72120798614fda11616f0ade755c6e6a[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

72120798614fda11616f0ade755c6e6a.bin
Size

6.9MB
MD5

d3c6d6624dfae1ce01eeee52c4e7d4e3
SHA1

df19eb8087c18c30334d48186527d334e1591929
SHA256

e78a9ced4b7130bd56cf137ac354a248084ee09fd06f7e26976585b488114fb5
SHA512

43674f308fb4170864a56802ec111efb8bdf07cc93808902a33ac553ce58c8ac556965251d59ecf1232260022eb099509df918ecdb33d85205672e47b6413529
SSDEEP

196608:3WJi8cuGG9aNRHaJ1UE6B7FtNxjLkdl2U38/P3BfcZOuntXpy:3W8sGjNYjb6ztY78/5fUOun2

Score

1^/10

Malware Config

Signatures

Files

72120798614fda11616f0ade755c6e6a.bin
.zip

Password: infected
a686c4ce95d59295b545b037d555db6d7e09ef3fc9ec6bbcf1de6967df9a2297.bin
.exe windows x86

Password: infected

6cbcfc28d1defdd607eee9fd2d77f513

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

17:c1:67:1d:36:98:2c:4a:4b:e8:52:2e:75:c3:8a:03
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/05/2010, 00:00

Not After

05/05/2013, 23:59

Subject

CN=LUCASFILM ENTERTAINMENT COMPANY LTD,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=LUCASFILM ENTERTAINMENT COMPANY LTD,L=San Francisco,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

b7:02:1f:45:38:ca:1c:d6:65:78:eb:e0:31:59:86:30:2e:c4:f1:2d
Signer

Actual PE Digest

b7:02:1f:45:38:ca:1c:d6:65:78:eb:e0:31:59:86:30:2e:c4:f1:2d

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

awl_release

?D3d9Create@Win@Aspyr@@YAPAXI_N@Z
?GetConfigBlob@Win@Aspyr@@YAIPBDPAEI@Z
?gDefaultACharEncoding@Aspyr@@3W4ACharEncoding@1@A
?GetPathUserVisible@Win@Aspyr@@YAPA_WPA_WI@Z
?SetConfigBlob@Win@Aspyr@@YAXPBDPBEI@Z
?GetKbMouseButtonName@Win@Aspyr@@YAXIPA_WI_N@Z
?GetConfigString@Win@Aspyr@@YAPADPBDPADI0_N@Z
?GetMouseButtonIndex@Win@Aspyr@@YAII@Z
?GetKbMouseButtonName@Win@Aspyr@@YAXIPADI_N@Z
?SetConfigBoolean@Win@Aspyr@@YAXPBD_N@Z
?SetConfigString@Win@Aspyr@@YAXPBD0@Z
?IsActive@Win@Aspyr@@YA_NXZ
?GetAppWindow@Win@Aspyr@@YAPAUHWND__@@XZ
?D3d9DeviceReset@Win@Aspyr@@YAJPAX@Z
?ShowMouseCursor@Win@Aspyr@@YAX_N@Z
?GetLanguage@Win@Aspyr@@YAPADPADI@Z
?GetConfigBoolean@Win@Aspyr@@YA_NPBD_N1@Z
?GetConfigNumber@Win@Aspyr@@YANPBDN_N@Z
?SetConfigNumber@Win@Aspyr@@YAXPBDN@Z
?CreateAppWindow@Win@Aspyr@@YAPAUHWND__@@I@Z
?IsInstalled@Win@Aspyr@@YA_NXZ
?Update@Win@Aspyr@@YA_NXZ
?Terminate@Win@Aspyr@@YAXI@Z
?D3d9CreateDevice@Win@Aspyr@@YAJIHIPAXPAPAX@Z
?D3d9Release@Win@Aspyr@@YAXXZ
?LogTime@Aspyr@@YAX_N@Z
?Log@Aspyr@@YAXPBD_N@Z
?Init@Win@Aspyr@@YA?AW4Error@12@I@Z
?ShowErrorMessage@Win@Aspyr@@YAXW4Error@12@@Z
?IsCharInputActive@Win@Aspyr@@YA_NXZ
?D3d9DeviceTestCooperativeLevel@Win@Aspyr@@YAJXZ
?GetCpuCoreCount@Win@Aspyr@@YAIXZ
?EndCharInput@Win@Aspyr@@YAXXZ
?BeginCharInput@Win@Aspyr@@YAXXZ
?GetCharInput@Win@Aspyr@@YAPA_WPA_WI@Z
?GetDisplayVersion@Win@Aspyr@@YAPADPADI@Z

msvcp90

?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0ABV12@@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?flags@ios_base@std@@QBEHXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Xran@_String_base@std@@SAXXZ
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@II@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setprecision@std@@YA?AU?$_Smanip@H@1@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z
?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?allocate@?$allocator@D@std@@QAEPADI@Z
?deallocate@?$allocator@D@std@@QAEXPADI@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IID@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?eof@?$char_traits@D@std@@SAHXZ
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?width@ios_base@std@@QAEHH@Z
??7ios_base@std@@QBE_NXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?_Unlock@_Mutex@std@@QAEXXZ
?_Lock@_Mutex@std@@QAEXXZ
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?close@?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?flush@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?width@ios_base@std@@QBEHXZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?push_back@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXD@Z
??Bios_base@std@@QBEPAXXZ
?fail@ios_base@std@@QBE_NXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@AAD@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z

