OrangeEmu64.dll

Description: OrangeEmu Core

Authors: CODEX, 2018

Version: 1.0.0.4

Architecture: 64-bit

Operating System: Windows NT

SHA256: 7c8eb4653d0c5d4f1f0eb642800c4b5d

File Size: 3.5 MB

Uploaded At: Sept. 3, 2026, 11:18 p.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess

Exported Functions

CDX (Ordinal: 1, Address: 0x1440)

Imported DLLs & Functions

ADVAPI32.dll

CloseServiceHandle (Address: 0x3b731aa0)
CloseServiceHandle (Address: 0x3b7319c8)
EnumServicesStatusExW (Address: 0x3b731a88)
EnumServicesStatusExW (Address: 0x3b7319e0)
OpenSCManagerW (Address: 0x3b731a80)
OpenSCManagerW (Address: 0x3b7319e8)
OpenServiceW (Address: 0x3b731a90)
OpenServiceW (Address: 0x3b7319d8)
QueryServiceConfigW (Address: 0x3b731a98)
QueryServiceConfigW (Address: 0x3b7319d0)
RegCloseKey (Address: 0x3b7319f0)
RegCloseKey (Address: 0x3b731538)
RegCreateKeyExW (Address: 0x3b731550)
RegOpenKeyExA (Address: 0x3b7319c0)
RegOpenKeyExW (Address: 0x3b731540)
RegQueryValueExA (Address: 0x3b7319b8)
RegQueryValueExW (Address: 0x3b731548)
RegSetValueExW (Address: 0x3b731558)

