CreateCoreShell
GetSoundShell
_GetDecryptProc@4
_GetEncryptProc@4
_SetDecryptionKey@4
Behavioral task
behavioral1
Sample
35fe90ae0d47bd497030baac250995a97da5ba32a4857b1f4ad896df33433594.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
35fe90ae0d47bd497030baac250995a97da5ba32a4857b1f4ad896df33433594.exe
Resource
win10v2004-20230220-en
Target
35fe90ae0d47bd497030baac250995a97da5ba32a4857b1f4ad896df33433594
Size
3.7MB
MD5
952f297a23fd725bc14d1d23a98ef1dd
SHA1
73d4f9caa53697deb4807ecf621a40462a635e69
SHA256
35fe90ae0d47bd497030baac250995a97da5ba32a4857b1f4ad896df33433594
SHA512
45d6219ffee9e80f60816a8dc3477ea4b69a227ab1462a8fc14e26ab49e5a0d1b3353262832b92a33557a8974e62a00bb16fb81526b659bcb35091a6c1c53d69
SSDEEP
98304:cQw0B6bYVPpR87BKrOIKpTmUCgzLcctA/:cQw0B6bYJpR87BKrOIKpTmUC4Q/
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
OpenProcessToken
RegQueryValueExA
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
CreateTextFilter
GetDeviceCaps
RealizePalette
SelectPalette
ImmAssociateContext
CloseHandle
TerminateThread
GetExitCodeThread
FreeLibrary
WaitForSingleObject
GetProcAddress
LoadLibraryA
Sleep
SystemTimeToTzSpecificLocalTime
WritePrivateProfileStringA
GetLastError
CreateProcessA
SetUnhandledExceptionFilter
IsBadReadPtr
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
CreateFileA
FormatMessageA
lstrlenA
CreateSemaphoreA
OpenSemaphoreA
CreateEventA
SetEvent
LeaveCriticalSection
EnterCriticalSection
ResetEvent
CreateThread
InitializeCriticalSection
InterlockedDecrement
GetComputerNameA
FileTimeToSystemTime
LocalFileTimeToFileTime
SystemTimeToFileTime
OpenProcess
TerminateProcess
ReadProcessMemory
GetCurrentDirectoryA
GetVersionExA
InterlockedExchange
InterlockedCompareExchange
GetStartupInfoA
UnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetLastError
CreateMutexA
OpenMutexA
VirtualProtect
LoadLibraryW
GetProcessHeap
HeapFree
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
GetTempPathA
GetTempFileNameA
VirtualFreeEx
CreateRemoteThread
WriteProcessMemory
MultiByteToWideChar
CreateFileMappingA
VirtualAllocEx
GetPrivateProfileIntA
GetLocalTime
GetVersion
FindFirstFileA
SetFileAttributesA
DeleteFileA
FindNextFileA
FindClose
RemoveDirectoryA
AllocConsole
FreeConsole
GetModuleFileNameA
GetDiskFreeSpaceExA
GetTickCount
DeleteCriticalSection
MapViewOfFile
UnmapViewOfFile
GetProcessTimes
GetThreadContext
ResumeThread
VirtualProtectEx
FlushInstructionCache
SetThreadContext
