GPackage
Static task
static1
General
-
Target
KillingFloor.exe
-
Size
188KB
-
MD5
095092a44fa0fbc2e69805e7c994d8ef
-
SHA1
6a060b2f696d8ec04df76a6b089380170adaa64f
-
SHA256
13483f7c216edd418f4445056af683b625d945d80abd53abffbe0c2f7298ed1b
-
SHA512
b014e15e24c1bca3178c5d96ef5e1f1bd5160092575aa3f9a49d9992c60189cc788098a8caefeaba26fcd947f5411561d99a9127a3dbf7028eafbdf0e123e17c
-
SSDEEP
3072:EVzNeiO+hOTJ/i4jh97tvt3antoSSIYWDCjLx4:EVzqkOTJPxat1YWDCXe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource KillingFloor.exe
Files
-
KillingFloor.exe.exe windows:4 windows x86
10df73d9718d05576be25d4ab0eb0ef6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
dbghelp
MiniDumpWriteDump
comdlg32
GetSaveFileNameA
core
?appItoa@@YAPAGH@Z
?StaticFindObject@UObject@@SAPAV1@PAVUClass@@PAV1@PBGH@Z
?appUnwindf@@YAXPBGZZ
?GUnicodeOS@@3HA
?appStricmp@@YAHPBG0@Z
?appStrlen@@YAHPBG@Z
?appFromAnsi@@YAPBGPBDPAGH@Z
?appStrcpy@@YAPAGPAGPBG@Z
??1FString@@QAE@XZ
??0FString@@QAE@XZ
??DFString@@QBEPBGXZ
?GBaseCycles@@3_KA
?LocalizeGeneral@@YAPBGPBG00@Z
?winToANSI@@YAPADPADPBGH@Z
?winGetSizeANSI@@YAHPBG@Z
?appBaseDir@@YAPBGXZ
?GFileManager@@3PAVFFileManager@@A
??HFString@@QAE?AV0@PBG@Z
??0FString@@QAE@PBG@Z
?appPackage@@YAPBGXZ
??YFString@@QAEAAV0@PBG@Z
?NotifyExec@FNotifyHook@@UAEXPAXPBG@Z
?NotifyPostChange@FNotifyHook@@UAEXPAX@Z
?NotifyPreChange@FNotifyHook@@UAEXPAX@Z
??0FNotifyHook@@QAE@XZ
??0FExec@@QAE@XZ
?GIsRequestingExit@@3HA
?GIsRunning@@3HA
??0FMalloc@@QAE@XZ
?appFailAssert@@YAXPBD0H@Z
?GPageSize@@3KA
??0FOutputDevice@@QAE@XZ
?Logf@FOutputDevice@@QAAXW4EName@@PBGZZ
?appTimestamp@@YAPBGXZ
?Flush@FOutputDevice@@UAEXXZ
??0FOutputDeviceError@@QAE@XZ
?appRequestExit@@YAXH@Z
?LocalizeError@@YAPBGPBDPBG1@Z
?GIsGuarded@@3HA
?appStrncat@@YAPAGPAGPBGH@Z
?appStrncpy@@YAPAGPAGPBGH@Z
?GErrorHist@@3PAGA
?StaticShutdownAfterError@UObject@@SAXXZ
?appGetSystemErrorMessage@@YAPBGH@Z
?GLog@@3PAVFOutputDevice@@A
?GIsCriticalError@@3HA
?LocalizeError@@YAPBGPBG00@Z
?GConfig@@3PAVFConfigCache@@A
?GIsStarted@@3HA
?GIsEditor@@3HA
?GIsClient@@3HA
?GIsSoaking@@3HA
?GLogHook@@3PAVFOutputDevice@@A
??0FFeedbackContext@@QAE@XZ
?GIsSlowTask@@3HA