KERNEL32.dll

AreFileApisANSI (Address: 0x3b731300)
ChangeTimerQueueTimer (Address: 0x3b731400)
CloseHandle (Address: 0x3b731668)
CloseHandle (Address: 0x3b731020)
CompareStringW (Address: 0x3b731450)
CreateDirectoryW (Address: 0x3b731128)
CreateEventA (Address: 0x3b7317d0)
CreateEventW (Address: 0x3b7313a0)
CreateFileA (Address: 0x3b7317b0)
CreateFileW (Address: 0x3b731798)
CreateFileW (Address: 0x3b731178)
CreateIoCompletionPort (Address: 0x3b7311d8)
CreateSemaphoreW (Address: 0x3b7313b0)
CreateThread (Address: 0x3b731210)
CreateTimerQueue (Address: 0x3b7313b8)
CreateTimerQueueTimer (Address: 0x3b7313f8)
CreateToolhelp32Snapshot (Address: 0x3b731640)
CreateToolhelp32Snapshot (Address: 0x3b731018)
DecodePointer (Address: 0x3b731320)
DecodePointer (Address: 0x3b731860)
DeleteCriticalSection (Address: 0x3b731718)
DeleteCriticalSection (Address: 0x3b7311e0)
DeleteFileW (Address: 0x3b7311f0)
DeleteTimerQueueTimer (Address: 0x3b731408)
DisableThreadLibraryCalls (Address: 0x3b731250)
DuplicateHandle (Address: 0x3b7312a0)
EncodePointer (Address: 0x3b731318)
EncodePointer (Address: 0x3b731858)
EnterCriticalSection (Address: 0x3b7311a8)
EnterCriticalSection (Address: 0x3b731700)
EnumResourceLanguagesA (Address: 0x3b731778)
EnumResourceLanguagesW (Address: 0x3b731780)
EnumResourceNamesA (Address: 0x3b731768)
EnumResourceNamesW (Address: 0x3b731770)
EnumResourceTypesA (Address: 0x3b731788)
EnumResourceTypesW (Address: 0x3b731790)
EnumSystemLocalesW (Address: 0x3b731478)
ExitProcess (Address: 0x3b7314a0)
ExitProcess (Address: 0x3b7316f8)
ExitProcess (Address: 0x3b731a48)
FindResourceExA (Address: 0x3b731740)
FindResourceExW (Address: 0x3b731738)
FindResourceW (Address: 0x3b731100)
FlsAlloc (Address: 0x3b731880)
FlsFree (Address: 0x3b731870)
FlsGetValue (Address: 0x3b731868)
FlsSetValue (Address: 0x3b731800)
FlushFileBuffers (Address: 0x3b7314b8)
FlushFileBuffers (Address: 0x3b7317a8)
FlushInstructionCache (Address: 0x3b7310b0)
FormatMessageA (Address: 0x3b731138)
FreeEnvironmentStringsA (Address: 0x3b7318f0)
FreeEnvironmentStringsW (Address: 0x3b731900)
FreeEnvironmentStringsW (Address: 0x3b7312e0)
FreeLibrary (Address: 0x3b7312c8)
FreeLibrary (Address: 0x3b731628)
FreeLibrary (Address: 0x3b731a58)
FreeLibraryAndExitThread (Address: 0x3b7312c0)
FreeResource (Address: 0x3b7310f0)
GetACP (Address: 0x3b731840)
GetACP (Address: 0x3b7314e0)
GetCommandLineA (Address: 0x3b731338)
GetCommandLineA (Address: 0x3b731808)
GetConsoleCP (Address: 0x3b731960)
GetConsoleCP (Address: 0x3b7314c0)
GetConsoleMode (Address: 0x3b7314c8)
GetConsoleMode (Address: 0x3b731968)
GetConsoleOutputCP (Address: 0x3b731990)
GetCPInfo (Address: 0x3b731838)
GetCPInfo (Address: 0x3b731360)
GetCurrentDirectoryW (Address: 0x3b731368)
GetCurrentProcess (Address: 0x3b731070)
GetCurrentProcess (Address: 0x3b731620)
GetCurrentProcess (Address: 0x3b731a08)
GetCurrentProcessId (Address: 0x3b7310d8)
GetCurrentProcessId (Address: 0x3b7317b8)
GetCurrentThread (Address: 0x3b7314f0)
GetCurrentThread (Address: 0x3b7316b0)
GetCurrentThread (Address: 0x3b731a10)
GetCurrentThreadId (Address: 0x3b731650)
GetCurrentThreadId (Address: 0x3b7310d0)
GetDateFormatW (Address: 0x3b731440)
GetDriveTypeW (Address: 0x3b731370)
GetEnvironmentStrings (Address: 0x3b7318f8)
GetEnvironmentStringsW (Address: 0x3b731908)
GetEnvironmentStringsW (Address: 0x3b7312e8)
GetEnvironmentVariableA (Address: 0x3b731180)
GetFileAttributesExW (Address: 0x3b7312f8)
GetFileAttributesW (Address: 0x3b731170)
GetFileType (Address: 0x3b7318d8)
GetFileType (Address: 0x3b731490)
GetFullPathNameA (Address: 0x3b731378)
GetLastError (Address: 0x3b731190)
GetLastError (Address: 0x3b7317c0)
GetLastError (Address: 0x3b731a50)
GetLocaleInfoA (Address: 0x3b731940)
GetLocaleInfoW (Address: 0x3b731460)
GetLocalTime (Address: 0x3b7316d0)
GetLogicalProcessorInformation (Address: 0x3b7313f0)
GetModuleFileNameA (Address: 0x3b731508)
GetModuleFileNameA (Address: 0x3b7318e8)
GetModuleFileNameW (Address: 0x3b731a20)
GetModuleFileNameW (Address: 0x3b7314f8)
GetModuleFileNameW (Address: 0x3b7317c8)
GetModuleHandleA (Address: 0x3b7312b8)
GetModuleHandleA (Address: 0x3b731a68)
GetModuleHandleA (Address: 0x3b7317d8)
GetModuleHandleExW (Address: 0x3b7314a8)
GetModuleHandleW (Address: 0x3b731720)
GetModuleHandleW (Address: 0x3b731080)
GetNumaHighestNodeNumber (Address: 0x3b731410)
GetOEMCP (Address: 0x3b7314e8)
GetOEMCP (Address: 0x3b731848)
GetProcAddress (Address: 0x3b731a70)
GetProcAddress (Address: 0x3b7316e0)
GetProcAddress (Address: 0x3b7310b8)
GetProcessAffinityMask (Address: 0x3b731a28)
GetProcessAffinityMask (Address: 0x3b731418)
GetProcessAffinityMask (Address: 0x3b7316a0)
GetProcessHeap (Address: 0x3b731498)
GetQueuedCompletionStatus (Address: 0x3b731248)
GetStartupInfoA (Address: 0x3b7318e0)
GetStartupInfoW (Address: 0x3b7313a8)
GetStdHandle (Address: 0x3b731488)
GetStdHandle (Address: 0x3b7318d0)
GetStringTypeA (Address: 0x3b731930)
GetStringTypeW (Address: 0x3b731938)
GetStringTypeW (Address: 0x3b731310)
GetSystemDefaultLCID (Address: 0x3b731760)
GetSystemInfo (Address: 0x3b731638)
GetSystemInfo (Address: 0x3b731048)
GetSystemTimeAsFileTime (Address: 0x3b731328)
GetSystemTimeAsFileTime (Address: 0x3b7317e0)
GetThreadContext (Address: 0x3b731050)
GetThreadLocale (Address: 0x3b731750)
GetThreadPriority (Address: 0x3b7313e8)
GetThreadTimes (Address: 0x3b7312d0)
GetTickCount (Address: 0x3b731028)
GetTickCount (Address: 0x3b7316c8)
GetTimeFormatW (Address: 0x3b731448)
GetTimeZoneInformation (Address: 0x3b731260)
GetUserDefaultLCID (Address: 0x3b731470)
GetUserDefaultLCID (Address: 0x3b731758)
GetVersionExW (Address: 0x3b7312a8)
GlobalFree (Address: 0x3b7316d8)
HeapAlloc (Address: 0x3b7318b0)
HeapAlloc (Address: 0x3b731068)
HeapCreate (Address: 0x3b7310a0)
HeapCreate (Address: 0x3b731918)
HeapDestroy (Address: 0x3b731920)
HeapDestroy (Address: 0x3b731098)
HeapFree (Address: 0x3b731078)
HeapFree (Address: 0x3b731830)
HeapReAlloc (Address: 0x3b731970)
HeapReAlloc (Address: 0x3b731058)
HeapSetInformation (Address: 0x3b731910)
HeapSize (Address: 0x3b731948)
HeapSize (Address: 0x3b7314d0)
InitializeCriticalSection (Address: 0x3b731710)
InitializeCriticalSectionAndSpinCount (Address: 0x3b731978)
InitializeCriticalSectionAndSpinCount (Address: 0x3b731158)
InitializeSListHead (Address: 0x3b731290)
InterlockedFlushSList (Address: 0x3b731278)
InterlockedPopEntrySList (Address: 0x3b731288)
InterlockedPushEntrySList (Address: 0x3b731280)
IsDebuggerPresent (Address: 0x3b731480)
IsDebuggerPresent (Address: 0x3b731898)
IsProcessorFeaturePresent (Address: 0x3b731438)
IsValidCodePage (Address: 0x3b7314d8)
IsValidCodePage (Address: 0x3b731850)
IsValidLocale (Address: 0x3b731468)
K32GetModuleBaseNameW (Address: 0x3b731240)
LCMapStringA (Address: 0x3b7318b8)
LCMapStringW (Address: 0x3b7318c0)
LCMapStringW (Address: 0x3b731458)
LeaveCriticalSection (Address: 0x3b731708)
LeaveCriticalSection (Address: 0x3b731168)
LoadLibraryA (Address: 0x3b7311b0)
LoadLibraryA (Address: 0x3b731a60)
LoadLibraryA (Address: 0x3b7316f0)
LoadLibraryExW (Address: 0x3b7312b0)
LoadLibraryW (Address: 0x3b731218)
LoadLibraryW (Address: 0x3b7317a0)
LoadResource (Address: 0x3b731728)
LoadResource (Address: 0x3b731108)
LocalAlloc (Address: 0x3b7316e8)
LocalAlloc (Address: 0x3b731a00)
LocalFree (Address: 0x3b7317e8)
LocalFree (Address: 0x3b731a18)
LocalFree (Address: 0x3b7311f8)
LockResource (Address: 0x3b7311b8)
lstrcmpiA (Address: 0x3b731118)
lstrcmpiW (Address: 0x3b731010)
MultiByteToWideChar (Address: 0x3b731308)
MultiByteToWideChar (Address: 0x3b731730)
OpenProcess (Address: 0x3b731238)
OpenThread (Address: 0x3b7310c0)
OpenThread (Address: 0x3b731658)
OutputDebugStringW (Address: 0x3b7312d8)
PostQueuedCompletionStatus (Address: 0x3b7311c0)
Process32FirstW (Address: 0x3b731000)
Process32NextW (Address: 0x3b731008)
QueryDepthSList (Address: 0x3b731270)
QueryPerformanceCounter (Address: 0x3b7312f0)
QueryPerformanceCounter (Address: 0x3b731928)
QueueUserAPC (Address: 0x3b7311a0)
RaiseException (Address: 0x3b731348)
RaiseException (Address: 0x3b731810)
ReadConsoleW (Address: 0x3b731500)
ReadFile (Address: 0x3b731330)
ReadFile (Address: 0x3b7317f0)
RegisterWaitForSingleObject (Address: 0x3b731428)
ReleaseSemaphore (Address: 0x3b731298)
ResumeThread (Address: 0x3b7310e8)
ResumeThread (Address: 0x3b731678)
RtlCaptureContext (Address: 0x3b7318a8)
RtlCaptureContext (Address: 0x3b731380)
RtlLookupFunctionEntry (Address: 0x3b731350)
RtlLookupFunctionEntry (Address: 0x3b731820)
RtlPcToFileHeader (Address: 0x3b731818)
RtlPcToFileHeader (Address: 0x3b731340)
RtlUnwindEx (Address: 0x3b731358)
RtlUnwindEx (Address: 0x3b731828)
RtlVirtualUnwind (Address: 0x3b7318a0)
RtlVirtualUnwind (Address: 0x3b731388)
SetEndOfFile (Address: 0x3b731510)
SetEnvironmentVariableA (Address: 0x3b7311d0)
SetEvent (Address: 0x3b7313c0)
SetFileAttributesW (Address: 0x3b731208)
SetFilePointer (Address: 0x3b731958)
SetFilePointerEx (Address: 0x3b7314b0)
SetHandleCount (Address: 0x3b7318c8)
SetLastError (Address: 0x3b731878)
SetLastError (Address: 0x3b731198)
SetProcessAffinityMask (Address: 0x3b7316a8)
SetProcessAffinityMask (Address: 0x3b731a30)
SetStdHandle (Address: 0x3b731980)
SetStdHandle (Address: 0x3b731258)
SetThreadAffinityMask (Address: 0x3b731a38)
SetThreadAffinityMask (Address: 0x3b731420)
SetThreadAffinityMask (Address: 0x3b7316b8)
SetThreadContext (Address: 0x3b731060)
SetThreadPriority (Address: 0x3b7313e0)
SetUnhandledExceptionFilter (Address: 0x3b731398)
SetUnhandledExceptionFilter (Address: 0x3b731890)
SetWaitableTimer (Address: 0x3b731110)
SignalObjectAndWait (Address: 0x3b7313d0)
SizeofResource (Address: 0x3b731160)
Sleep (Address: 0x3b731090)
Sleep (Address: 0x3b7316c0)
Sleep (Address: 0x3b731a40)
SuspendThread (Address: 0x3b7310e0)
SuspendThread (Address: 0x3b731670)
SwitchToThread (Address: 0x3b7313d8)
TerminateProcess (Address: 0x3b731630)
TerminateProcess (Address: 0x3b731228)
TerminateThread (Address: 0x3b731150)
Thread32First (Address: 0x3b731088)
Thread32First (Address: 0x3b731648)
Thread32Next (Address: 0x3b731660)
Thread32Next (Address: 0x3b7310a8)
TlsAlloc (Address: 0x3b7311e8)
TlsFree (Address: 0x3b731200)
TlsGetValue (Address: 0x3b7310f8)
TlsSetValue (Address: 0x3b731148)
UnhandledExceptionFilter (Address: 0x3b731390)
UnhandledExceptionFilter (Address: 0x3b731888)
UnregisterWait (Address: 0x3b731430)
UnregisterWaitEx (Address: 0x3b731268)
VerifyVersionInfoW (Address: 0x3b731188)
VerSetConditionMask (Address: 0x3b731120)
VirtualAlloc (Address: 0x3b731040)
VirtualAlloc (Address: 0x3b731688)
VirtualFree (Address: 0x3b731698)
VirtualFree (Address: 0x3b731038)
VirtualProtect (Address: 0x3b7310c8)
VirtualProtect (Address: 0x3b731690)
VirtualQuery (Address: 0x3b731030)
WaitForMultipleObjects (Address: 0x3b7311c8)
WaitForSingleObject (Address: 0x3b731130)
WaitForSingleObjectEx (Address: 0x3b7313c8)
WideCharToMultiByte (Address: 0x3b731748)
WideCharToMultiByte (Address: 0x3b731230)
WriteConsoleA (Address: 0x3b731988)
WriteConsoleW (Address: 0x3b7317f8)
WriteConsoleW (Address: 0x3b731220)
WriteFile (Address: 0x3b731140)
WriteFile (Address: 0x3b731950)
WriteProcessMemory (Address: 0x3b731680)