lua_setglobal
lua_stackspace
lua_rawseti
lua_error
lua_newtable
lua_settable
lua_curpack
lua_rawget
lua_pushnil
lua_isstring
lua_getn
lua_rawgeti
lua_toint
lua_pushstring
lua_pushnumber
lua_type
lua_tonumber
lua_gettop
lua_tostring
lua_pushcclosure
lua_typename
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEPADXZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBD@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEPADXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
_localtime32
_purecall
strcat
strftime
isgraph
atoi
printf
freopen
__iob_func
free
realloc
malloc
memmove
_mbsicmp
isspace
abs
_difftime32
memcmp
sscanf
memmove_s
_mktime32
rand
fclose
fwrite
fopen
memcpy
abs
isdigit
_mbsstr
remove
_ui64toa
_i64toa
fflush
fprintf
_gmtime32
sprintf_s
_chmod
vsprintf
_vsnprintf
strrchr
_ctime32
exit
_mkdir
_CIsqrt
puts
floor
strncmp
_CIcos
_CIsin
strtoul
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
strcmp
strlen
memset
??_V@YAXPAX@Z
_snprintf
_time32
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
_CxxThrowException
??2@YAPAXI@Z
_invalid_parameter_noinfo
??3@YAXPAX@Z
__CxxFrameHandler
strcpy
strchr
strstr
sprintf
strncpy
_itoa
_stricmp
_getcwd
_strlwr
__CxxFrameHandler
srand
calloc
SysAllocString
VariantClear
SysFreeString
SHGetSpecialFolderPathA
ShellExecuteA
GetDC
CopyRect
CharLowerA
SetWindowLongA
GetWindowLongA
MoveWindow
ReleaseDC
InvalidateRect
BringWindowToTop
SetWindowTextA
wsprintfA
ReleaseCapture
SetCapture
SetCursorPos
InSendMessage
GetMessagePos
MessageBoxA
ScreenToClient
GetKeyState
SetClipboardData
OpenClipboard
GetClipboardData
EmptyClipboard
CloseClipboard
SetCaretPos
EnableWindow
ShowWindow
SetFocus
DestroyWindow
IsWindow
GetClientRect
ClientToScreen
SetWindowPos
CreateWindowExA
ShowCursor
LoadCursorFromFileA
LoadCursorA
SetCursor
SendMessageA
GetParent
timeGetTime
inet_ntoa
GetOpenFileNameA
?GetTopIndex@KLuaCall@@QBEHXZ
??0KLuaCall@@QAE@PAVKLuaScript@@H@Z
?GetTmpScript@KLuaScriptSet@@QAEPAVKLuaScript@@XZ
?PushNumber@KLuaCall@@QAEXN@Z
?PushString@KLuaCall@@QAEXPBD@Z
?ValueToInt@KLuaCall@@QAEHH@Z
EDOneTimePad_Decipher
?Run@KWin32App@@UAEXXZ
?Init@KWin32App@@UAEHPAUHINSTANCE__@@PAD@Z
??0KWin32App@@QAE@XZ
?InitClass@KWin32App@@MAEHPAUHINSTANCE__@@@Z
?InitWindow@KWin32App@@MAEHPAUHINSTANCE__@@@Z
?ShowMouse@KWin32App@@UAEXH@Z
?SetMultiGame@KWin32App@@UAEXH@Z
?MsgProc@KWin32App@@UAEJPAUHWND__@@IIJ@Z
?SetMouseHoverTime@KWin32App@@QAEXI@Z
?Start@KTimer@@QAEXXZ