msvcr90

rewind
_acmdln
_initterm
_set_SSE2_enable
_ftime64
_strtoui64
strncpy_s
strspn
wcscoll
_wcsicoll
__libm_sse2_atan2
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_XcptFilter
__libm_sse2_pow
_isnan
__libm_sse2_cos
__libm_sse2_sin
abort
_getcwd
_strlwr
_read
_open
_fileno
_close
_itoa
__argc
__argv
memcpy
_aligned_free
fflush
fprintf
__iob_func
_aligned_malloc
_aligned_realloc
memmove_s
__CxxFrameHandler3
_CxxThrowException
strncpy
_time64
getenv
srand
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
strchr
strstr
??0exception@std@@QAE@XZ
_CIsqrt
_purecall
tolower
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
_snprintf
exit
_exit
_cexit
strtok
memset
memmove
_CIatan2
_CIcos
_CIpow
_CIsin
strncat
toupper
__getmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
_stricmp
_strnicmp
_wcsnicmp
vsprintf
strncmp
strtoul
strtod
_except_handler3
_CIacos
_CIasin
free
realloc
malloc
printf
strlen
strcmp
ferror
ungetc
freopen
getc
fread
feof
strerror
_errno
fputs
isspace
abs
pow
fgets
longjmp
_setjmp3
tmpfile
clearerr
fscanf
ftell
fseek
setvbuf
iscntrl
isalnum
isalpha
isdigit
localeconv
fabs
sin
sinh
cos
cosh
tan
tanh
asin
acos
atan
atan2
fmod
modf
sqrt
log
log10
exp
frexp
ldexp
rand
_HUGE
strcspn
strcat
strcpy
remove
rename
tmpnam
clock
strftime
_gmtime64
_localtime64
_mktime64
_difftime64
setlocale
memcmp
strpbrk
isxdigit
isupper
ispunct
islower
memchr
strcoll
_CIlog
_beginthreadex
_endthreadex
_ismbblead
_wfopen_s
_wstat64
strcpy_s
wcsncpy_s
mbstowcs_s
wcsstr
swscanf
_snwprintf
_beginthread
_atoi64
calloc
fputc
_vsnprintf_s
_strtoi64
qsort
strtol
_fstat64
_lseeki64
__sys_nerr
_stat64
isprint
isgraph
ldiv
_makepath
_splitpath
vfprintf
strcat_s
asctime
atol
_unlink
_strdup
_fullpath
_CIexp
wcstombs
wcsncpy
towupper
__dllonexit
_unlock
_vsnprintf
div
_CIfmod
floor
ceil
_wtoi
strrchr
atof
_CItan
_CIatan
fopen
fwrite
fclose
atoi
sprintf_s
sscanf
_ctime64
sprintf

libscumeuphoria_hksimd_win32_release_dll

?ARTSetHavokWorld@ART@@YAXPAVhkpWorld@@@Z
?ARTRegisterUserData@ART@@YA_NPAXH@Z
?addFloat@MessageParamsBase@ART@@QAE_NPBDM@Z
?addString@MessageParamsBase@ART@@QAE_NPBD0@Z
?setAnimationVelocityMultiplier@ART@@YAXM@Z
??0MemoryConfiguration@NMutils@@QAE@XZ
??0ARTContext@ART@@QAE@PAUMemoryConfiguration@NMutils@@III@Z
?initARTLucas@@YAXXZ
?init@ARTContext@ART@@QAE_NPAVBasicLogger@NMutils@@PBUARTContextConfiguration@2@@Z
?ARTRegisterObjectRandom@ART@@YAXPAVNMRandom@1@@Z
?ARTRegisterDebugDrawOutputter@ART@@YAXPAVNMHavokDebugDrawOutputter@1@@Z
?update@HavokPerformance@ART@@QAEXM@Z
??1HavokPerformanceMonitor@ART@@UAE@XZ
?onHangFailed@HavokPerformanceMonitor@ART@@UAEXH@Z
?onWaterImpact@HavokPerformanceMonitor@ART@@UAEXIM@Z
?onGrabFailed@HavokPerformanceMonitor@ART@@UAEXH@Z
?onStateTransition@HavokPerformanceMonitor@ART@@UAEXHH@Z
?onPerformanceAborted@HavokPerformanceMonitor@ART@@UAEXXZ
??0HavokPerformanceMonitor@ART@@QAE@XZ
??1HavokWorldAdapter@ART@@UAE@XZ
?isCharacterSliding@HavokWorldAdapter@ART@@UBE_NABVHavokPerformanceClumpProxy@2@@Z
?isCharacterHighAboveGround@HavokWorldAdapter@ART@@UBE_NABVHavokPerformanceClumpProxy@2@@Z
?isCharacterSupported@HavokWorldAdapter@ART@@UBE_NABVHavokPerformanceClumpProxy@2@@Z
?getEdge@HavokWorldAdapter@ART@@UBEABUEdge_s@12@H@Z
?removeEdgeFlags@HavokWorldAdapter@ART@@UAEXHH@Z
?addEdgeFlags@HavokWorldAdapter@ART@@UAEXHH@Z
??0HavokWorldAdapter@ART@@IAE@XZ
??1HavokMacroBehaviourManager@ART@@UAE@XZ
??0HavokMacroBehaviourManager@ART@@QAE@XZ
?INVALID_AGENTID@ART@@3IB
?ARTIsCollisionEnabled@ART@@YA?AVhkBool@@ABVhkpCollidable@@0@Z
?setPerformance@ART@@YAPAVHavokPerformance@1@IQAV21@@Z
?abort@HavokPerformance@ART@@QAEXXZ
?removeAgent@ARTContext@ART@@QAE_NPAX@Z
?getAgentHandleFromID@ARTContext@ART@@QBEPAXI@Z
?logf@BasicLogger@NMutils@@UAAXW4Level@12@PB_WZZ
??1BasicLogger@NMutils@@UAE@XZ
?ARTReplaceHkMemoryRouter@ART@@YAXPAVhkMemoryRouter@@@Z
?ARTReplaceHkMemorySystem@ART@@YAXPAVhkMemorySystem@@@Z
?ARTReplaceHkReferencedObjectLock@ART@@YAXPAVhkReferencedObjectLock@@@Z
?ARTReplaceVtableClassRegistryInstance@ART@@YAXPAVhkVtableClassRegistry@@@Z
?ARTReplaceHkFileSystem@ART@@YAXPAVhkFileSystem@@@Z
?ARTReplaceHkMultiThreadCheck@ART@@YAXPAVhkCriticalSection@@@Z
?ARTReplaceHkDebugDisplayInstance@ART@@YAXPAVhkDebugDisplay@@@Z
?ARTReplaceHkMonitorStreamInstance@ART@@YAXPAVhkMonitorStream@@@Z
?ARTReplaceHkErrorInstance@ART@@YAXPAVhkError@@@Z
?insertAgent@ARTContext@ART@@QAE_NPAX@Z
?addInt@MessageParamsBase@ART@@QAE_NPBDH@Z
?initVirtualWorld@ARTContext@ART@@QAE_NXZ
?setAnimationTimeStep@ART@@YAXM@Z
?displayActiveBehaviourList@ART@@YAX_N@Z
??0MessageParamsBase@ART@@IAE@QAUParameter@01@H@Z
?destroyAgent@ARTContext@ART@@QAE_NPAX@Z
?setComponentTMs@ARTContext@ART@@QAE_NPAXPBVMatrix34@NMP@@IW4IncomingTransformStatus@2@W4IncomingTransformSource@2@@Z
?unloadAssets@ARTContext@ART@@QAE_NXZ
??0HavokPerformance@ART@@QAE@IABVHavokPerformanceContext@1@@Z
?ARTGetHavokBody@ART@@YAPAVhkpRigidBody@@IPAD@Z
?setAgentFeedbackInterface@ARTContext@ART@@QAE_NPAXPAVARTFeedbackInterface@2@@Z
?getAgentIDFromHandle@ARTContext@ART@@QBEIPAX@Z
?createAgent@ARTContext@ART@@QAEPAXIPBD@Z
?loadAssets@ARTContext@ART@@QAEHPAUAssetBlock@2@PAI@Z
??1HavokPerformance@ART@@UAE@XZ
?getComponentTMs@ARTContext@ART@@QBE_NPAXPAVMatrix34@NMP@@I@Z
?directInvoke@ARTContext@ART@@QAE_NPAX0PBDQBVMessageParamsBase@2@@Z
?getEngineHandleByID@ARTContext@ART@@QBEPAXI@Z
?HavokARTPlugin_ENGINEID@ART@@3HB
?addBool@MessageParamsBase@ART@@QAE_NPBD_N@Z
?stepPhase1@ARTContext@ART@@QAEXM@Z
?endDataRetrieval@ARTContext@ART@@QAEXXZ
?stepPhase2@ARTContext@ART@@QAEXM@Z
?ARTRegisterHavokBody@ART@@YA_NPAVhkpRigidBody@@H@Z

