MinecraftLegends[.]Windows[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

MinecraftLegends.Windows.exe
Size

67.3MB
MD5

0d51d457921d62065b5191b7ab9c5978
SHA1

ed46e0a2dfc5ccd0f693d46446d3061a0e2d8fda
SHA256

edcf3a3a2ce40dd2dd6480e03638930b2d928bed648903b0ba6c544945dcf540
SHA512

0070d9b1555a9971c57e61b23adec2e0f6aae0591a8376ab52cb6e3a762f7e83e6609bb101f5d305742fa0d7eb16ff382abc2fac8a6d749ac35e96581395f5dd
SSDEEP

393216:YHMjKlek0kwBrYSiRJZe6BoVN3/zzLZxardFCfO3lcJU0F/RXAXkTY1ctVIZKqmp:Ileku1XA1i3TardUeXQF1Zn

Score

1^/10

Malware Config

Signatures

Files

MinecraftLegends.Windows.exe
.exe windows x64

cc03b03a08d448f7d796e126d8667b5f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mallocoverride

_aligned_realloc
_msize
malloc_override_init
_aligned_malloc
_aligned_free
calloc
realloc
malloc
free

cohtml.windowsdesktop

?SetText@IBreakIterator@i18n@cohtml@@UEAAXPEBDI@Z
??0IInternationalizationManager@cohtml@@QEAA@XZ
??1IInternationalizationManager@cohtml@@UEAA@XZ
?Initialize@Library@cohtml@@SAPEAV12@PEBDAEBULibraryParams@2@@Z
?Invoke@?$CoherentToString@_K@cohtml@@SA_N_KPEADPEA_K@Z
??0IViewListener@cohtml@@QEAA@XZ
??1IViewListener@cohtml@@UEAA@XZ
??0ITextInputHandler@cohtml@@QEAA@XZ
??1ITextInputHandler@cohtml@@UEAA@XZ
?OnAudioDataReceived@IViewListener@cohtml@@UEAAXHHPEAPEAMH@Z
?OnAudioStreamClosed@IViewListener@cohtml@@UEAAXH@Z
?OnAudioStreamCreated@IViewListener@cohtml@@UEAAXHHHM@Z
?OnAudioStreamEnded@IViewListener@cohtml@@UEAAXH@Z
?OnAudioStreamPause@IViewListener@cohtml@@UEAAXH@Z
?OnAudioStreamPlay@IViewListener@cohtml@@UEAAXH@Z
?ResetToBeginning@IBreakIterator@i18n@cohtml@@UEAAHXZ
?OnClipboardTextGet@IViewListener@cohtml@@UEAAXPEAUIClipboardData@12@@Z
?OnClipboardTextSet@IViewListener@cohtml@@UEAAXPEBDI@Z
?OnCreateWebSocket@IViewListener@cohtml@@UEAAPEAVIClientSideSocket@2@PEAVISocketListener@2@PEBDPEAPEBDI@Z
?OnCursorChanged@IViewListener@cohtml@@UEAAXW4Cursors@CursorTypes@2@PEBDPEBM2@Z
?OnResourceRequestIntercepted@IViewListener@cohtml@@UEAA?AW4InterceptRequestStatus@2@PEBD@Z
??0IFileSystemReader@cohtml@@IEAA@XZ
??1IFileSystemReader@cohtml@@UEAA@XZ
??0IAsyncResourceHandler@cohtml@@IEAA@XZ
??1IAsyncResourceHandler@cohtml@@UEAA@XZ
??0ISyncStreamReader@cohtml@@IEAA@XZ
??1ISyncStreamReader@cohtml@@UEAA@XZ
?Invoke@?$CoherentToString@_N@cohtml@@SA_N_NPEADPEA_K@Z
??1TypeDescription@cohtml@@QEAA@XZ
?Invoke@?$CoherentToString@H@cohtml@@SA_NHPEADPEA_K@Z
?Invoke@?$CoherentToString@_J@cohtml@@SA_N_JPEADPEA_K@Z
?Invoke@?$CoherentToString@M@cohtml@@SA_NMPEADPEA_K@Z
?ResetToEnd@IBreakIterator@i18n@cohtml@@UEAAHXZ
?MoveToPrevious@IBreakIterator@i18n@cohtml@@UEAAHXZ
?MoveToNext@IBreakIterator@i18n@cohtml@@UEAAHXZ
?MoveToCandidateAfter@IBreakIterator@i18n@cohtml@@UEAAHH@Z
?GetCurrentPosition@IBreakIterator@i18n@cohtml@@UEAAHXZ
?ClearText@IBreakIterator@i18n@cohtml@@UEAAXXZ
??1IBreakIterator@i18n@cohtml@@UEAA@XZ
??0IBreakIterator@i18n@cohtml@@QEAA@XZ
??0IAllocator@cohtml@@QEAA@XZ
??1IAllocator@cohtml@@UEAA@XZ
??1ILogHandler@Logging@cohtml@@UEAA@XZ
??0ILogHandler@Logging@cohtml@@QEAA@XZ
?Invoke@?$CoherentToString@I@cohtml@@SA_NIPEADPEA_K@Z
??3IEventHandler@cohtml@@SAXPEAX@Z
??2IEventHandler@cohtml@@SAPEAX_K@Z
??3Property@cohtml@@SAXPEAX@Z
??2Property@cohtml@@SAPEAX_K@Z
?OnAudioStreamVolumeChanged@IViewListener@cohtml@@UEAAXHM@Z