?GetElapse@KTimer@@QAEKXZ
InitTextRender
?g_InitEngine@@YAHPBD0@Z
?g_ExitEngine@@YAXXZ
?g_DebugLog@@YAXPBDZZ
EDOneTimePad_Encipher
RegisterInlineCtrl
RemoveInlineWndCtrl
?g_StrCpy@@YAXPADPBD@Z
?g_StrCmpLen@@YAHPBD0H@Z
?g_StrLen@@YAHPBD@Z
?GetString@KTabFile@@UAEHHHPBDPADK@Z
?SetKeepDataForOutMaxWidth@KTabFile@@QAEXH@Z
?Init@KSG_LogFile@@QAEHPBD@Z
?puts@KSG_LogFile@@QAEXPBD@Z
?write_date_time@KSG_LogFile@@QAEXXZ
?GetScript@KLuaScriptSet@@QAEPAVKLuaScript@@PBD@Z
?FormatCallByVaList@KLuaCall@@QAEHPBDPAH0PAD@Z
?GetHeight@KCanvas@@QAEHXZ
??1KHashNode@@UAE@XZ
?RegisterFunctions@KLuaScriptSet@@QAEHPAUTLua_Funcs@@H@Z
?SetGlobalInt@KLuaScriptSet@@QAEXPBDH@Z
?SetRootPath@KLuaScriptSet@@QAEXPBD@Z
?GetScript@KLuaScriptSet@@QAEPAVKLuaScript@@K@Z
?GetFloat@KTabFile@@UAEHHPBDMPAMH@Z
?Insert@KLinkArray@@QAEXH@Z
?Init@KLinkArray@@QAEXH@Z
?GetInteger@KTabFile@@UAEHHHHPAH@Z
?FindColumn@KTabFile@@UAEHPBD@Z
??0KLuaScriptSet@@QAE@HH@Z
??1KLuaScriptSet@@QAE@XZ
?FormatCall@KLuaCall@@QAAHPBDPAH0ZZ
?SetGlobalName@KLuaCall@@QAEXPBD@Z
?g_FileName2Id@@YAKPBD@Z
?GetNext@KLinkArray@@QBEHH@Z
??1KLinkArray@@QAE@XZ
??0KHashList@@QAE@XZ
?Remove@KLinkArray@@QAEXH@Z
??1KSoundCache@@QAE@XZ
?Exit@KDirectSound@@QAEXXZ
?SetVolume@KWavSound@@QAEXH@Z
?SetPan@KWavSound@@QAEXH@Z
?Stop@KWavSound@@QAEXXZ
?IsPlaying@KWavSound@@QAEHXZ
??0KDirectSound@@QAE@XZ
??1KDirectSound@@QAE@XZ
??1KMusic@@UAE@XZ
??0KMemClass@@QAE@XZ
??_7KMp3Music@@6B@
??0KMusic@@QAE@XZ
??0KSoundCache@@QAE@XZ
?Init@KDirectSound@@QAEHXZ
?Open@KMp3Music@@UAEHPAD@Z
?Close@KMusic@@UAEXXZ
?Play@KMusic@@UAEXH@Z
?Stop@KMusic@@UAEXXZ
?Rewind@KMp3Music@@UAEXXZ
?SetVolume@KMusic@@UAEXJ@Z
?HandleNotify@KMusic@@UAEHXZ
?IsPlaying@KMusic@@UAEHXZ
?Init@KMusic@@MAEHXZ
?InitSoundFormat@KMp3Music@@MAEXXZ
?InitSoundBuffer@KMusic@@MAEHXZ
?FreeSoundBuffer@KMusic@@MAEXXZ
?InitSoundNotify@KMusic@@MAEHXZ
?FreeSoundNotify@KMusic@@MAEXXZ
?InitEventHandle@KMusic@@MAEHXZ
?FreeEventHandle@KMusic@@MAEXXZ
?FillBufferWithSound@KMusic@@MAEHK@Z
?FillBufferWithSilence@KMusic@@MAEHXZ
?ReadWaveData@KMp3Music@@MAEKPAEK@Z
?Mp3Init@KMp3Music@@MAEHXZ
?Mp3FillBuffer@KMp3Music@@MAEHXZ
?Mp3Decode@KMp3Music@@MAEKPAEK@Z
?Mp3FileOpen@KMp3Music@@MAEHPAD@Z
?Mp3FileRead@KMp3Music@@MAEKPAEK@Z
?Mp3FileSeek@KMp3Music@@MAEKJ@Z
?Free@KMemStack@@QAEXPAX@Z
??1KMemClass@@QAE@XZ
?Play@KWavSound@@QAEXHHH@Z
?Remove@KNode@@QAEXXZ
??0KNode@@QAE@XZ
?GetPrev@KLinkArray@@QBEHH@Z
?AddTail@KList@@QAEXPAVKNode@@@Z
?GetString@KTabFile@@UAEHPBD00PADK@Z
