Static task
static1
Behavioral task
behavioral1
Sample
7dd48e5bde6127938737116a25809144ed4005f64422453a77f0e2dccf172d23.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
7dd48e5bde6127938737116a25809144ed4005f64422453a77f0e2dccf172d23.exe
Resource
win10v2004-20230915-en
General
-
Target
7dd48e5bde6127938737116a25809144ed4005f64422453a77f0e2dccf172d23
-
Size
2.8MB
-
MD5
f2e1bdb5e22a27c5cd00387b2f16907c
-
SHA1
b65153f3df1971b006cb0889e3b6dac8e6117ab0
-
SHA256
7dd48e5bde6127938737116a25809144ed4005f64422453a77f0e2dccf172d23
-
SHA512
70d384eb1257025b45f598aea14010c6fafd9ca101ebc227863a1536caa2fc68232b976cd07fc346556f6a16edae95446e3872ff3074b6b756a7e67bae0a7aca
-
SSDEEP
49152:FK+Q7IujzL6S5DpdNwoY6xYDFqUAZLgb0OHaxI3A24O:Q8mzLxso9xYhqUAo0OHd3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7dd48e5bde6127938737116a25809144ed4005f64422453a77f0e2dccf172d23
Files
-
7dd48e5bde6127938737116a25809144ed4005f64422453a77f0e2dccf172d23.exe windows:6 windows x86
275c67fb0058115d864a44319730bacc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmGetConversionStatus
ImmGetCandidateListA
ImmGetDescriptionA
ImmAssociateContextEx
ImmGetCompositionStringA
ImmCreateContext
ImmGetContext
mindpower3d_d8r
?SetDirectLightColor@MPRender@@QAEXMMMM@Z
?SetDirectLightDir@MPRender@@QAEXMMM@Z
?SetAlpha@CMPPartCtrl@@QAEXM@Z
?RenderAllLines@MPRender@@QAEXXZ
?RestoreEffect@CMPResManger@@QAEXXZ
?setFontEffectCom@CMPPartCtrl@@QAEXAAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@HPAVCMPResManger@@PAUD3DXVECTOR3@@HUD3DXCOLOR@@_N4@Z
?lwGUIDCreateObject@MindPower@@YAJPAPAX_J@Z
?lwQuaternionRotationAxis@MindPower@@YAPAUD3DXQUATERNION@@PAU2@PBUD3DXVECTOR3@@M@Z
?Init@MPGameApp@@QAEHPAUHINSTANCE__@@PBDHHHH@Z
?GetPickPos@MPMap@@QAEHHHAAUD3DXVECTOR3@@@Z
?GetPickPosEditor@MPMap@@QAEHHHAAUD3DXVECTOR3@@@Z
?SetSectionTileData@MPMap@@QAEXHHE@Z
?AddTexLayer@MPTile@@QAEXEE@Z
?Offset@MPTile@@2PAY01HA
?g_nTemp@@3HA
?ShowBoundingObject@MPSceneObject@MindPower@@QAEXH@Z
?HitTestHelperMesh@MPSceneObject@MindPower@@QAEJPAUlwPickInfo@2@PBUD3DXVECTOR3@@1PBD@Z
?setRegion@MPTile@@QAEXHH@Z
?setObjHeight@MPTile@@QAEXEM@Z
?getObjHeight@MPTile@@QAEME@Z
?setBlock@MPTile@@QAEXEH@Z
?EnableAlpha@MPRender@@QAEXH@Z
?GetHelperObject@MPSceneObject@MindPower@@QAEPAVlwIHelperObject@2@XZ
?CleanVectPartArr@CMPResManger@@QAE_NXZ
?Load@MPMap@@QAEHPBDH@Z
??1MPMap@@QAE@XZ
??0MPMap@@QAE@XZ
?_Instance@MPTerrainSet@@1PAV1@A
?lwRegisterOutputResetDeviceProc@MindPower@@YAJP6AJXZ@Z
?lwRegisterOutputLoseDeviceProc@MindPower@@YAJP6AJXZ@Z
?SetTextureLOD@MPCharacter@MindPower@@QAEXK@Z
?ShowHelperObject@MPCharacter@MindPower@@QAEXH@Z
?HitTestPrimitive@MPCharacter@MindPower@@QAEJPAUlwPickInfo@2@PBUD3DXVECTOR3@@1@Z
?SetTextureLOD@MPSceneItem@MindPower@@QAEXK@Z
?HitTestPrimitive@MPSceneItem@MindPower@@QAEJPAUlwPickInfo@2@PBUD3DXVECTOR3@@1@Z
?ShowHelperMesh@MPSceneObject@MindPower@@QAEXH@Z
?GetPrimitive@MPSceneObject@MindPower@@QAEPAVlwIPrimitive@2@K@Z
?HitTestPrimitive@MPSceneObject@MindPower@@QAEJPAUlwPickInfo@2@PBUD3DXVECTOR3@@1@Z
??1MPSceneObject@MindPower@@UAE@XZ
?GetTileHeight@MPMap@@QAEMHH@Z
?Destroy@MPSceneItem@MindPower@@QAEXXZ
?GetPrimitiveNum@MPSceneObject@MindPower@@QBEKXZ
?Destroy@MPSceneObject@MindPower@@QAEXXZ
?FrameMove@MPMap@@QAEXK@Z
?DynamicLoading@MPMap@@QAEXK@Z
?ClearPrint@MPRender@@QAEXH@Z
?lwPrimitiveTexLit@MindPower@@YAJPAVlwIPrimitive@1@PBD1KK@Z
?GetPrimitive@MPSceneItem@MindPower@@QAEPAVlwIPrimitive@2@XZ
?GetOpacity@MPSceneItem@MindPower@@QAEMXZ
?SetOpacity@MPSceneItem@MindPower@@QAEXM@Z
?lwPrimitiveGetObjHeight@MindPower@@YAJPAVlwIPrimitive@1@PAM@Z
?GetLightID@CMagicCtrl@@QAEHXZ
?lwVec3Mat44Mul@MindPower@@YAPAUD3DXVECTOR3@@PAU2@PBUD3DXMATRIX@@@Z
?PlayDefaultAnimation@MPSceneObject@MindPower@@QAEJM@Z
?Render@MPSceneObject@MindPower@@QAEXXZ
?FrameMove@MPSceneObject@MindPower@@QAEXXZ
?Load@MPSceneObject@MindPower@@QAEJPBDK@Z
??0MPSceneObject@MindPower@@QAE@XZ
?RenderSea@MPMap@@QAEXXZ
?Render@MPMap@@QAEXXZ
?AddLine@MPRender@@QAEXAAUD3DXVECTOR3@@0K@Z
?GetTransparentFlag@MPSceneObject@MindPower@@QBEKXZ
?Render@CMPResManger@@QAEXXZ
?LightEnable@MPRender@@QAEXKK@Z
?GetLightEnable@MPRender@@QAEXKPAH@Z
?GetLight@MPRender@@QAEXKPAU_D3DLIGHT8@@@Z
?SetLight@MPRender@@QAEXKPAU_D3DLIGHT8@@@Z
?lwLoadTex@MindPower@@YAJPAPAVlwITex@1@PAVlwIResourceMgr@1@PBD2W4_D3DFORMAT@@@Z
?lwLoadTex@MindPower@@YAJPAPAVlwITex@1@PAVlwIResourceMgr@1@PBUlwTexInfo@1@@Z
?Instance@UIClip@ui@@SAPAV12@XZ
?ClearCacheInArr@CMPFont@@SAXE@Z
?SetClipRect@UIClip@ui@@QAEXHHHH@Z
??1MPCamera@@QAE@XZ
??0MPCamera@@QAE@XZ
?LookAt@MPRender@@QAEXUD3DXVECTOR3@@0K@Z
?SetCurrentView@MPRender@@QAEXHH@Z
?ResMgr@@3VCMPResManger@@A
?g_Render@@3VMPRender@@A
?SetShowSize@MPMap@@QAEXHH@Z
?SetTransformView@MPRender@@QAEXPBUD3DXMATRIX@@@Z
?AddText@MPConsole@@QAEXPBD@Z
?OnCharEvent@MPConsole@@QAEHDK@Z
?OnKeyDownEvent@MPConsole@@QAEHH@Z
?Show@MPConsole@@QAEXH@Z
?_Instance@CEff_ParamSet@@1PAV1@A
?ToggleFullScreen@MPRender@@QAEHHHW4_D3DFORMAT@@H@Z
?MoveForward@MPCamera@@QAEXMH@Z
?MoveRight@MPCamera@@QAEXMH@Z
?Turn@MPCamera@@QAEXMPAUD3DXVECTOR3@@@Z
??0MPResourceSet@@QAE@HH@Z
?SetTransformProj@MPRender@@QAEXPBUD3DXMATRIX@@@Z
??0MPTerrainSet@@QAE@HH@Z
??0CEff_ParamSet@@QAE@HH@Z
??0CGroup_ParamSet@@QAE@HH@Z
?FrameMove@MPGameApp@@QAEXK@Z
?Render@MPGameApp@@QAEXXZ
?SetCaption@MPGameApp@@QAEXPBD@Z
?SetInputActive@MPGameApp@@QAEX_N@Z
?LG_Config@MPGameApp@@UAEXABULGInfo@@@Z
?CaptureScreen@MPRender@@QAEXPAD@Z
?HandleKeyUp@MPGameApp@@UAEXXZ
??0MPGameApp@@QAE@XZ
??1MPGameApp@@QAE@XZ
?End@MPGameApp@@UAEXXZ
?LoadTerrainSet@MPGameApp@@QAEHPBDH@Z
?UnloadTerrainSet@MPGameApp@@QAEHXZ
?LoadResourceSet@MPGameApp@@QAEHPBDHH@Z
?UnloadResourceSet@MPGameApp@@QAEHXZ
?LoadResource@MPGameApp@@QAEHXZ
?LoadRes2@MPGameApp@@QAEHXZ
?LoadRes3@MPGameApp@@QAEHXZ
??0CMPFont@@QAE@XZ
??1CMPFont@@QAE@XZ
?CreateFontA@CMPFont@@QAE_NPAVMPRender@@PADHHK@Z
?BindingRes@CMPFont@@QAEXPAVCMPResManger@@@Z
?ReleaseFont@CMPFont@@QAEXXZ
?FrameMove@CMPResManger@@QAEXK@Z
?Print@MPRender@@QAAXHHHPBDZZ
?IsAltPress@MPGameApp@@QAEHXZ
?GetHeight@MPMap@@QAEMMM@Z
?WorldToScreen@MPRender@@QAEHMMMPAH0@Z
?Play@CMPShadeCtrl@@QAEXH@Z
?End@CMPPartCtrl@@QAEXXZ
?MoveTo@CMPPartCtrl@@QAEXPAUD3DXVECTOR3@@PAVMPMap@@@Z
?BindingBone@CMPPartCtrl@@QAEXPAUD3DXMATRIX@@@Z
?setYaw@CMPPartCtrl@@QAEXM@Z
?setPitch@CMPPartCtrl@@QAEXM@Z
?setRoll@CMPPartCtrl@@QAEXM@Z
?setScale@CMPPartCtrl@@QAEXMMM@Z
?setFontEffect@CMPPartCtrl@@QAEXPADPAVCMPFont@@@Z
?IsPlay@CMPModelEff@@QAE_NXZ
?Scaling@CMPModelEff@@QAEXMMM@Z
?MoveTo@CMPModelEff@@QAEXMMM@Z
?SetAlpha@CMPModelEff@@QAEXM@Z
?IsPointVisible@MPMap@@QAEHMM@Z
?Reset@CMPEffectCtrl@@QAEXXZ
?Clear@CMPEffectCtrl@@QAEXXZ
?CopyPartCtrl@CMPEffectCtrl@@QAEXPAVCMPPartCtrl@@@Z
?BindingRes@CMPEffectCtrl@@QAEXPAVCMPResManger@@@Z
?SetItemDummy@CMPEffectCtrl@@QAEXPAVMPSceneItem@MindPower@@HH@Z
?setUseZBuff@CMPEffectCtrl@@QAEX_N@Z
?setDir@CMPEffectCtrl@@QAEXPAUD3DXVECTOR3@@@Z
?Stop@CMagicCtrl@@QAEXXZ
?GetModelEff@CMagicCtrl@@QAEPAVCMPModelEff@@H@Z
?GetPartCtrlID@CMPResManger@@QAEHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetPartCtrlByID@CMPResManger@@QAEPAVCMPPartCtrl@@H@Z
?_Instance@CGroup_ParamSet@@1PAV1@A
?SetStripCharacter@CMPPartCtrl@@QAEXPAVMPCharacter@MindPower@@@Z
?SetStripItem@CMPPartCtrl@@QAEXPAVMPSceneItem@MindPower@@_N@Z
?SetPlayType@CMPPartCtrl@@QAEXH@Z
?Play@CMPPartCtrl@@QAEXH@Z
?IsPlaying@CMPPartCtrl@@QAE_NXZ
??0CMagicCtrl@@QAE@XZ
??1CMagicCtrl@@QAE@XZ
?Create@CMagicCtrl@@QAE_NHPAVCMPResManger@@@Z
?MoveTo@CMagicCtrl@@QAEXPAUD3DXVECTOR3@@@Z
?FrameMove@CMagicCtrl@@QAEXK@Z
?Render@CMagicCtrl@@QAEXXZ
?Emission@CMagicCtrl@@QAEXPAUD3DXVECTOR3@@0@Z
?Reset@CMagicCtrl@@QAEXXZ
?ResetDir@CMagicCtrl@@QAEXPAUD3DXVECTOR3@@@Z
??0CMPShadeCtrl@@QAE@XZ
??1CMPShadeCtrl@@QAE@XZ
?Create@CMPShadeCtrl@@QAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVCMPResManger@@M_NHH@Z
?MoveTo@CMPShadeCtrl@@QAEXUD3DXVECTOR3@@PAVMPMap@@M@Z
?FrameMove@CMPShadeCtrl@@QAEXK@Z
?Render@CMPShadeCtrl@@QAEXXZ
??0CMPEffectCtrl@@QAE@XZ
??1CMPEffectCtrl@@QAE@XZ
?FrameMove@CMPEffectCtrl@@QAEXK@Z
?Render@CMPEffectCtrl@@QAEXXZ
?BindingBone@CMPEffectCtrl@@QAEXPAUD3DXMATRIX@@@Z
?SetTransformWorld@MPRender@@QAEXPBUD3DXMATRIX@@@Z
?SetVertexShader@MPRender@@QAEXK@Z
?SetStreamSource@MPRender@@QAEJIPAUIDirect3DVertexBuffer8@@II@Z
?SetIndices@MPRender@@QAEJPAUIDirect3DIndexBuffer8@@I@Z
?DrawIndexedPrimitive@MPRender@@QAEJW4_D3DPRIMITIVETYPE@@HIIII@Z
?SetTexture@MPRender@@QAEXHPAUIDirect3DTexture8@@@Z
?Draw3DText@CMPFont@@QAE_NPADAAUD3DXVECTOR3@@UD3DXCOLOR@@M@Z
?PlayDefaultPose@lwINodeObjectA@MindPower@@SAJPAVlwINodeObject@2@@Z
?setFrameTime@CMPShadeCtrl@@QAEXM@Z
?setTexFrameTime@CMPShadeCtrl@@QAEXM@Z
?SetAlphaType@CMPShadeCtrl@@QAEXW4_D3DBLEND@@0@Z
?_Instance@MPTexSet@@1PAV1@A
?GetInvViewMatrix@MPRender@@QAEXPAUD3DXMATRIX@@@Z
?SetTextureStageState@MPRender@@QAEXHW4_D3DTEXTURESTAGESTATETYPE@@H@Z
?SetRenderState@MPRender@@QAEXW4_D3DRENDERSTATETYPE@@H@Z
?SetRenderStateForced@MPRender@@QAEXW4_D3DRENDERSTATETYPE@@H@Z
?SetTextureStageStateForced@MPRender@@QAEXHW4_D3DTEXTURESTAGESTATETYPE@@H@Z
?GetRenderState@MPRender@@QAEXW4_D3DRENDERSTATETYPE@@PAK@Z
??0MPSceneItem@MindPower@@QAE@XZ
??1MPSceneItem@MindPower@@UAE@XZ
?Load@MPSceneItem@MindPower@@QAEJPBDH@Z
?FrameMove@MPSceneItem@MindPower@@QAEXXZ
?Render@MPSceneItem@MindPower@@QAEXXZ
?PlayObjImpPose@MPSceneItem@MindPower@@QAEJKKKMM@Z
??0MPCharacter@MindPower@@QAE@XZ
?StartLoad@MPCharacter@MindPower@@QAEXXZ
?EndLoad@MPCharacter@MindPower@@QAEXXZ
?LoadPart@MPCharacter@MindPower@@QAEJKPBD@Z
?DestroyPart@MPCharacter@MindPower@@QAEJK@Z
?PlayPose@MPCharacter@MindPower@@QAEJKKMMKK@Z
?PlayPose@MPCharacter@MindPower@@QAEJPBUlwPlayPoseInfo@2@@Z
?SetPoseKeyFrameProc@MPCharacter@MindPower@@QAEJP6AXKKKKPAX@Z0@Z
?SetObjImpPoseKeyFrameProc@MPCharacter@MindPower@@QAEJKKP6AXKKKKPAX@Z0@Z
?PlayObjImpPose@MPCharacter@MindPower@@QAEJKKKKMM@Z
?PlayObjImpPose@MPCharacter@MindPower@@QAEJKKPBUlwPlayPoseInfo@2@@Z
?GetPlayPoseInfo@MPCharacter@MindPower@@QAEPAUlwPlayPoseInfo@2@XZ
?GetObjImpPlayPoseInfo@MPCharacter@MindPower@@QAEPAUlwPlayPoseInfo@2@KK@Z
?GetPoseCtrl@MPCharacter@MindPower@@QAEPAVlwIPoseCtrl@2@XZ
?GetObjImpPoseCtrl@MPCharacter@MindPower@@QAEPAVlwIPoseCtrl@2@KK@Z
?FrameMove@MPCharacter@MindPower@@QAEXXZ
?Render@MPCharacter@MindPower@@QAEXXZ
?Destroy@MPCharacter@MindPower@@QAEXXZ
?AttachItem@MPCharacter@MindPower@@QAEJPBUMPItemLinkInfo@2@@Z
?SetMaterial@MPCharacter@MindPower@@QAEXPBU_D3DMATERIAL8@@@Z
?lwUpdateSceneTransparentObject@MindPower@@YAXXZ
?lwPrimitiveTexLitA@MindPower@@YAJPAVlwIPrimitive@1@PBD11K@Z
?lwPrimitiveSetVertexShader@MindPower@@YAJPAVlwIPrimitive@1@K@Z
?GetPickRayVector@MPRender@@QAEXHHPAUD3DXVECTOR3@@0@Z
?EnableZBuffer@MPRender@@QAEXH@Z
?GetTile@MPMap@@QAEPAUMPTile@@HH@Z
?SetSkillCtrl@CMPEffectCtrl@@QAEXPAUSkillCtrl@@@Z
?SetSkillCtrl@CMagicCtrl@@QAEXPAUSkillCtrl@@@Z
?GetObjDummyRunTimeMatrix@MPSceneItem@MindPower@@QAEJPAUD3DXMATRIX@@K@Z
?PlayDefaultAnimation@MPSceneItem@MindPower@@QAEJM@Z
??1MPCharacter@MindPower@@UAE@XZ
?LoadBone@MPCharacter@MindPower@@QAEJPBD@Z
?GetObjDummyRunTimeMatrix@MPCharacter@MindPower@@QAEJPAUD3DXMATRIX@@K@Z
?GetObjDummyRunTimeMatrix@MPCharacter@MindPower@@QAEJPAUD3DXMATRIX@@KK@Z
?SetOpacity@MPCharacter@MindPower@@QAEXM@Z
?GetOpacity@MPCharacter@MindPower@@QAEMXZ
?SetPos@lwMatrixCtrl@MindPower@@QAEXPAM@Z
?SetYaw@lwMatrixCtrl@MindPower@@QAEXM@Z
?GetTextSize@CMPFont@@QAEPAUtagSIZE@@PADPAU2@M@Z
?SetPitch@lwMatrixCtrl@MindPower@@QAEXM@Z
?SetRoll@lwMatrixCtrl@MindPower@@QAEXM@Z
?SetScale@lwMatrixCtrl@MindPower@@QAEXABUD3DXVECTOR3@@@Z
?UpdateYawPitchRoll@lwMatrixCtrl@MindPower@@QAEXXZ
?setColor@CMPShadeCtrl@@QAEXUD3DXCOLOR@@@Z
?DrawTextA@CMPFont@@QAE_NPADHHUD3DXCOLOR@@MPAK@Z
?DrawTextShadow@CMPFont@@QAE_NPADHHHHUD3DXCOLOR@@1@Z
?SetTextureLOD@MPSceneObject@MindPower@@QAEXK@Z
calua
CLU_LoadScript
CLU_Init
CLU_LoadState
CLU_CallScriptFunction
CLU_DllFree
CLU_RegisterFunction
ws2_32
WSACleanup
WSAStartup
inet_addr
socket
ntohs
inet_ntoa
recvfrom
htons
WSAGetLastError
closesocket
__WSAFDIsSet
connect
ioctlsocket
recv
send
getsockopt
getsockname
ntohl
htonl
gethostbyname
shutdown
select
setsockopt
pai
ipPAI_Reply
ipPAI_Passport
ipPAI_Login
ipPAI_Init
sdl
SDL_Init
SDL_RWFromFile
SDL_Quit
sdl_mixer
Mix_VolumeMusic
Mix_FadeOutMusic
Mix_FadeInChannelTimed
Mix_RewindMusic
Mix_Volume
Mix_FadeOutChannel
Mix_CloseAudio
Mix_PauseMusic
Mix_OpenAudio
Mix_ResumeMusic
Mix_Playing
Mix_PausedMusic
Mix_PlayChannelTimed
Mix_FadeInMusic
Mix_HaltChannel
Mix_PlayingMusic
Mix_FreeChunk
Mix_FreeMusic
Mix_LoadMUS
Mix_Resume
Mix_Pause
Mix_VolumeChunk
Mix_Paused
Mix_LoadWAV_RW
Mix_PlayMusic
Mix_HaltMusic
kernel32
GetTempPathW
LCMapStringEx
DecodePointer
InitializeCriticalSectionEx
EncodePointer
AreFileApisANSI
SetFileAttributesW
GetFileInformationByHandle
GetFileAttributesExW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
GetSystemTimeAsFileTime
GetModuleHandleW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
TerminateProcess
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
InterlockedPushEntrySList
RaiseException
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
ExitThread
FreeLibraryAndExitThread
SetUnhandledExceptionFilter
IsBadReadPtr
FlushInstructionCache
FreeLibrary
ReadProcessMemory
lstrcpynA
IsBadCodePtr
SetLastError
IsBadWritePtr
GetModuleFileNameA
HeapAlloc
GetStdHandle
MoveFileA
GetLocalTime
WaitForSingleObject
CreateSemaphoreA
SetThreadPriority
HeapFree
CreateFileW
GetFileSize
GetLastError
GetModuleHandleA
GetProcAddress
LoadLibraryA
WriteFile
ReadFile
GetProcessHeap
GetVersionExA
IsProcessorFeaturePresent
WideCharToMultiByte
InitializeCriticalSection
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
ResumeThread
SuspendThread
InterlockedIncrement
FindClose
FindNextFileA
FindFirstFileA
GetSystemDirectoryA
GetVolumeInformationA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
MapViewOfFile
CreateFileMappingA
GetWindowsDirectoryA
CreateThread
UnmapViewOfFile
CreatePipe
OutputDebugStringA
SetFileAttributesA
DeleteFileA
GetCurrentProcessId
TerminateThread
CreateToolhelp32Snapshot
Module32First
Module32Next
MultiByteToWideChar
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
WinExec
CloseHandle
GetCurrentThread
CreateFileA
GetProcessAffinityMask
GetCurrentProcess
SetThreadAffinityMask
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentThreadId
lstrlenA
LeaveCriticalSection
EnterCriticalSection
CreateDirectoryA
GetTickCount
Sleep
SetStdHandle
GetFileType
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetDriveTypeW
PeekNamedPipe
GetFullPathNameW
SetEnvironmentVariableW
GetCurrentDirectoryW
RemoveDirectoryW
DeleteFileW
MoveFileExW
GetModuleFileNameW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadConsoleW
HeapReAlloc
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetExitCodeProcess
CreateProcessW
HeapSize
SetEndOfFile
WriteConsoleW
FindNextFileW
FindFirstFileExW
CreateDirectoryW
LocalFree
ReleaseSemaphore
user32
SetCursor
SetClassLongA
ScreenToClient
GetCaretBlinkTime
GetCursorPos
LoadStringA
SetWindowLongA
CallWindowProcA
LoadAcceleratorsA
MoveWindow
DefWindowProcA
CreateWindowExA
LoadIconA
RegisterClassExA
GetWindowRect
IsWindowVisible
GetWindowTextA
SetWindowTextA
LoadCursorFromFileA
GetMessageA
LoadImageA
DestroyWindow
SetWindowPos
PostMessageA
ShowWindow
GetDlgItem
PostQuitMessage
GetDesktopWindow
GetKeyState
OpenClipboard
CloseClipboard
EmptyClipboard
SetClipboardData
DispatchMessageA
GetSystemMetrics
GetAsyncKeyState
TranslateMessage
SendMessageA
PeekMessageA
GetFocus
SetFocus
MessageBoxA
GetClientRect
SetRect
CreateDialogParamA
gdi32
DeleteObject
CreateSolidBrush
GetObjectA
AddFontResourceA
comdlg32
ChooseColorA
advapi32
RegOpenKeyA
RegQueryValueExA
RegCloseKey
shell32
ShellExecuteA
ShellExecuteExA
ole32
CoUninitialize
CoInitialize
oleaut32
SysAllocString
VariantClear
SysFreeString
winmm
timeGetTime
iphlpapi
GetAdaptersInfo
dbghelp
StackWalk
SymSetOptions
SymInitialize
SymGetSymFromAddr
SymCleanup
SymGetLineFromAddr
SymGetOptions
SymLoadModule
SymFunctionTableAccess
SymGetModuleBase
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 389KB - Virtual size: 389KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 383KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