ws2_32

WSAResetEvent
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
WSAStringToAddressW
WSAAddressToStringW
WSASocketW
WSASend
WSARecv
WSASetLastError
ntohl
getpeername
WSAGetLastError
WSACleanup
WSAStartup
WSASetEvent
send
select
recv
listen
connect
accept
__WSAFDIsSet
WSAIoctl
getnameinfo
gethostname
inet_ntoa
getsockopt
getsockname
ioctlsocket
htonl
freeaddrinfo
shutdown
getaddrinfo
ntohs
inet_ntop
socket
setsockopt
sendto
recvfrom
inet_addr
htons
closesocket
bind
WSAWaitForMultipleEvents

fmodstudio

?getLoadingState@Bank@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAW4FMOD_STUDIO_LOADING_STATE@@@Z
?unloadSampleData@Bank@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
?unload@Bank@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
?isValid@Bank@Studio@FMOD@@QEBA_NXZ
?setVolume@VCA@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@M@Z
?getSampleLoadingState@EventDescription@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAW4FMOD_STUDIO_LOADING_STATE@@@Z
?loadSampleData@EventDescription@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
?getInstanceCount@EventDescription@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAH@Z
?isValid@EventDescription@Studio@FMOD@@QEBA_NXZ
?getCPUUsage@System@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAUFMOD_STUDIO_CPU_USAGE@@PEAUFMOD_CPU_USAGE@@@Z
?getBufferUsage@System@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAUFMOD_STUDIO_BUFFER_USAGE@@@Z
?loadBankFile@System@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@PEBDIPEAPEAVBank@23@@Z
?setListenerAttributes@System@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@HPEBUFMOD_3D_ATTRIBUTES@@PEBUFMOD_VECTOR@@@Z
?setParameterByNameWithLabel@System@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@PEBD0_N@Z
?setParameterByName@System@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@PEBDM_N@Z
?getParameterByName@System@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEBDPEAM1@Z
?getParameterLabelByName@System@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEBDHPEADHPEAH@Z
?getSoundInfo@System@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEBDPEAUFMOD_STUDIO_SOUND_INFO@@@Z
?getVCA@System@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEBDPEAPEAVVCA@23@@Z
?getCoreSystem@System@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAPEAV13@@Z
?isValid@EventInstance@Studio@FMOD@@QEBA_NXZ
?update@System@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
?release@System@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
?initialize@System@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@HIIPEAX@Z
?create@System@Studio@FMOD@@SA?AW4FMOD_RESULT@@PEAPEAV123@I@Z
?setUserData@EventInstance@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@PEAX@Z
?getUserData@EventInstance@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAPEAX@Z
?setCallback@EventInstance@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@P6A?AW44@IPEAUFMOD_STUDIO_EVENTINSTANCE@@PEAX@ZI@Z
?setParameterByNameWithLabel@EventInstance@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@PEBD0_N@Z
?setParameterByName@EventInstance@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@PEBDM_N@Z
?release@EventInstance@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
?getMinMaxDistance@EventInstance@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAM0@Z
?getPlaybackState@EventInstance@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAW4FMOD_STUDIO_PLAYBACK_STATE@@@Z
?getTimelinePosition@EventInstance@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAH@Z
?stop@EventInstance@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@W4FMOD_STUDIO_STOP_MODE@@@Z
?start@EventInstance@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
?set3DAttributes@EventInstance@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@PEBUFMOD_3D_ATTRIBUTES@@@Z
?is3D@EventDescription@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEA_N@Z
?createInstance@EventDescription@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAPEAVEventInstance@23@@Z
?getEvent@System@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEBDPEAPEAVEventDescription@23@@Z
?getLength@EventDescription@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAH@Z
?isOneshot@EventDescription@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEA_N@Z