?g_StrCat@@YAXPADPBD@Z
?SetGlobalName@KLuaScript@@QAEXPBD@Z
??0KHashList@@QAE@XZ
?GetBaseIndex@KLuaCall@@QBEHXZ
TGetLimitLenEncodedString
?g_StrLower@@YAXPAD@Z
?Clear@KPolygon@@QAEXXZ
??0KPolygon@@QAE@XZ
?g_StrCmp@@YAHPBD0@Z
?AddHead@KList@@QAEXPAVKNode@@@Z
?RemoveHead@KList@@QAEPAVKNode@@XZ
?GetRect@KIniFile@@QAEXPBD0PAUtagRECT@@@Z
?Seek@KPakFile@@QAEKHI@Z
?Stop@KTimer@@QAEXXZ
?g_GetRandomSeed@@YAIXZ
?GetValuesFromStack@KLuaScript@@QAAHPBDZZ
?g_StrWrap@@YAXPADPBDH@Z
?KGLogPrintf@@YAHW4KGLOG_PRIORITY@@QBDZZ
?g_UnitePathAndName@@YAXPBD0PAD@Z
?KSG_StringGetInt@@YAHPAPBDH@Z
?KSG_StringSkipSymbol@@YA_NPAPBDH@Z
?StackCall@KLuaCall@@QAEHPBDHHPAH@Z
?GetInteger@KTabFile@@UAEHPBD0HPAH@Z
?GetActionScriptID@KLuaScript@@SAKPAUlua_State@@@Z
?AddIncluder@KLuaScript@@QAEXK@Z
?IsLoaded@KLuaScript@@QBEHXZ
?g_GetRootPath@@YAXPADI@Z
??0KTabFile@@QAE@ABV0@@Z
?WriteString@KTabFileCtrl@@QAEHHPBD0H@Z
?WriteString@KTabFileCtrl@@QAEHHHPBDK@Z
?Search@KTabFile@@QAEHPBD0H@Z
?Search@KTabFile@@QAEHPBDHH@Z
?Save@KTabFileCtrl@@QAEHXZ
?GetInitStackSize@KScriptSet@@UAEHK@Z
?FindRow@KTabFile@@UAEHPBDH@Z
?GetFloat@KTabFile@@UAEHPBD0MPAM@Z
?GetFloat@KTabFile@@UAEHHHMPAM@Z
??0KTabFileCtrl@@QAE@XZ
?Load@KTabFileCtrl@@UAEHPBD@Z
?Save@KTabFileCtrl@@UAEHPBD@Z
?FindRow@KTabFileCtrl@@UAEHPBDH@Z
?FindColumn@KTabFileCtrl@@UAEHPBD@Z
?GetWidth@KTabFileCtrl@@UAEHXZ
?GetHeight@KTabFileCtrl@@UAEHXZ
?GetString@KTabFileCtrl@@UAEHPBD00PADK@Z
?GetString@KTabFileCtrl@@UAEHHHPBDPADK@Z
?GetString@KTabFileCtrl@@UAEHHPBD0PADKH@Z
?GetInteger@KTabFileCtrl@@UAEHPBD0HPAH@Z
?GetInteger@KTabFileCtrl@@UAEHHHHPAH@Z
?GetInteger@KTabFileCtrl@@UAEHHPBDHPAHH@Z
?GetFloat@KTabFileCtrl@@UAEHPBD0MPAM@Z
?GetFloat@KTabFileCtrl@@UAEHHHMPAM@Z
?GetFloat@KTabFileCtrl@@UAEHHPBDMPAMH@Z
?Clear@KTabFileCtrl@@UAEXXZ
??1KTabFileCtrl@@UAE@XZ
gAddToMemFileManager
gOnUpdateFinishForMemFileManager
?SprReleaseFrame@@YAXPAUSPRFRAME@@@Z
?g_FileExists@@YAHPBD@Z
?Tell@KPakFile@@QAEKXZ
?RemoveTail@KList@@QAEPAVKNode@@XZ
?GetBaseIndex@KLuaCall@@QBEHXZ
?GetGlobalName@KLuaScript@@QAEXPBD@Z
??0KMutex@@QAE@XZ
?Lock@KMutex@@QAEXXZ
?Unlock@KMutex@@QAEXXZ
??1KMutex@@QAE@XZ
??1KLuaCall@@QAE@XZ
?LoadScriptByRelPath@KLuaScriptSet@@QAE?AW4_CODE_RESULT@@PBDPAPAVKLuaScript@@H@Z
?g_RandomSeed@@YAXI@Z
?CallFunction@KLuaScript@@QAEHPBDH0PAD@Z
?SafeCallBegin@KLuaScript@@QAEXPAH@Z
?SafeCallEnd@KLuaScript@@QAEXH@Z
?GetNextKey@KIniFile@@QAEHPBD0PAD@Z
TGetEncodedTextOutputLenPos
TGetEncodedTextEffectCtrls
?g_Random@@YAII@Z