kernel32

WaitForMultipleObjects
FreeLibrary
WaitForMultipleObjectsEx
CreateEventW
GetTimeZoneInformation
VirtualQuery
GetTimeFormatW
GetDateFormatW
GetLocalTime
SetThreadIdealProcessor
WaitForSingleObjectEx
GetDiskFreeSpaceA
WriteFileEx
ReadFileEx
GetModuleHandleA
ReadProcessMemory
GetFileSize
CopyFileA
RtlCaptureContext
CreateFileA
GetModuleFileNameA
FindFirstFileA
GetEnvironmentVariableA
GetFileAttributesA
CreateDirectoryA
FormatMessageA
ExpandEnvironmentStringsA
GetStdHandle
GetFileType
PeekNamedPipe
SetLastError
SleepEx
GlobalFree
WriteFile
GetFileAttributesExW
CreateFileW
ReadFile
CreateDirectoryW
GetFileAttributesW
LocalFree
OutputDebugStringA
WideCharToMultiByte
GetLastError
GetVersionExA
MultiByteToWideChar
GetThreadContext
MulDiv
lstrcmpW
SetErrorMode
QueryPerformanceFrequency
LoadLibraryA
GetProcAddress
SetThreadAffinityMask
SuspendThread
ResumeThread
ReleaseSemaphore
CreateEventA
SetEvent
ResetEvent
CreateSemaphoreA
VirtualFree
VirtualAlloc
GetSystemInfo
GetExitCodeThread
CreateThread
RaiseException
InitializeCriticalSectionAndSpinCount
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedDecrement
Sleep
InterlockedExchange
FindFirstFileExA
FindNextFileA
FindClose
InterlockedIncrement
VirtualProtect
DebugBreak
SetCurrentDirectoryA
GetCurrentDirectoryA
ReleaseMutex
WaitForSingleObject
CloseHandle
CreateMutexA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SetThreadPriority
InterlockedExchangeAdd
GetCurrentThread
InterlockedCompareExchange
GetThreadPriority

user32

RegisterWindowMessageA
MsgWaitForMultipleObjects
PeekMessageA
GetQueueStatus
PostThreadMessageA
DispatchMessageA
EnumDisplaySettingsA
GetParent
EnumDisplayDevicesA
GetKeyboardLayout
GetWindowRect
SetWindowPos
DrawTextW
GetClientRect
ClientToScreen
MapVirtualKeyA
ToAscii
GetActiveWindow
MessageBoxA
GetForegroundWindow
GetCursorPos

gdi32

RemoveFontResourceExA
AddFontResourceExA
DeleteDC
SetBkMode
SetBkColor
CreateFontA
CreateCompatibleDC
SelectObject
CreateDIBSection
SetTextColor

advapi32

GetUserNameA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

ole32

CoUninitialize
CoInitializeEx
CoCreateInstance
CoTaskMemAlloc
CoFreeUnusedLibraries
CoInitialize
CoTaskMemFree
CoSetProxyBlanket

oleaut32

SysFreeString
SysAllocString

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

d3dx9_41

D3DXCreateTextureFromFileInMemoryEx
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXGetImageInfoFromFileInMemory
D3DXGetShaderConstantTable
D3DXCreateVolumeTextureFromFileInMemoryEx

dinput8

DirectInput8Create

xinput1_3

ord2
ord5
ord3

wsock32

WSAStartup
recvfrom
accept
recv
send
getsockname
ntohs
bind
htons
listen
WSASetLastError
__WSAFDIsSet
select
inet_ntoa
gethostname
WSACleanup
connect
getsockopt
getpeername
sendto
WSAGetLastError
closesocket
setsockopt
socket

zlib1

inflate
crc32
inflateEnd
inflateInit2_
inflateInit_
zError
gzopen
gzclose
gzwrite
gzread
gzeof
gzerror
gzgetc
gzseek
gztell
inflateBackEnd
inflateBack
inflateBackInit_