fmod

?getDSPBufferSize@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEAIPEAH@Z
?addGroup@ChannelGroup@FMOD@@QEAA?AW4FMOD_RESULT@@PEAV12@_NPEAPEAVDSPConnection@2@@Z
?setPriority@Channel@FMOD@@QEAA?AW4FMOD_RESULT@@H@Z
?set3DAttributes@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@PEBUFMOD_VECTOR@@0@Z
?addFadePoint@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@_KM@Z
?setDelay@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@_K0_N@Z
?getDSPClock@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@PEA_K0@Z
?isPlaying@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@PEA_N@Z
?getMode@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@PEAI@Z
?getMute@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@PEA_N@Z
?setMute@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@_N@Z
?getPitch@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@PEAM@Z
?setPitch@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@M@Z
?getVolume@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@PEAM@Z
?setVolume@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@M@Z
?setPaused@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@_N@Z
?stop@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
?setMode@Sound@FMOD@@QEAA?AW4FMOD_RESULT@@I@Z
?getNumSubSounds@Sound@FMOD@@QEAA?AW4FMOD_RESULT@@PEAH@Z
?getFormat@Sound@FMOD@@QEAA?AW4FMOD_RESULT@@PEAW4FMOD_SOUND_TYPE@@PEAW4FMOD_SOUND_FORMAT@@PEAH2@Z
?getSubSound@Sound@FMOD@@QEAA?AW4FMOD_RESULT@@HPEAPEAV12@@Z
?set3DMinMaxDistance@Sound@FMOD@@QEAA?AW4FMOD_RESULT@@MM@Z
?release@Sound@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
?setFileSystem@System@FMOD@@QEAA?AW4FMOD_RESULT@@P6A?AW43@PEBDPEAIPEAPEAXPEAX@ZP6A?AW43@33@ZP6A?AW43@33I13@ZP6A?AW43@3I3@ZP6A?AW43@PEAUFMOD_ASYNCREADINFO@@3@Z9H@Z
FMOD_Memory_Initialize
FMOD_Memory_GetStats
FMOD_System_Create
?release@System@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
?setOutput@System@FMOD@@QEAA?AW4FMOD_RESULT@@W4FMOD_OUTPUTTYPE@@@Z
?getNumDrivers@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEAH@Z
?getDriverInfo@System@FMOD@@QEAA?AW4FMOD_RESULT@@HPEADHPEAUFMOD_GUID@@PEAHPEAW4FMOD_SPEAKERMODE@@2@Z
?setDriver@System@FMOD@@QEAA?AW4FMOD_RESULT@@H@Z
?getSoftwareFormat@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEAHPEAW4FMOD_SPEAKERMODE@@0@Z
?setCallback@System@FMOD@@QEAA?AW4FMOD_RESULT@@P6A?AW43@PEAUFMOD_SYSTEM@@IPEAX11@ZI@Z
?init@System@FMOD@@QEAA?AW4FMOD_RESULT@@HIPEAX@Z
?update@System@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
?set3DSettings@System@FMOD@@QEAA?AW4FMOD_RESULT@@MMM@Z
?set3DNumListeners@System@FMOD@@QEAA?AW4FMOD_RESULT@@H@Z
?set3DListenerAttributes@System@FMOD@@QEAA?AW4FMOD_RESULT@@HPEBUFMOD_VECTOR@@000@Z
?mixerSuspend@System@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
?mixerResume@System@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
?getVersion@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEAI@Z
?getChannelsPlaying@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEAH0@Z
?getCPUUsage@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEAUFMOD_CPU_USAGE@@@Z
?getFileUsage@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEA_J00@Z
?createSound@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEBDIPEAUFMOD_CREATESOUNDEXINFO@@PEAPEAVSound@2@@Z
?createStream@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEBDIPEAUFMOD_CREATESOUNDEXINFO@@PEAPEAVSound@2@@Z
?createChannelGroup@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEBDPEAPEAVChannelGroup@2@@Z
?playSound@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEAVSound@2@PEAVChannelGroup@2@_NPEAPEAVChannel@2@@Z
?getMasterChannelGroup@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEAPEAVChannelGroup@2@@Z
?setUserData@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEAX@Z

bink2w64

BinkOpen
BinkNextFrame
BinkWait
BinkClose
BinkPause
BinkCopyToBuffer
BinkGoto
BinkShouldSkip
BinkSetOSFileCallbacks
BinkStartAsyncThread
BinkDoFrameAsync
BinkDoFrameAsyncWait
BinkRequestStopAsyncThread
BinkWaitStopAsyncThread
BinkSetSoundSystem
BinkOpenDirectSound
BinkSetMemory
BinkGetError

xinput1_4

ord3
ord2

api-ms-win-core-processthreads-l1-1-0

TlsSetValue
GetCurrentProcess
TlsAlloc
TlsFree
TlsGetValue
TerminateThread
CreateThread
GetCurrentProcessId
GetCurrentThread
GetStartupInfoW
GetExitCodeThread
QueueUserAPC
GetCurrentThreadId
SetThreadPriority
OpenThread
TerminateProcess

api-ms-win-core-memory-l1-1-0

VirtualFree
VirtualAlloc

api-ms-win-core-file-l1-1-0

GetDiskFreeSpaceExW
CreateDirectoryW
FindFirstFileExW
GetFileType
SetFileInformationByHandle
DeleteFileW
FindNextFileW
FindClose
WriteFile
GetFileAttributesExW
FindFirstFileW
GetFileAttributesW
CreateFileW
GetFullPathNameA

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-errorhandling-l1-1-0

RaiseException
GetLastError
UnhandledExceptionFilter
SetLastError
SetUnhandledExceptionFilter

api-ms-win-core-sysinfo-l1-1-0

GlobalMemoryStatusEx
GetSystemTime
GetLogicalProcessorInformation
GetSystemTimeAsFileTime

api-ms-win-core-heap-l2-1-0

GlobalAlloc
GlobalFree
LocalFree

api-ms-win-core-localization-l1-2-0

FormatMessageW
FormatMessageA
GetUserDefaultLocaleName

api-ms-win-core-synch-ansi-l1-1-0

OpenMutexA
CreateSemaphoreA

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize
InitOnceComplete
InitOnceExecuteOnce
Sleep

api-ms-win-core-com-l1-1-0

CoInitializeEx
StringFromGUID2
CoTaskMemFree
CoUninitialize
CoCreateGuid
CoWaitForMultipleHandles
CoGetApartmentType

api-ms-win-core-registry-l1-1-0

RegQueryValueExW
RegOpenKeyExW
RegGetValueA
RegCloseKey
RegSetValueExW
RegCreateKeyExW

api-ms-win-core-file-l1-2-2

GetTempPathA

api-ms-win-core-heap-obsolete-l1-1-0

GlobalLock
GlobalUnlock

api-ms-win-ntuser-sysparams-l1-1-0

GetMonitorInfoW
GetSystemMetrics

api-ms-win-core-psapi-l1-1-0

K32GetProcessMemoryInfo

api-ms-win-core-windowserrorreporting-l1-1-0

WerRegisterFile

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter
QueryPerformanceFrequency

api-ms-win-core-debug-l1-1-0

OutputDebugStringA
IsDebuggerPresent
OutputDebugStringW
DebugBreak

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
MultiByteToWideChar

api-ms-win-core-synch-l1-1-0

InitializeSRWLock
DeleteCriticalSection
ReleaseSRWLockShared
AcquireSRWLockExclusive
LeaveCriticalSection
ResetEvent
EnterCriticalSection
TryAcquireSRWLockExclusive
AcquireSRWLockShared
WaitForSingleObject
SetEvent
CreateEventExW
ReleaseSemaphore
OpenEventW
SleepEx
InitializeCriticalSection
CreateEventW
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
SetWaitableTimer
ReleaseSRWLockExclusive

iphlpapi

GetAdaptersInfo
GetAdaptersAddresses

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryExW
FreeLibrary
GetModuleHandleW

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW
LoadLibraryA

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent
SetThreadIdealProcessorEx

api-ms-win-core-processthreads-l1-1-3

GetThreadDescription

api-ms-win-core-processtopology-obsolete-l1-1-0

SetThreadAffinityMask

api-ms-win-core-processenvironment-l1-1-0

SetCurrentDirectoryA
GetCurrentDirectoryA
GetStdHandle
GetCommandLineW

api-ms-win-core-psm-appnotify-l1-1-0

UnregisterAppStateChangeNotification
RegisterAppStateChangeNotification

api-ms-win-shcore-obsolete-l1-1-0

CommandLineToArgvW

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime
SystemTimeToFileTime
GetTimeZoneInformation

api-ms-win-core-sysinfo-l1-2-0

GetNativeSystemInfo
VerSetConditionMask

api-ms-win-core-kernel32-legacy-l1-1-2

VerifyVersionInfoA

api-ms-win-core-heap-l1-1-0

HeapFree
GetProcessHeap
HeapAlloc

api-ms-win-core-datetime-l1-1-1

GetTimeFormatEx
GetDateFormatEx

api-ms-win-core-synch-l1-2-1

CreateWaitableTimerW
WaitForMultipleObjects

api-ms-win-core-threadpool-l1-2-0

WaitForThreadpoolWaitCallbacks
SetThreadpoolWait
CallbackMayRunLong
DisassociateCurrentThreadFromCallback
CreateThreadpoolWork
SubmitThreadpoolWork
WaitForThreadpoolWorkCallbacks
CloseThreadpoolWork
CreateThreadpoolTimer
SetThreadpoolTimer
CreateThreadpoolWait
CloseThreadpoolWait
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer

winhttp

WinHttpGetProxyForUrl
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpSetTimeouts
WinHttpQueryOption
WinHttpQueryDataAvailable
WinHttpReadData
WinHttpConnect
WinHttpSetStatusCallback
WinHttpGetIEProxyConfigForCurrentUser
WinHttpSetOption
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpAddRequestHeaders
WinHttpWriteData
WinHttpQueryHeaders
WinHttpOpen