?Clear@KTabFile@@UAEXXZ
?Open@KFile@@QAEHPBD@Z
?Read@KFile@@QAEKPAXK@Z
?Load@KTabFile@@UAEHPBD@Z
?GetHeight@KCanvas@@QAEHXZ
?GetInteger@KTabFile@@UAEHHPBDHPAHH@Z
?GetString@KTabFile@@UAEHHPBD0PADKH@Z
??1KTabFile@@UAE@XZ
??0KTabFile@@QAE@XZ
TSplitEncodedString
?IsSectionExist@KIniFile@@QAEHPBD@Z
?KSG_StringToMD5String@@YAHQADQBD@Z
?WriteStruct@KIniFile@@QAEXPBD0PAXK@Z
?EraseKey@KIniFile@@QAEXPBD0@Z
?GetStruct@KIniFile@@QAEXPBD0PAXK@Z
TClearSpecialCtrlInEncodedText
?g_GetDrawHWnd@@YAPAUHWND__@@XZ
TEncodeTextAndPickCtrl
?GetInteger2@KIniFile@@QAEHPBD0PAH1@Z
TRemoveCtrlInEncodedText
TIsLocalChar
GetCtrlHandle
??0KIme@@QAE@XZ
TIsLocalWord
TSplitString
TSplitStringLine
TIsHightChar
?EnableLanguageChange@KIme@@QAEXXZ
?OpenIME@KIme@@QAEXXZ
?SetCaretPos@KIme@@QAEXHH@Z
?IsIme@KIme@@QAEHXZ
TGetLimitLenString
??0KPakFile@@QAE@XZ
??0KFile@@QAE@XZ
?Create@KFile@@QAEHPBD@Z
?Open@KPakFile@@QAEHPBD@Z
?Size@KPakFile@@QAEKXZ
?Read@KPakFile@@QAEKPAXI@Z
?Close@KPakFile@@QAEXXZ
??1KFile@@QAE@XZ
??1KPakFile@@QAE@XZ
TGetEncodedTextLineCount
TFindSpecialCtrlInEncodedText
??0KTimer@@QAE@XZ
?Clear@KIniFile@@QAEXXZ
?Close@KFile@@QAEXXZ
?Write@KFile@@QAEKPAXK@Z
?Seek@KFile@@QAEKJK@Z
?g_pIme@@3PAVKIme@@A
?DisableLanguageChange@KIme@@QAEXXZ
?CloseIME@KIme@@QAEXXZ
?TurnOn@KIme@@QAEXXZ
?EraseSection@KIniFile@@QAEXPBD@Z
?LoadBuffer@KLuaScript@@QAEHPAEKPBD@Z
?ExecuteCode@KLuaScript@@QAEHXZ
?Release@KLuaScript@@QAEXXZ
?CreateScript@KLuaScriptSet@@QAEPAVKLuaScript@@XZ
?RegisterFunctions@KLuaScript@@QAEHPAUTLua_Funcs@@H@Z
?g_StrCpyLen@@YAXPADPBDH@Z
?g_StrToColor@@YAKPBD@Z
?WriteInteger@KIniFile@@QAEXPBD0H@Z
?Save@KIniFile@@QAEHPBD@Z
?g_GetFullPath@@YAXPADIPBD@Z
?g_GetMainHWnd@@YAPAUHWND__@@XZ
?g_CreatePath@@YAXPBD@Z
??1KSG_LogFile@@UAE@XZ
??0KSG_LogFile@@QAE@PBD@Z
?InitWithDate@KSG_LogFile@@QAEHPBD0H@Z
?printf_t@KSG_LogFile@@QAAXPBDZZ
?WriteString@KIniFile@@QAEXPBD00@Z
?g_HashString2Id@@YAKPBD@Z
?ValueToInt@KLuaCall@@QAEHH@Z
gAdviseMemFileNotify
?ValueToString@KLuaCall@@QAEPBDH@Z
??1KIniFile@@QAE@XZ
?GetString@KIniFile@@QAEHPBD00PADK@Z
?Load@KIniFile@@QAEHPBD@Z
TEncodeText
?GetBitmap@KBitmap16@@QAEPAXXZ
?GetBaseIndex@KLuaCall@@QBEHXZ
?GetInteger@KIniFile@@QAEHPBD0HPAH@Z
??0KIniFile@@QAE@XZ
??1KIme@@QAE@XZ
StgCreateDocfile
OleUninitialize
OleInitialize
OleCreate
OleSetContainedObject
OleSave
CreateCoreShell
GetSoundShell
_GetDecryptProc@4
_GetEncryptProc@4
_SetDecryptionKey@4
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE