i dont know where your friend got "zodlrm.dll" because thats not the DLL
the proper DLL should just be DiscordDLL.dll
YEA, I thought the name was weird too. I had three guesses:
- it was shared around using some kind of hosting service that mangled the name
- the name is spooky or is a clue because it fits the ARG theme
- some guy was testing this against their own build and put two DiscordDLL.dll in the same folder for some reason, so they slapped the keyboard to lazily resolve the name conflict and later shared it around (meme)
I decided to just put that side note in because the contents of the DLL check out against the github source, ie strings, order of execution, and so on, and I then might get some insight later (AND IT TOTALLY WORKED!1)-- I didn't get to see the original thread/"release" so the question of the name's roots or how seriously I should take it was out the window. It made sense an ARG would name files like this; innocent me slapped it into ida and happily chugged along at decoding the ancient mythological secret doomsday DLL the alien name implied.
That is in the past. I now have investigated this and... Val regrets to inform you it was the first thought: someone uploaded it to my friend using mymixtape and then he later gave that to me in all its mangled glory. I had no idea this stupid site existed (i live under a rock) and figured six lowercase characters for entropy would be dumb for a file sharing service, and one that changes file names at that. like WTF. I ended up giving way too much benefit of the doubt to the third idea and looked like an idiot. I wouldn't have done this anywhere else but in an ARG thread and yet here we are.. val_JUST.png and I'm 3000% mad.
OK, sorry for writing this much for a non-problem but I thought sharing my epic fail would make someone laugh
at with me. But yes, it is the real deal.
whats your source for this because theres literally nothing like this in the DLL from ana's github release 3 days ago
im looking in the DLL from github 3 days ago not the source
post the DLL you're talking about that says "mike" in it
It's the debug file path that's compiled into the binary. Try searching "mike" in a hex editor or something.
That string actually comes from the DLL they supplied rather than the source. The one that says mike.
That's what I said. The supplied DLL and source are supposed to match 1:1, but if that's the case then mike wouldn't show up in the DLL, and the source is crafted to make you believe in the 1:1. You are supposed to say "wow, great moves detective val" and be impressed.
Or maybe val_JUST2.png is on it's way and you're saying Ana did not supply the mike DLL. I kind of just jumped in when DLL was mentioned. OK, someone give me a quick rundown on how it came to be before I write myself into irrelevance. I'm just here to reverse spooky DLLs.