api-ms-win-core-io-l1-1-0

PostQueuedCompletionStatus
GetQueuedCompletionStatus
CreateIoCompletionPort

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

crypt32

CertFindChainInStore
CertCloseStore
CertCreateCertificateContext
CertFreeCertificateChain
CertGetCertificateChain
CertFreeCertificateContext
CertOpenSystemStoreW

shlwapi

PathCombineA
PathCanonicalizeA

steam_api64

SteamAPI_RegisterCallback
SteamAPI_GetHSteamUser
SteamInternal_FindOrCreateUserInterface
SteamInternal_ContextInit
SteamAPI_RunCallbacks
SteamAPI_UnregisterCallback
SteamAPI_RegisterCallResult
SteamAPI_Init
SteamAPI_RestartAppIfNecessary
SteamAPI_UnregisterCallResult

icuuc

?doCharAt@UnicodeString@icu_69@@AEBA_SH@Z
u_isspace_69
u_isalnum_69
ubidi_getVisualRun_69
ubidi_countRuns_69
ubidi_getBaseDirection_69
ubidi_getDirection_69
ubidi_setPara_69
ubidi_close_69
ubidi_openSized_69
udata_setCommonData_69
??0UnicodeString@icu_69@@QEAA@PEBDH@Z
?length@UnicodeString@icu_69@@QEBAHXZ
u_errorName_69
?createCharacterInstance@BreakIterator@icu_69@@SAPEAV12@AEBVLocale@2@AEAW4UErrorCode@@@Z
?createLineInstance@BreakIterator@icu_69@@SAPEAV12@AEBVLocale@2@AEAW4UErrorCode@@@Z
?createWordInstance@BreakIterator@icu_69@@SAPEAV12@AEBVLocale@2@AEAW4UErrorCode@@@Z
??1Locale@icu_69@@UEAA@XZ
??0Locale@icu_69@@QEAA@PEBD000@Z
??1UnicodeString@icu_69@@UEAA@XZ
??0UnicodeString@icu_69@@QEAA@PEBD@Z
??0UnicodeString@icu_69@@QEAA@XZ
??4UnicodeString@icu_69@@QEAAAEAV01@$$QEAV01@@Z

kernel32

GetVersionExW
GetModuleFileNameW
GetSystemDefaultLocaleName

user32

DestroyWindow
RegisterRawInputDevices
GetRawInputData
GetCursorInfo
LoadIconW
LoadCursorW
ClipCursor
GetUserObjectInformationW
ScreenToClient
ClientToScreen
SetCursor
SetCursorPos
SetForegroundWindow
ReleaseCapture
ReleaseDC
GetTouchInputInfo
SetFocus
ShowWindowAsync
ShowWindow
CreateWindowExA
RegisterClassExW
PostQuitMessage
DefWindowProcW
PostMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
MessageBoxW
MonitorFromWindow
SetWindowLongPtrW
SetWindowPos
OpenClipboard
GetProcessWindowStation
SetCapture
MessageBoxA
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
GetClientRect
GetWindowRect
GetDC
ShowCursor
GetWindowLongPtrW

gdi32

ChoosePixelFormat
SetPixelFormat
SwapBuffers
DescribePixelFormat

advapi32

IsValidSid
CryptReleaseContext
CryptAcquireContextW
LookupAccountSidW
GetTokenInformation
OpenProcessToken
CryptGenRandom
CredFree
CryptCreateHash
CredDeleteW
CredEnumerateW
CredWriteW
CryptDestroyHash
CryptHashData
CryptGetHashParam

shell32

SHGetKnownFolderPath

imm32

ImmAssociateContextEx
ImmAssociateContext

msvcp140

?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?classic@locale@std@@SAAEBV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
_Thrd_hardware_concurrency
_Mtx_trylock
?ignore@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
_Cnd_signal
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
_Thrd_join
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
??0task_continuation_context@Concurrency@@AEAA@XZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_K@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?id@?$collate@D@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
_Strxfrm
_Strcoll
_Cnd_timedwait
_Mtx_current_owns
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?setf@ios_base@std@@QEAAHHH@Z
?setf@ios_base@std@@QEAAHH@Z
?_Random_device@std@@YAIXZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??Bid@locale@std@@QEAA_KXZ
_Unlock_shared_ptr_spin_lock
_Lock_shared_ptr_spin_lock
_Cnd_unregister_at_thread_exit
_Cnd_register_at_thread_exit
_Cnd_broadcast
_Cnd_wait
_Thrd_id
_Thrd_sleep
_Xtime_get_ticks
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
_Mtx_unlock
_Mtx_lock
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Xbad_alloc@std@@YAXXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Throw_Cpp_error@std@@YAXH@Z
?_Throw_C_error@std@@YAXH@Z
_Cnd_do_broadcast_at_thread_exit
_Thrd_yield
_Thrd_detach
_Query_perf_frequency
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@G@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?uncaught_exception@std@@YA_NXZ
?_Xbad_function_call@std@@YAXXZ
?_Syserror_map@std@@YAPEBDH@Z
?_Xout_of_range@std@@YAXPEBD@Z
_Cnd_destroy_in_situ
_Cnd_init_in_situ
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?_Xlength_error@std@@YAXPEBD@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?toupper@?$ctype@D@std@@QEBADD@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?toupper@?$ctype@_W@std@@QEBA_W_W@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?_Winerror_map@std@@YAHH@Z
_Query_perf_counter

bcrypt

BCryptFinishHash
BCryptGenRandom
BCryptImportKeyPair
BCryptFinalizeKeyPair
BCryptDestroyKey
BCryptExportKey
BCryptDestroyHash
BCryptOpenAlgorithmProvider
BCryptHashData
BCryptCreateHash
BCryptGenerateKeyPair
BCryptSignHash
BCryptCloseAlgorithmProvider
BCryptGetProperty

vcruntime140

memchr
__RTDynamicCast
__intrinsic_setjmp
__std_exception_copy
__std_exception_destroy
_CxxThrowException
strrchr
memcmp
memcpy
memmove
memset
__std_terminate
_purecall
__std_type_info_name
__std_type_info_compare
strchr
__current_exception_context
__current_exception
wcsstr
longjmp
__C_specific_handler
strstr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_errno
_invalid_parameter_noinfo
quick_exit
strerror_s
strerror
abort
_register_thread_local_exe_atexit_callback
_c_exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
exit
_register_onexit_function
_set_errno
_beginthreadex
terminate
_invalid_parameter_noinfo_noreturn
raise
_exit
_initialize_onexit_table

api-ms-win-crt-math-l1-1-0

log2f
fmodf
pow
logf
cosf
truncf
cos
acosf
fminf
log10f
_dclass
round
hypot
expf
_dsign
sinf
tanh
tan
sqrt
sinh
fabs
_fdsign
atan
asin
log2
atanh
expm1
log1p
trunc
acosh
cbrt
asinh
atan2f
sin
log10
powf
atan2
atanf
acos
nan
__setusermatherr
llround
ceil
log
exp
ceilf
fmin
asinf
tanf
fmod
floor
ldexp
cosh
roundf
copysignf
_fdclass
fmaxf
fmax

api-ms-win-crt-string-l1-1-0

strspn
strcspn
toupper
strncpy
strnlen
isalnum
wcstok_s
strcmp
isspace
strncmp
isdigit
tolower
strcpy_s
isalpha
strpbrk
iswcntrl
islower
isupper
_strnicmp
_stricmp

api-ms-win-crt-stdio-l1-1-0

_fileno
_close
_setmode
_open
__stdio_common_vfprintf
__stdio_common_vsnwprintf_s
__stdio_common_vsprintf
_lseeki64
_wopen
_wfopen_s
_ftelli64
_get_stream_buffer_pointers
fclose
fflush
fgetc
fgetpos
fputc
fread
_fseeki64
fwrite
setvbuf
ungetc
__stdio_common_vsscanf
__stdio_common_vsprintf_s
fgets
ftell
_set_fmode
fseek
feof
__p__commode
__stdio_common_vswprintf
fsetpos
_wfopen
_write
__stdio_common_vsnprintf_s
__stdio_common_vswprintf_s
ferror
fopen
_wfsopen
fputs
__acrt_iob_func

api-ms-win-crt-convert-l1-1-0

atoi
strtoull
_strtoui64
wcstombs
_wtoi
atof
strtoll
strtoul
mbstowcs
strtol
strtod
strtof

api-ms-win-crt-filesystem-l1-1-0

_wchmod
_wstat64
_stat64i32
remove
_unlock_file
_lock_file

api-ms-win-crt-utility-l1-1-0

rand
qsort
srand

api-ms-win-crt-time-l1-1-0

strftime
_mktime64
_ftime64
_time64
_localtime64_s
_difftime64
_gmtime64_s
_wutime64

api-ms-win-crt-locale-l1-1-0

localeconv
_configthreadlocale
setlocale

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-heap-l1-1-0

_set_new_mode

api-ms-win-core-version-l1-1-0

GetFileVersionInfoSizeExW
VerQueryValueW
GetFileVersionInfoExW

api-ms-win-eventlog-legacy-l1-1-0

ReportEventW
RegisterEventSourceW
DeregisterEventSource

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind
RtlCaptureContext
RtlLookupFunctionEntry