winmm

timeGetTime
timeEndPeriod
timeSetEvent
timeBeginPeriod
timeKillEvent

crypt32

CryptUnprotectData
CryptProtectData

ws2_32

inet_ntoa
WSAAsyncSelect
gethostbyname
freeaddrinfo
getaddrinfo
inet_addr

wldap32

ord22
ord211
ord143
ord60
ord50
ord26
ord30
ord32
ord35
ord79
ord200
ord33
ord301
ord27
ord41
ord46

winhttp

WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetDefaultProxyConfiguration

shell32

SHGetFolderPathW

Exports

Exports

??0?$GSysAlloc_SingletonSupport@VGSysAllocWinAPI@@@@QAE@XZ
??0GBufferedFile@@IAE@XZ
??0GBufferedFile@@QAE@PAVGFile@@@Z
??0GEvent@@QAE@_N0@Z
??0GImage@@QAE@ABV0@@Z
??0GImage@@QAE@ABVGImageBase@@@Z
??0GImage@@QAE@W4ImageFormat@GImageBase@@KK@Z
??0GImage@@QAE@XZ
??0GMutex@@QAE@_N0@Z
??0GSemaphore@@QAE@H_N@Z
??0GSysAlloc@@QAE@XZ
??0GSysAllocStatic@@QAE@I@Z
??0GSysAllocStatic@@QAE@PAXI0I0I0I@Z
??0GSysAllocWinAPI@@QAE@II@Z
??0GSysFile@@QAE@ABVGString@@HH@Z
??0GSysFile@@QAE@XZ
??0GSystem@@QAE@ABUHeapDesc@GMemoryHeap@@PAVGSysAlloc@@@Z
??0GSystem@@QAE@PAVGSysAlloc@@@Z
??0GThread@@QAE@ABUCreateParams@0@@Z
??0GThread@@QAE@IH@Z
??0GThread@@QAE@P6AHPAV0@PAX@Z1IHW4ThreadState@0@@Z
??0GWaitCondition@@QAE@XZ
??1GAcquireInterface@@UAE@XZ
??1GBufferedFile@@UAE@XZ
??1GDefaultAcquireInterface@@UAE@XZ
??1GEvent@@UAE@XZ
??1GFxLoader@@UAE@XZ
??1GImage@@UAE@XZ
??1GMutex@@UAE@XZ
??1GRefCountImplCore@@UAE@XZ
??1GRefCountWeakSupportImpl@@UAE@XZ
??1GSemaphore@@UAE@XZ
??1GSystem@@QAE@XZ
??1GThread@@UAE@XZ
??1GWaitCondition@@QAE@XZ
??EGSemaphore@@QAEHH@Z
??FGSemaphore@@QAEHH@Z
??YGSemaphore@@QAEHH@Z
??ZGSemaphore@@QAEHH@Z
??_B?1??InitSystemSingleton@?$GSysAlloc_SingletonSupport@VGSysAllocWinAPI@@@@SAPAVGSysAlloc@@XZ@51
??_FGEvent@@QAEXXZ
??_FGMutex@@QAEXXZ
??_FGSemaphore@@QAEXXZ
??_FGSysAllocStatic@@QAEXXZ
??_FGSysAllocWinAPI@@QAEXXZ
??_FGSystem@@QAEXXZ
??_FGThread@@QAEXXZ
?Acquire@GWaitable@@QAE_NI@Z
?AcquireMultipleObjects@GAcquireInterface@@SA_NPAPAVGWaitable@@II@Z
?AcquireOneOfMultipleObjects@GAcquireInterface@@SAHPAPAVGWaitable@@II@Z
?AddMemSegment@GSysAllocStatic@@QAEXPAXI@Z
?AddPlayerMotionDevice@MotionEngine@AK@@YA?AW4AKRESULT@@EKKPAX@Z
?AddRef@GRefCountImpl@@QAEXXZ
?AddWaitHandler@GWaitable@@QAE_NP6AXPAX@Z0@Z
?Append@GMatrix2D@@QAEAAV1@ABV1@@Z
?Blend@GColor@@SG?AV1@V1@0M@Z
?Break@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z
?BypassEnvironment@SoundEngine@AK@@YA?AW4AKRESULT@@K_N@Z
?BytesAvailable@GBufferedFile@@UAEHXZ
?CallWaitHandlers@GWaitable@@QAEXXZ
?CallWaitHandlers@HandlerArray@GWaitable@@QAEXXZ
?CanAcquire@GAcquireInterface@@UAE_NXZ
?CanAcquire@GEvent@@UAE_NXZ
?CanAcquire@GMutex@@UAE_NXZ
?CanAcquire@GSemaphore@@UAE_NXZ
?CancelBankCallbackCookie@SoundEngine@AK@@YAXPAX@Z
?CancelEventCallback@SoundEngine@AK@@YAXK@Z
?CancelEventCallbackCookie@SoundEngine@AK@@YAXPAX@Z
?ChangeSize@GBufferedFile@@UAE_NH@Z
?CheckPoolId@MemoryMgr@AK@@YA?AW4AKRESULT@@J@Z
?ClearBanks@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?ClearPreparedEvents@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?Close@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z
?Close@GBufferedFile@@UAE_NXZ
?Close@GSysFile@@UAE_NXZ
?Container@?1??InitSystemSingleton@?$GSysAlloc_SingletonSupport@VGSysAllocWinAPI@@@@SAPAVGSysAlloc@@XZ@4USysAllocContainer@2@A
?ConvertHSIToRGB@GColor@@SGXNNNPAN00@Z
?ConvertRGBToHSI@GColor@@SGXNNNPAN00@Z
?CopyFromStream@GBufferedFile@@UAEHPAVGFile@@H@Z
?Create@StreamMgr@AK@@YAPAVIAkStreamMgr@2@ABUAkStreamMgrSettings@@@Z
?CreateDevice@StreamMgr@AK@@YAKABUAkDeviceSettings@@PAVIAkLowLevelIOHook@12@@Z
?CreatePool@MemoryMgr@AK@@YAJPAXKKKK@Z
?CreateVorbisFilePlugin@@YAPAVIAkSoftwareCodec@@PAX@Z
?CreateWaitableIncrement@GSemaphore@@QAEPAVGWaitable@@H@Z
?Destroy@GSystem@@SAXXZ
?DestroyDevice@StreamMgr@AK@@YA?AW4AKRESULT@@K@Z
?DestroyPool@MemoryMgr@AK@@YA?AW4AKRESULT@@J@Z
?DoesFlip@GMatrix2D@@QBE_NXZ
?EncloseTransform@GMatrix2D@@QBEXPAV?$GRect@M@@ABV2@@Z
?ExecuteActionOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@KW4AkActionOnEventType@12@IJW4AkCurveInterpolation@@@Z
?ExecuteActionOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PBDW4AkActionOnEventType@12@IJW4AkCurveInterpolation@@@Z
?ExecuteActionOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WW4AkActionOnEventType@12@IJW4AkCurveInterpolation@@@Z
?Exit@GThread@@UAEXH@Z
?Falign@MemoryMgr@AK@@YA?AW4AKRESULT@@JPAX@Z
?FinishAllThreads@GThread@@SAXXZ
?Flush@GBufferedFile@@UAE_NXZ
?FlushBuffer@GBufferedFile@@IAEXXZ
?Format@GColor@@QBEXPAD@Z
?Format@GMatrix2D@@QBEXPAD@Z
?Free@MemoryMgr@AK@@YA?AW4AKRESULT@@JPAX@Z
?GetAcquireInterface@GEvent@@UAEPAVGAcquireInterface@@XZ
?GetAcquireInterface@GMutex@@UAEPAVGAcquireInterface@@XZ
?GetAcquireInterface@GSemaphore@@UAEPAVGAcquireInterface@@XZ
?GetAcquireInterface@GWaitable@@UAEPAVGAcquireInterface@@XZ
?GetActiveGameObjects@Query@SoundEngine@AK@@YA?AW4AKRESULT@@AAV?$AkArray@IIUArrayPoolDefault@@$0CA@@@@Z
?GetActiveListeners@Query@SoundEngine@AK@@YA?AW4AKRESULT@@IAAK@Z
?GetBitSet@GSysAllocWinAPI@@QBEPBKI@Z
?GetBlock@MemoryMgr@AK@@YAPAXJ@Z
?GetCPUCount@GThread@@SAHXZ
?GetDefaultAcquireInterface@GDefaultAcquireInterface@@SAPAV1@XZ
?GetDefaultDeviceSettings@StreamMgr@AK@@YAXAAUAkDeviceSettings@@@Z
?GetDefaultInitSettings@MusicEngine@AK@@YAXAAUAkMusicSettings@@@Z
?GetDefaultInitSettings@SoundEngine@AK@@YAXAAUAkInitSettings@@@Z
?GetDefaultPlatformInitSettings@SoundEngine@AK@@YAXAAUAkPlatformInitSettings@@@Z
?GetDefaultSettings@StreamMgr@AK@@YAXAAUAkStreamMgrSettings@@@Z
?GetDeterminant@GMatrix2D@@QBEMXZ
?GetEnvironmentBypass@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KAA_N@Z
?GetEnvironmentVolume@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KAAM@Z
?GetEnvironmentVolumes@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KAAUAkSpeakerVolumes@@@Z
?GetErrorCode@GSysFile@@UAEHXZ
?GetExitFlag@GThread@@QBE_NXZ
?GetFileLocationResolver@StreamMgr@AK@@YAPAVIAkFileLocationResolver@12@XZ
?GetFileStat@GSysFile@@SA_NPAUGFileStat@@ABVGString@@@Z
?GetGameObjectDryLevelValue@Query@SoundEngine@AK@@YA?AW4AKRESULT@@IAAM@Z
?GetGameObjectEnvironmentsValues@Query@SoundEngine@AK@@YA?AW4AKRESULT@@IPAUAkEnvironmentValue@@AAK@Z
?GetHSI@GColor@@QBEXPAH00@Z
?GetHSI@GColor@@QBEXPAM00@Z
?GetHSV@GColor@@QBEXPAH00@Z
?GetHSV@GColor@@QBEXPAM00@Z
?GetIDFromString@SoundEngine@AK@@YAKPBD@Z
?GetIDFromString@SoundEngine@AK@@YAKPB_W@Z
?GetIsGameObjectActive@Query@SoundEngine@AK@@YA_NI@Z
?GetLength@GBufferedFile@@UAEHXZ
?GetListenerPosition@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KAAUAkListenerPosition@@@Z
?GetListenerSpatialization@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KAA_NAAUAkSpeakerVolumes@@@Z
?GetMaxPools@MemoryMgr@AK@@YAJXZ
?GetMaxRadius@Query@SoundEngine@AK@@YA?AW4AKRESULT@@AAV?$AkArray@UGameObjDst@Query@SoundEngine@AK@@ABU1234@UArrayPoolDefault@@$0CA@@@@Z
?GetMaxRadius@Query@SoundEngine@AK@@YAMI@Z
?GetMaxScale@GMatrix2D@@QBEMXZ
?GetNumPools@MemoryMgr@AK@@YAJXZ
?GetObjectObstructionAndOcclusion@Query@SoundEngine@AK@@YA?AW4AKRESULT@@IKAAM0@Z
?GetPlayingSegmentInfo@MusicEngine@AK@@YA?AW4AKRESULT@@KAAUAkSegmentInfo@@@Z
?GetPoolAttributes@MemoryMgr@AK@@YA?AW4AkMemPoolAttributes@@J@Z
?GetPoolMemoryUsed@MemoryMgr@AK@@YAXJAAUPoolMemInfo@12@@Z
?GetPoolName@MemoryMgr@AK@@YAPA_WJ@Z
?GetPoolStats@MemoryMgr@AK@@YA?AW4AKRESULT@@JAAUPoolStats@12@@Z
?GetPosition@Query@SoundEngine@AK@@YA?AW4AKRESULT@@IAAUAkSoundPosition@@@Z
?GetPositioningInfo@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KAAUAkPositioningInfo@@@Z
?GetRTPCValue@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KIAAMAA_N@Z
?GetRTPCValue@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PBDIAAMAA_N@Z
?GetRTPCValue@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WIAAMAA_N@Z
?GetRotation@GMatrix2D@@QBENXZ
?GetSourcePlayPosition@SoundEngine@AK@@YA?AW4AKRESULT@@KPAJ@Z
?GetSpeakerConfiguration@SoundEngine@AK@@YAKXZ
?GetState@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KAAK@Z
?GetState@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PBDAAK@Z
?GetState@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WAAK@Z
?GetSwitch@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KIAAK@Z
?GetSwitch@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PBDIAAK@Z
?GetSwitch@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WIAAK@Z
?GetThreadState@GThread@@QBE?AW4ThreadState@1@XZ
?GetTimeStamp@Monitor@AK@@YAJXZ
?GetX@GMatrix2D@@QBEMXZ
?GetXScale@GMatrix2D@@QBENXZ
?GetY@GMatrix2D@@QBEMXZ
?GetYScale@GMatrix2D@@QBENXZ
?Init@GSystem@@SAXABUHeapDesc@GMemoryHeap@@PAVGSysAlloc@@@Z
?Init@GSystem@@SAXPAVGSysAlloc@@@Z
?Init@MusicEngine@AK@@YA?AW4AKRESULT@@PAUAkMusicSettings@@@Z
?Init@SoundEngine@AK@@YA?AW4AKRESULT@@PAUAkInitSettings@@PAUAkPlatformInitSettings@@@Z
?InitSystemSingleton@?$GSysAlloc_SingletonSupport@VGSysAllocWinAPI@@@@SAPAVGSysAlloc@@XZ
?IsFinished@GThread@@QBE_NXZ
?IsInitialized@MemoryMgr@AK@@YA_NXZ
?IsInitialized@SoundEngine@AK@@YA_NXZ
?IsLockedByAnotherThread@GMutex@@QAE_NXZ
?IsSignaled@GEvent@@UBE_NXZ
?IsSignaled@GMutex@@UBE_NXZ
?IsSignaled@GSemaphore@@UBE_NXZ
?IsSignaled@GWaitable@@UBE_NXZ
?IsSuspended@GThread@@QBE_NXZ
?IsValid@GMatrix2D@@QBE_NXZ
?IsValid@GSysFile@@UAE_NXZ
?LGetLength@GBufferedFile@@UAE_JXZ
?LSeek@GBufferedFile@@UAE_J_JH@Z
?LTell@GBufferedFile@@UAE_JXZ
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@KJ@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@KP6AXKW43@JPAX@Z1J@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBDJAAK@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBDP6AXKW43@JPAX@Z2JAAK@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBXKAAK@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBXKP6AXKW43@JPAX@Z2AAK@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WJAAK@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WP6AXKW43@JPAX@Z2JAAK@Z
?LoadBuffer@GBufferedFile@@IAEXXZ
?Lock@GMutex@@QAEXXZ
?LockPlaylist@DynamicSequence@SoundEngine@AK@@YAPAVPlaylist@123@K@Z
?MSleep@GThread@@SA_NI@Z
?Malign@MemoryMgr@AK@@YAPAXJIK@Z
?Malloc@MemoryMgr@AK@@YAPAXJI@Z
?Notify@GWaitCondition@@QAEXXZ
?NotifyAll@GWaitCondition@@QAEXXZ
?ObtainSemaphore@GSemaphore@@QAE_NHI@Z
?OnExit@GThread@@UAEXXZ
?Open@DynamicSequence@SoundEngine@AK@@YAKIKP6AXW4AkCallbackType@@PAUAkCallbackInfo@@@ZPAXW4DynamicSequenceType@123@@Z
?Open@GSysFile@@QAE_NABVGString@@HH@Z
?Pause@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z
?Play@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z
?PlaySourcePlugin@SoundEngine@AK@@YAKKKI@Z
?PostCode@Monitor@AK@@YA?AW4AKRESULT@@W4ErrorCode@12@W4ErrorLevel@12@@Z
?PostEvent@SoundEngine@AK@@YAKKIKP6AXW4AkCallbackType@@PAUAkCallbackInfo@@@ZPAXKPAUAkExternalSourceInfo@@@Z
?PostEvent@SoundEngine@AK@@YAKPBDIKP6AXW4AkCallbackType@@PAUAkCallbackInfo@@@ZPAXKPAUAkExternalSourceInfo@@@Z
?PostEvent@SoundEngine@AK@@YAKPB_WIKP6AXW4AkCallbackType@@PAUAkCallbackInfo@@@ZPAXKPAUAkExternalSourceInfo@@@Z
?PostString@Monitor@AK@@YA?AW4AKRESULT@@PBDW4ErrorLevel@12@@Z
?PostString@Monitor@AK@@YA?AW4AKRESULT@@PB_WW4ErrorLevel@12@@Z
?PostTrigger@SoundEngine@AK@@YA?AW4AKRESULT@@KI@Z
?PostTrigger@SoundEngine@AK@@YA?AW4AKRESULT@@PBDI@Z
?PostTrigger@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WI@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@KP6AXKW43@JPAX@Z2W4AkBankContent@12@@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@KW4AkBankContent@12@@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PBDP6AXKW43@JPAX@Z3W4AkBankContent@12@@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PBDW4AkBankContent@12@@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PB_WP6AXKW43@JPAX@Z3W4AkBankContent@12@@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PB_WW4AkBankContent@12@@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAKK@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAKKP6AXKW43@JPAX@Z3@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAPBDK@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAPBDKP6AXKW43@JPAX@Z3@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAPB_WK@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAPB_WKP6AXKW43@JPAX@Z3@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@KPAKK@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@KPAKKP6AXKW43@JPAX@Z4@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@PBDPAPBDK@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@PBDPAPBDKP6AXKW43@JPAX@Z5@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@PB_WPAPB_WK@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@PB_WPAPB_WKP6AXKW43@JPAX@Z5@Z
?Prepend@GMatrix2D@@QAEAAV1@ABV1@@Z
?PulseEvent@GEvent@@QAEXXZ
?QueryAudioObjectIDs@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KAAKPAUAkObjectInfo@@@Z
?QueryAudioObjectIDs@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PBDAAKPAUAkObjectInfo@@@Z
?QueryAudioObjectIDs@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WAAKPAUAkObjectInfo@@@Z
?Read@GBufferedFile@@UAEHPAEH@Z
?RegisterCodec@SoundEngine@AK@@YA?AW4AKRESULT@@KKP6APAVIAkSoftwareCodec@@PAX@Z1@Z
?RegisterGameObj@SoundEngine@AK@@YA?AW4AKRESULT@@I@Z
?RegisterGameObj@SoundEngine@AK@@YA?AW4AKRESULT@@IPBD@Z
?RegisterMotionDevice@MotionEngine@AK@@YAXKKP6APAVIAkPlugin@2@PAVIAkPluginMemAlloc@2@@Z@Z
?RegisterPlugin@SoundEngine@AK@@YA?AW4AKRESULT@@W4AkPluginType@@KKP6APAVIAkPlugin@2@PAVIAkPluginMemAlloc@2@@ZP6APAVIAkPluginParam@2@1@Z@Z
?Release@GRefCountImpl@@QAEXXZ
?Release@GRefCountNTSImpl@@QAEXXZ
?Release@HandlerArray@GWaitable@@QAEXXZ
?ReleaseBlock@MemoryMgr@AK@@YA?AW4AKRESULT@@JPAX@Z
?ReleaseSemaphore@GSemaphore@@QAE_NH@Z
?RemovePlayerMotionDevice@MotionEngine@AK@@YAXEKK@Z
?RemoveWaitHandler@GWaitable@@QAE_NP6AXPAX@Z0@Z
?RenderAudio@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?ResetEvent@GEvent@@QAEXXZ
?ResetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@KI@Z
?ResetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@PBDI@Z
?ResetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WI@Z
?ResolveDialogueEvent@DynamicDialogue@SoundEngine@AK@@YAKKPAKK@Z
?ResolveDialogueEvent@DynamicDialogue@SoundEngine@AK@@YAKPBDPAPBDK@Z
?ResolveDialogueEvent@DynamicDialogue@SoundEngine@AK@@YAKPB_WPAPB_WK@Z
?Resume@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z
?Resume@GThread@@QAE_NXZ
?Run@GThread@@UAEHXZ
?Seek@GBufferedFile@@UAEHHH@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@KIJ_N@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@KIM_N@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PBDIJ_N@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PBDIM_N@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WIJ_N@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WIM_N@Z
