Address: 0x180058510)
CreateWindowExW (Address: 0x1800584e0)
DefWindowProcW (Address: 0x1800584d8)
DispatchMessageW (Address: 0x180058508)
EndPaint (Address: 0x180058528)
EnumChildWindows (Address: 0x180058550)
EnumWindows (Address: 0x180058568)
FindWindowA (Address: 0x180058570)
GetAsyncKeyState (Address: 0x180058540)
GetClassNameA (Address: 0x180058558)
GetClientRect (Address: 0x180058538)
GetMessageW (Address: 0x1800584d0)
GetSystemMetrics (Address: 0x1800584e8)
GetWindowTextA (Address: 0x180058560)
GetWindowThreadProcessId (Address: 0x180058548)
IsWindow (Address: 0x180058500)
mouse_event (Address: 0x1800584c8)
PostQuitMessage (Address: 0x180058578)
RegisterClassExW (Address: 0x1800584f0)
SendInput (Address: 0x1800584c0)
ShowWindow (Address: 0x1800584f8)
TranslateMessage (Address: 0x180058518)
UpdateLayeredWindow (Address: 0x180058530)

WINMM.dll

timeBeginPeriod (Address: 0x180058590)
timeEndPeriod (Address: 0x180058588)