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-core-file-l2-1-0

GetFileInformationByHandleEx
MoveFileExW

api-ms-win-core-version-l1-1-1

GetFileVersionInfoW

api-ms-win-core-kernel32-legacy-l1-1-0

GetSystemPowerStatus

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference
WindowsCreateString
WindowsDeleteString

api-ms-win-core-winrt-l1-1-0

RoUninitialize
RoGetActivationFactory
RoInitialize
RoActivateInstance

api-ms-win-eventing-provider-l1-1-0

EventRegister
EventWriteTransfer

version

GetFileVersionInfoSizeW

Exports

Exports

AmdPowerXpressRequestHighPerformance
FTC_CMapCache_Lookup
FTC_CMapCache_New
FTC_ImageCache_Lookup
FTC_ImageCache_LookupScaler
FTC_ImageCache_New
FTC_Manager_Done
FTC_Manager_LookupFace
FTC_Manager_LookupSize
FTC_Manager_New
FTC_Manager_RemoveFaceID
FTC_Manager_Reset
FTC_Node_Unref
FTC_SBitCache_Lookup
FTC_SBitCache_LookupScaler
FTC_SBitCache_New
FT_Activate_Size
FT_Add_Default_Modules
FT_Add_Module
FT_Angle_Diff
FT_Atan2
FT_Attach_File
FT_Attach_Stream
FT_Bitmap_Blend
FT_Bitmap_Convert
FT_Bitmap_Copy
FT_Bitmap_Done
FT_Bitmap_Embolden
FT_Bitmap_Init
FT_Bitmap_New
FT_CeilFix
FT_ClassicKern_Free
FT_ClassicKern_Validate
FT_Cos
FT_DivFix
FT_Done_Face
FT_Done_FreeType
FT_Done_Glyph
FT_Done_Library
FT_Done_MM_Var
FT_Done_Size
FT_Error_String
FT_Face_CheckTrueTypePatents
FT_Face_GetCharVariantIndex
FT_Face_GetCharVariantIsDefault
FT_Face_GetCharsOfVariant
FT_Face_GetVariantSelectors
FT_Face_GetVariantsOfChar
FT_Face_Properties
FT_Face_SetUnpatentedHinting
FT_FloorFix
FT_Get_Advance
FT_Get_Advances
FT_Get_BDF_Charset_ID
FT_Get_BDF_Property
FT_Get_CID_From_Glyph_Index
FT_Get_CID_Is_Internally_CID_Keyed
FT_Get_CID_Registry_Ordering_Supplement
FT_Get_CMap_Format
FT_Get_CMap_Language_ID
FT_Get_Char_Index
FT_Get_Charmap_Index
FT_Get_Color_Glyph_Layer
FT_Get_FSType_Flags
FT_Get_First_Char
FT_Get_Font_Format
FT_Get_Gasp
FT_Get_Glyph
FT_Get_Glyph_Name
FT_Get_Kerning
FT_Get_MM_Blend_Coordinates
FT_Get_MM_Var
FT_Get_MM_WeightVector
FT_Get_Module
FT_Get_Multi_Master
FT_Get_Name_Index
FT_Get_Next_Char
FT_Get_PFR_Advance
FT_Get_PFR_Kerning
FT_Get_PFR_Metrics
FT_Get_PS_Font_Info
FT_Get_PS_Font_Private
FT_Get_PS_Font_Value
FT_Get_Postscript_Name
FT_Get_Renderer
FT_Get_Sfnt_LangTag
FT_Get_Sfnt_Name
FT_Get_Sfnt_Name_Count
FT_Get_Sfnt_Table
FT_Get_SubGlyph_Info
FT_Get_Track_Kerning
FT_Get_TrueType_Engine_Type
FT_Get_Var_Axis_Flags
FT_Get_Var_Blend_Coordinates
FT_Get_Var_Design_Coordinates
FT_Get_WinFNT_Header
FT_Get_X11_Font_Format
FT_GlyphSlot_Embolden
FT_GlyphSlot_Oblique
FT_GlyphSlot_Own_Bitmap
FT_Glyph_Copy
FT_Glyph_Get_CBox
FT_Glyph_Stroke
FT_Glyph_StrokeBorder
FT_Glyph_To_Bitmap
FT_Glyph_Transform
FT_Gzip_Uncompress
FT_Has_PS_Glyph_Names
FT_Init_FreeType
FT_Library_SetLcdFilter
FT_Library_SetLcdFilterWeights
FT_Library_SetLcdGeometry
FT_Library_Version
FT_List_Add
FT_List_Finalize
FT_List_Find
FT_List_Insert
FT_List_Iterate
FT_List_Remove
FT_List_Up
FT_Load_Char
FT_Load_Glyph
FT_Load_Sfnt_Table
FT_Matrix_Invert
FT_Matrix_Multiply
FT_MulDiv
FT_MulFix
FT_New_Face
FT_New_Glyph
FT_New_Library
FT_New_Memory_Face
FT_New_Size
FT_OpenType_Free
FT_OpenType_Validate
FT_Open_Face
FT_Outline_Check
FT_Outline_Copy
FT_Outline_Decompose
FT_Outline_Done
FT_Outline_Embolden
FT_Outline_EmboldenXY
FT_Outline_GetInsideBorder
FT_Outline_GetOutsideBorder
FT_Outline_Get_BBox
FT_Outline_Get_Bitmap
FT_Outline_Get_CBox
FT_Outline_Get_Orientation
FT_Outline_New
FT_Outline_Render
FT_Outline_Reverse
FT_Outline_Transform
FT_Outline_Translate
FT_Palette_Data_Get
FT_Palette_Select
FT_Palette_Set_Foreground_Color
FT_Property_Get
FT_Property_Set
FT_Reference_Face
FT_Reference_Library
FT_Remove_Module
FT_Render_Glyph
FT_Request_Size
FT_RoundFix
FT_Select_Charmap
FT_Select_Size
FT_Set_Char_Size
FT_Set_Charmap
FT_Set_Debug_Hook
FT_Set_Default_Properties
FT_Set_MM_Blend_Coordinates
FT_Set_MM_Design_Coordinates
FT_Set_MM_WeightVector
FT_Set_Named_Instance
FT_Set_Pixel_Sizes
FT_Set_Renderer
FT_Set_Transform
FT_Set_Var_Blend_Coordinates
FT_Set_Var_Design_Coordinates
FT_Sfnt_Table_Info
FT_Sin
FT_Stream_OpenGzip
FT_Stream_OpenLZW
FT_Stroker_BeginSubPath
FT_Stroker_ConicTo
FT_Stroker_CubicTo
FT_Stroker_Done
FT_Stroker_EndSubPath
FT_Stroker_Export
FT_Stroker_ExportBorder
FT_Stroker_GetBorderCounts
FT_Stroker_GetCounts
FT_Stroker_LineTo
FT_Stroker_New
FT_Stroker_ParseOutline
FT_Stroker_Rewind
FT_Stroker_Set
FT_Tan
FT_TrueTypeGX_Free
FT_TrueTypeGX_Validate
FT_Vector_From_Polar
FT_Vector_Length
FT_Vector_Polarize
FT_Vector_Rotate
FT_Vector_Transform
FT_Vector_Unit
NvOptimusEnablement
TT_New_Context
TT_RunIns

Sections

.text
Size: 43.4MB - Virtual size: 43.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15.8MB - Virtual size: 15.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5.6MB - Virtual size: 8.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 527KB - Virtual size: 527KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc03b03a08d448f7d796e126d8667b5f

Headers

DLL Characteristics

File Characteristics

Imports

mallocoverride

cohtml.windowsdesktop

ws2_32

fmodstudio

fmod

bink2w64

xinput1_4

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-memory-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-synch-ansi-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-com-l1-1-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-file-l1-2-2

api-ms-win-core-heap-obsolete-l1-1-0

api-ms-win-ntuser-sysparams-l1-1-0

api-ms-win-core-psapi-l1-1-0

api-ms-win-core-windowserrorreporting-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-synch-l1-1-0

iphlpapi

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-libraryloader-l1-2-1

api-ms-win-core-processthreads-l1-1-1

api-ms-win-core-processthreads-l1-1-3

api-ms-win-core-processtopology-obsolete-l1-1-0

api-ms-win-core-processenvironment-l1-1-0

api-ms-win-core-psm-appnotify-l1-1-0

api-ms-win-shcore-obsolete-l1-1-0

api-ms-win-core-timezone-l1-1-0

api-ms-win-core-sysinfo-l1-2-0

api-ms-win-core-kernel32-legacy-l1-1-2

api-ms-win-core-heap-l1-1-0

api-ms-win-core-datetime-l1-1-1

api-ms-win-core-synch-l1-2-1

api-ms-win-core-threadpool-l1-2-0

winhttp

api-ms-win-core-io-l1-1-0

api-ms-win-core-kernel32-legacy-l1-1-1

crypt32

shlwapi

steam_api64

icuuc

kernel32

user32

gdi32

advapi32

shell32

imm32

msvcp140

bcrypt

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-locale-l1-1-0

.text
Size: 43.4MB - Virtual size: 43.4MB

.rdata
Size: 15.8MB - Virtual size: 15.8MB

.data
Size: 5.6MB - Virtual size: 8.0MB

.pdata
Size: 1.9MB - Virtual size: 1.9MB

_RDATA
Size: 11KB - Virtual size: 11KB

.rsrc
Size: 30KB - Virtual size: 29KB

.reloc
Size: 527KB - Virtual size: 527KB