MSWSOCK.dll

AcceptEx (Address: 0x3b731600)
GetAcceptExSockaddrs (Address: 0x3b7315f8)

SHELL32.dll

SHGetFolderPathA (Address: 0x3b731568)
SHGetFolderPathW (Address: 0x3b731570)

USER32.dll

CharUpperBuffW (Address: 0x3b7319a0)
GetActiveWindow (Address: 0x3b731520)
MessageBoxA (Address: 0x3b731528)
MessageBoxW (Address: 0x3b7319a8)

WS2_32.dll

bind (Address: 0x3b731598)
closesocket (Address: 0x3b7315a8)
htons (Address: 0x3b731580)
ioctlsocket (Address: 0x3b7315e0)
listen (Address: 0x3b7315b0)
ntohs (Address: 0x3b731588)
setsockopt (Address: 0x3b7315e8)
WSACleanup (Address: 0x3b7315d8)
WSAGetLastError (Address: 0x3b731590)
WSARecv (Address: 0x3b7315c8)
WSASend (Address: 0x3b7315b8)
WSASetLastError (Address: 0x3b7315a0)
WSASocketW (Address: 0x3b7315c0)
WSAStartup (Address: 0x3b7315d0)

WTSAPI32.dll

WTSSendMessageW (Address: 0x3b731610)