?SetActiveListeners@SoundEngine@AK@@YA?AW4AKRESULT@@IK@Z
?SetAttenuationScalingFactor@SoundEngine@AK@@YA?AW4AKRESULT@@IM@Z
?SetBankLoadIOSettings@SoundEngine@AK@@YA?AW4AKRESULT@@MD@Z
?SetBufferMode@GBufferedFile@@IAE_NW4BufferModeType@1@@Z
?SetEnvironmentVolume@SoundEngine@AK@@YA?AW4AKRESULT@@KM@Z
?SetEnvironmentVolumes@SoundEngine@AK@@YA?AW4AKRESULT@@KABUAkSpeakerVolumes@@@Z
?SetEvent@GEvent@@QAEXXZ
?SetExitFlag@GThread@@QAEX_N@Z
?SetFileLocationResolver@StreamMgr@AK@@YAXPAVIAkFileLocationResolver@12@@Z
?SetGameObjectDryLevelValue@SoundEngine@AK@@YA?AW4AKRESULT@@IM@Z
?SetGameObjectEnvironmentsValues@SoundEngine@AK@@YA?AW4AKRESULT@@IPAUAkEnvironmentValue@@K@Z
?SetHSI@GColor@@QAEXHHH@Z
?SetHSI@GColor@@QAEXMMM@Z
?SetHSV@GColor@@QAEXHHH@Z
?SetHSV@GColor@@QAEXMMM@Z
?SetIdentity@GMatrix2D@@QAEXXZ
?SetInverse@GMatrix2D@@QAEXABV1@@Z
?SetLerp@GMatrix2D@@QAEXABV1@0M@Z
?SetListenerPipeline@SoundEngine@AK@@YA?AW4AKRESULT@@K_N0@Z
?SetListenerPosition@SoundEngine@AK@@YA?AW4AKRESULT@@ABUAkListenerPosition@@K@Z
?SetListenerScalingFactor@SoundEngine@AK@@YA?AW4AKRESULT@@KM@Z
?SetListenerSpatialization@SoundEngine@AK@@YA?AW4AKRESULT@@K_NPAUAkSpeakerVolumes@@@Z
?SetLocalOutput@Monitor@AK@@YA?AW4AKRESULT@@KP6AXW4ErrorCode@12@PB_WW4ErrorLevel@12@KI@Z@Z
?SetMonitoring@MemoryMgr@AK@@YA?AW4AKRESULT@@J_N@Z
?SetMultiplePositions@SoundEngine@AK@@YA?AW4AKRESULT@@IPBUAkSoundPosition@@GW4MultiPositionType@12@@Z
?SetObjectObstructionAndOcclusion@SoundEngine@AK@@YA?AW4AKRESULT@@IKMM@Z
?SetPlayerListener@MotionEngine@AK@@YAXEE@Z
?SetPlayerVolume@MotionEngine@AK@@YAXEM@Z
?SetPoolName@MemoryMgr@AK@@YA?AW4AKRESULT@@JPBD@Z
?SetPoolName@MemoryMgr@AK@@YA?AW4AKRESULT@@JPB_W@Z
?SetPosition@SoundEngine@AK@@YA?AW4AKRESULT@@IABUAkSoundPosition@@K@Z
?SetPositionInternal@SoundEngine@AK@@YA?AW4AKRESULT@@IABUAkSoundPosition@@K@Z
?SetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@KMI@Z
?SetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@PBDMI@Z
?SetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WMI@Z
?SetState@SoundEngine@AK@@YA?AW4AKRESULT@@KK@Z
?SetState@SoundEngine@AK@@YA?AW4AKRESULT@@PBD0@Z
?SetState@SoundEngine@AK@@YA?AW4AKRESULT@@PB_W0@Z
?SetSwitch@SoundEngine@AK@@YA?AW4AKRESULT@@KKI@Z
?SetSwitch@SoundEngine@AK@@YA?AW4AKRESULT@@PBD0I@Z
?SetSwitch@SoundEngine@AK@@YA?AW4AKRESULT@@PB_W0I@Z
?SetVolumeThreshold@SoundEngine@AK@@YA?AW4AKRESULT@@M@Z
?SkipBytes@GBufferedFile@@UAEHH@Z
?Sleep@GThread@@SA_NI@Z
?Start@GThread@@UAE_NW4ThreadState@1@@Z
?StartOutputCapture@SoundEngine@AK@@YA?AW4AKRESULT@@PB_W@Z
?Stop@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z
?StopAll@SoundEngine@AK@@YAXI@Z
?StopOutputCapture@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?StopPlayingID@SoundEngine@AK@@YAXK@Z
?StopSourcePlugin@SoundEngine@AK@@YA?AW4AKRESULT@@KKK@Z
?Suspend@GThread@@QAE_NXZ
?Swap@GMatrix2D@@QAEXPAV1@@Z
?Tell@GBufferedFile@@UAEHXZ
?Term@MemoryMgr@AK@@YAXXZ
?Term@MusicEngine@AK@@YAXXZ
?Term@SoundEngine@AK@@YAXXZ
?Transform@GMatrix2D@@QBEXPAV?$GPoint@M@@ABV2@@Z
?TransformByInverse@GMatrix2D@@QBEXPAV?$GPoint@M@@ABV2@@Z
?TransformVector@GMatrix2D@@QBEXPAV?$GPoint@M@@ABV2@@Z
?TryAcquire@GAcquireInterface@@UAE_NXZ
?TryAcquire@GEvent@@UAE_NXZ
?TryAcquire@GMutex@@UAE_NXZ
?TryAcquire@GSemaphore@@UAE_NXZ
?TryAcquireCancel@GAcquireInterface@@UAE_NXZ
?TryAcquireCancel@GEvent@@UAE_NXZ
?TryAcquireCancel@GMutex@@UAE_NXZ
?TryAcquireCancel@GSemaphore@@UAE_NXZ
?TryAcquireCommit@GAcquireInterface@@UAE_NXZ
?TryAcquireCommit@GEvent@@UAE_NXZ
?TryAcquireCommit@GMutex@@UAE_NXZ
?TryAcquireCommit@GSemaphore@@UAE_NXZ
?TryLock@GMutex@@QAE_NXZ
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@KP6AXKW43@JPAX@Z1@Z
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@KPAJ@Z
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBDP6AXKW43@JPAX@Z2@Z
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBDPAJ@Z
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WP6AXKW43@JPAX@Z2@Z
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WPAJ@Z
?Unlock@GMutex@@QAEXXZ
?UnlockPlaylist@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z
?UnregisterAllGameObj@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?UnregisterGameObj@SoundEngine@AK@@YA?AW4AKRESULT@@I@Z
?Wait@GEvent@@QAE_NI@Z
?Wait@GWaitCondition@@QAE_NPAVGMutex@@I@Z
?Wait@GWaitable@@QAE_NI@Z
?Write@GBufferedFile@@UAEHPBEH@Z
?_TestClusteringCreate@@YAPAXXZ
?_TestClusteringDestroy@@YAXPAX@Z
?_TestSapCreate@@YAPAXXZ
?_TestSapDestroy@@YAXPAX@Z
?_TestTetCreate@@YAPAXXZ
?_TestTetDestroy@@YAXPAX@Z
?m_pStreamMgr@IAkStreamMgr@AK@@1PAV12@A
metis_edgend
metis_estimatememory
metis_mcpartgraphkway
metis_mcpartgraphrecursive
metis_meshtodual
metis_meshtonodal
metis_nodend
metis_nodewnd
metis_partgraphkway
metis_partgraphrecursive
metis_partgraphvkway
metis_partmeshdual
metis_partmeshnodal
metis_wpartgraphkway
metis_wpartgraphrecursive
metis_wpartgraphvkway

Sections

.text
Size: 11.1MB - Virtual size: 11.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.7MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asmfst
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

6cbcfc28d1defdd607eee9fd2d77f513

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate

Extended Key Usages

Key Usages

17:c1:67:1d:36:98:2c:4a:4b:e8:52:2e:75:c3:8a:03Certificate

Extended Key Usages

Key Usages

b7:02:1f:45:38:ca:1c:d6:65:78:eb:e0:31:59:86:30:2e:c4:f1:2dSigner

Headers

DLL Characteristics

File Characteristics

Imports

awl_release

msvcp90

msvcr90

libscumeuphoria_hksimd_win32_release_dll

kernel32

user32

gdi32

advapi32

ole32

oleaut32

version

d3dx9_41

dinput8

xinput1_3

wsock32

zlib1

winmm

crypt32

ws2_32

wldap32

winhttp

shell32

Exports

Exports

Sections

.text Size: 11.1MB - Virtual size: 11.1MB

.rdata Size: 2.0MB - Virtual size: 2.0MB

.data Size: 2.7MB - Virtual size: 4.1MB

.tls Size: 3KB - Virtual size: 2KB

.asmfst Size: 2KB - Virtual size: 1KB

.rsrc Size: 210KB - Virtual size: 210KB

.reloc Size: 1.3MB - Virtual size: 1.3MB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

17:c1:67:1d:36:98:2c:4a:4b:e8:52:2e:75:c3:8a:03
Certificate

b7:02:1f:45:38:ca:1c:d6:65:78:eb:e0:31:59:86:30:2e:c4:f1:2d
Signer

.text
Size: 11.1MB - Virtual size: 11.1MB

.rdata
Size: 2.0MB - Virtual size: 2.0MB

.data
Size: 2.7MB - Virtual size: 4.1MB

.tls
Size: 3KB - Virtual size: 2KB

.asmfst
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 210KB - Virtual size: 210KB

.reloc
Size: 1.3MB - Virtual size: 1.3MB