?appStrcmp@@YAHPBG0@Z
?ServerSteamAuthorized@FFileManager@@UAEHXZ
?ClientSteamAuthorized@FFileManager@@UAEHXZ
?GetFileLastModTime@FFileManager@@UAEHPBGAAK11111@Z
?GetFileLastModifiedTime@FFileManager@@UAEKPBG@Z
?IsCaseSensitive@FFileManager@@UBEHXZ
?GetDriveLetters@FFileManager@@UBEHAAVFString@@@Z
?CalcHomeDir@FFileManager@@UAEPBGXZ
?ExpandPath@FFileManager@@UAE?AVFString@@PBG@Z
?Init@FFileManager@@UAEXH@Z
??0FFileManager@@QAE@XZ
?GNull@@3PAVFOutputDevice@@A
??0FString@@QAE@ABV0@@Z
??YFString@@QAEAAV0@ABV0@@Z
?Printf@FString@@SA?AV1@PBGZZ
?GCRCTable@@3PAKA
?GMalloc@@3PAVFMalloc@@A
??0FArray@@QAE@XZ
?StaticLoadClass@UObject@@SAPAVUClass@@PAV2@PAV1@PBG2KPAVUPackageMap@@@Z
?StaticConstructObject@UObject@@SAPAV1@PAVUClass@@PAV1@VFName@@K1PAVFOutputDevice@@1@Z
?GError@@3PAVFOutputDeviceError@@A
?GetTransientPackage@UObject@@SAPAVUPackage@@XZ
?IsChildOf@UStruct@@QBEHPBV1@@Z
?GObjObjects@UObject@@0V?$TArray@PAVUObject@@@@A
?appSprintf@@YAHPAGPBGZZ
?Add@FArray@@QAEHHH@Z
?Logf@FOutputDevice@@QAAXPBGZZ
GIsSSE
?SafeString@FName@@SAPBGW4EName@@@Z
??4FString@@QAEAAV0@ABV0@@Z
??8FString@@QBEHPBG@Z
?Parse@@YAHPBG0AAVFString@@PAG@Z
?appStrcat@@YAPAGPAGPBG@Z
?appComputerName@@YAPBGXZ
?ParseParam@@YAHPBG0@Z
?Parse@@YAHPBG0PAGH1@Z
?appCmdLine@@YAPBGXZ
?SafeSuppressed@FName@@SAHW4EName@@@Z
??4FString@@QAEAAV0@PBG@Z
?IsError@FArchive@@QAEHXZ
?GFileManagerMiscTime@@3MA
?appSeconds@@YANXZ
?appToAnsi@@YAPBDPBGPADH@Z
?Len@FString@@QBEHXZ
??9FString@@QBEHPBG@Z
?GetError@FArchive@@UAEHXZ
?Flush@FArchive@@UAEXXZ
?DetachLazyLoader@FArchive@@UAEXPAVFLazyLoader@@@Z
?AttachLazyLoader@FArchive@@UAEXPAVFLazyLoader@@@Z
?SetStopper@FArchive@@UAEXH@Z
?AtStopper@FArchive@@UAEHXZ
?AtEnd@FArchive@@UAEHXZ
?MapObject@FArchive@@UAEHPAVUObject@@@Z
?MapName@FArchive@@UAEHPAVFName@@@Z
??6FArchive@@UAEAAV0@AAVFName@@@Z
??6FArchive@@UAEAAV0@AAPAVUObject@@@Z
?CountBytes@FArchive@@UAEXKK@Z
?Preload@FArchive@@UAEXPAVUObject@@@Z
?SerializeInt@FArchive@@UAEXAAKK@Z
?SerializeBits@FArchive@@UAEXPAXH@Z
??1FArchive@@UAE@XZ
??0FArchive@@QAE@XZ
?GFileManagerSeekTime@@3MA
?GFileManagerLoadingTime@@3MA
?GFileManagerBytesRead@@3_KA
?Precache@FArchive@@UAEXH@Z
?TotalSize@FArchive@@UAEHXZ
?GUserIni@@3PAGA
?appCeilLogTwo@@YAEK@Z
?GSecondsPerCycle@@3NA
?Remove@FArray@@QAEXHHH@Z
?appStrchr@@YAPAGPBGH@Z
??1FArray@@QAE@XZ
?appStrfind@@YAPBGPBG0@Z
??0FName@@QAE@W4EName@@@Z
?appAtoi@@YAHPBG@Z
?GExec@@3PAVFExec@@A
?GIsBenchmarking@@3HA
?GFixedTimeStep@@3MA
?GUseFixedTimeStep@@3HA
?Parse@@YAHPBG0AAH@Z
?appLoadFileToString@@YAHAAVFString@@PBGPAVFFileManager@@KH@Z
?appSaveStringToFile@@YAHABVFString@@PBGPAVFFileManager@@KH@Z
?Parse@@YAHPBG0AAM@Z
?GBuildLabel@@3PAGA
?GMachineOS@@3PAGA
?GMachineCPU@@3PAGA
?GMachineVideo@@3PAGA
?appSystemTime@@YAXAAH0000000@Z
?LeftChop@FString@@QBE?AV1@H@Z
?GetPathName@UObject@@QBEPBGPAV1@PAG@Z
??DFString@@QBE?AV0@ABV0@@Z
??DFString@@QBE?AV0@PBG@Z
?Empty@FArray@@QAEXHH@Z
?winToUNICODE@@YAPAGPAGPBDH@Z
?winGetSizeUNICODE@@YAHPBD@Z
??0FArray@@IAE@HH@Z
?StaticClass@UPackage@@SAPAVUClass@@XZ
?LocalizeGeneral@@YAPBGPBDPBG1@Z
?appClipboardCopy@@YAXPBG@Z
?ExportToOutputDevice@UExporter@@SAXPAVUObject@@PAV1@AAVFOutputDevice@@PBGH@Z
?GetDefaultObject@UClass@@QAEPAVUObject@@XZ
??DFName@@QBEPBGXZ
?Parse@@YAHPBG0AAVFName@@@Z
??0FName@@QAE@XZ
?appExit@@YAXXZ
?StaticClass@UObject@@SAPAVUClass@@XZ
?Empty@FString@@QAEXXZ
?GetName@UObject@@QBEPBGXZ
?GetClass@UObject@@QBEPAVUClass@@XZ
??0FName@@QAE@PBGW4EFindName@@@Z
?GetDefaultActor@UClass@@QAEPAVAActor@@XZ
?ParseObject@@YAHPBG0PAVUClass@@AAPAVUObject@@PAV2@@Z
?StaticClass@UClass@@SAPAV1@XZ
?ParseCommand@@YAHPAPBGPBG@Z
?appMsgf@@YA?BHHPBGZZ
?GetOuter@UObject@@QBEPAV1@XZ
?GScriptCycles@@3HA
?appSleep@@YAXM@Z
?GWindowManager@@3PAVUSubsystem@@A
?GCurrentTime@@3NA
?GDeltaTime@@3MA
?GIsRecordingMovie@@3HA
?appStaticString1024@@YAPAGXZ
?appAtof@@YAMPBG@Z
?Log@FOutputDevice@@QAEXPBG@Z
?Left@FString@@QBE?AV1@H@Z
?InStr@FString@@QBEHPBGH@Z
??8FString@@QBEHABV0@@Z
?appStrstr@@YAPAGPBG0@Z
??HFString@@QAE?AV0@ABV0@@Z
?GMD5@@3PAEA
??AFString@@QAEAAGH@Z
?GIni@@3PAGA
?Log@FOutputDevice@@QAEXW4EName@@PBG@Z
?appPreExit@@YAXXZ
?GModName@@3PAGA
?GModPath@@3PAGA
?GLazyLoad@@3HA
?GIsScriptable@@3HA
?GIsServer@@3HA
?appMD5Final@@YAXPAEPAUFMD5Context@@@Z
?appMD5Update@@YAXPAUFMD5Context@@PAEH@Z
?appMD5Init@@YAXPAUFMD5Context@@@Z
?GContentRestricted@@3HA
?SetLanguage@UObject@@SAXPBG@Z
?appInit@@YAXPBG0PAVFMalloc@@PAVFOutputDevice@@PAVFOutputDeviceError@@PAVFFeedbackContext@@PAVFFileManager@@P6APAVFConfigCache@@XZH@Z
engine
?StaticClass@URenderDevice@@SAPAVUClass@@XZ
?StaticClass@UEngine@@SAPAVUClass@@XZ
?StaticClass@UGameEngine@@SAPAVUClass@@XZ
?GetLevel@AActor@@QBEPAVULevel@@XZ
??R?$TArray@E@@QAEAAEH@Z
?StaticClass@AActor@@SAPAVUClass@@XZ
?UpdateString@FStats@@QAEXAAVFString@@H@Z
?GEngineStats@@3VFEngineStats@@A
?Clear@FStats@@QAEXXZ
?GStats@@3VFStats@@A
?FStringText@@3PAIA
?ValidateCDKey@@YAHXZ
?bIsFString@@3HA
?GetSteamLanguage@@YA?AVFString@@XZ
??0Trip_Steam@@QAE@XZ
??1Trip_Steam@@QAE@XZ
window
?OnPaint@WProperties@@UAEXXZ
?ExpandAll@WProperties@@UAEXXZ
?Show@WWindow@@UAEXH@Z
?GetPackageName@WConfigProperties@@UAEPBGXZ
?GetWindowClassName@WConfigProperties@@UAEXPAG@Z
?GetRoot@WConfigProperties@@UAEPAVFTreeItem@@XZ
?GLogWindow@@3PAVWLog@@A
?SetExec@WTerminal@@QAEXPAVFExec@@@Z
??0WCoolButton@@QAE@PAVWWindow@@HUFDelegate@@K@Z
??1WCoolButton@@UAE@XZ
?GetNext@WWizardPage@@UAEPAV1@XZ
??0WCrashBoxDialog@@QAE@PBG0@Z
?hInstanceWindow@@3PAUHINSTANCE__@@A
??1WCrashBoxDialog@@UAE@XZ
?EndDialog@WDialog@@QAEXH@Z
?OnInitDialog@WDialog@@UAEXXZ
??0WWizardPage@@QAE@PBGHPAVWWizardDialog@@@Z
??0FDelegate@@QAE@PAVFCommandTarget@@P81@AEXXZ@Z
??0WButton@@QAE@PAVWWindow@@HUFDelegate@@P6GJPAUHWND__@@IIJ@Z@Z
??1WWizardPage@@UAE@XZ
??1WButton@@UAE@XZ
?OnClose@WWindow@@UAE_NXZ
?OnDestroy@WWindow@@UAEXXZ
?OnCurrent@WWizardPage@@UAEXXZ
?GetBackText@WWizardPage@@UAEPBGXZ
?GetFinishText@WWizardPage@@UAEPBGXZ
?GetCancelText@WWizardPage@@UAEPBGXZ
?GetShow@WWizardPage@@UAEHXZ
?OnCancel@WWizardPage@@UAEXXZ
?OnInitDialog@WWizardDialog@@UAEXXZ
??BWWindow@@QBEPAUHWND__@@XZ
??0WWizardDialog@@QAE@XZ
??0WLabel@@QAE@PAVWWindow@@HP6GJPAUHWND__@@IIJ@Z@Z
?MaybeDestroy@WWindow@@QAEXXZ
??1WLabel@@UAE@XZ
?OnActivate@WProperties@@UAEXH@Z
?GetWindowClassName@WObjectProperties@@UAEXPAG@Z
?Show@WDialog@@UAEXH@Z
?Serialize@WWindow@@UAEXAAVFArchive@@@Z
?DoDestroy@WWindow@@UAEXXZ
?WndProc@WWindow@@UAEJIIJ@Z
?CallDefaultProc@WDialog@@UAEJIIJ@Z
?InterceptControlCommand@WWindow@@UAEHIIJ@Z
?GetText@WWindow@@UAE?AVFString@@XZ
?SetText@WWindow@@UAEXPBG@Z
?GetLength@WWindow@@UAEHXZ
?OnCopyData@WWindow@@UAEXPAUHWND__@@PAUtagCOPYDATASTRUCT@@@Z
?OnSetFocus@WWindow@@UAEXPAUHWND__@@@Z
?OnKillFocus@WWindow@@UAEXPAUHWND__@@@Z
?OnInitDialog@WWindow@@UAEXXZ
?OnWindowPosChanging@WWindow@@UAEXPAH000@Z
?OnMove@WWindow@@UAEXHH@Z
?OnCommand@WWindow@@UAEXH@Z
?OnSysCommand@WWindow@@UAEHH@Z
?OnActivate@WWindow@@UAEXH@Z
?OnChar@WWindow@@UAEXG@Z
?OnKeyDown@WWindow@@UAEXG@Z
?OnCut@WWindow@@UAEXXZ
?OnCopy@WWindow@@UAEXXZ
?OnPaste@WWindow@@UAEXXZ
?OnShowWindow@WWindow@@UAEXH@Z
?OnUndo@WWindow@@UAEXXZ
?OnEraseBkgnd@WWindow@@UAEHXZ
?OnVScroll@WWindow@@UAEXIJ@Z
?OnHScroll@WWindow@@UAEXIJ@Z
?OnPaint@WWindow@@UAEXXZ
?OnCreate@WWindow@@UAEXXZ
?OnDrawItem@WWindow@@UAEXPAUtagDRAWITEMSTRUCT@@@Z
?OnMeasureItem@WWindow@@UAEXPAUtagMEASUREITEMSTRUCT@@@Z
?OnEnterIdle@WWindow@@UAEXXZ
?OnMouseEnter@WWindow@@UAEXXZ
?WindowMessageOpen@@3IA
??1WLog@@UAE@XZ
?InitWindowing@@YAXXZ
??0WLog@@QAE@PBGAAPAVFArchive@@VFName@@PAVWWindow@@@Z
?OpenWindow@WLog@@QAEXHH@Z
?GetPackageName@WLog@@UAEPBGXZ
?GetWindowClassName@WLog@@UAEXPAG@Z
?WndProc@WLog@@UAEJIIJ@Z
?SetText@WLog@@UAEXPBG@Z
?OnCopyData@WLog@@UAEXPAUHWND__@@PAUtagCOPYDATASTRUCT@@@Z
?OnSetFocus@WTerminal@@UAEXPAUHWND__@@@Z
?OnSize@WTerminal@@UAEXKHH@Z
?OnCommand@WLog@@UAEXH@Z
?OnShowWindow@WLog@@UAEXH@Z
?OnCreate@WLog@@UAEXXZ
?OnClose@WLog@@UAE_NXZ
?OnDestroy@WLog@@UAEXXZ
?TypeChar@WTerminal@@UAEXG@Z
?Paste@WTerminal@@UAEXXZ
??1WConfigProperties@@UAE@XZ
??1WObjectProperties@@UAE@XZ
?ScrollCaret@WEdit@@QAEXXZ
??0WObjectProperties@@QAE@VFName@@KPBGPAVWWindow@@H@Z
?OpenWindow@WProperties@@QAEXPAUHWND__@@@Z
??0WConfigProperties@@QAE@VFName@@PBG@Z
?SetNotifyHook@WWindow@@QAEXPAVFNotifyHook@@@Z
?Show@WObjectProperties@@UAEXH@Z
?Serialize@WProperties@@UAEXAAVFArchive@@@Z
?GetPackageName@WObjectProperties@@UAEPBGXZ
??1WWizardDialog@@UAE@XZ
?DoDestroy@WProperties@@UAEXXZ
?OnMouseLeave@WWindow@@UAEXXZ
?OnMouseHover@WWindow@@UAEXXZ
?CallDefaultProc@WWindow@@UAEJIIJ@Z
?Unused@FCommandTarget@@UAEXXZ
?OnSize@WProperties@@UAEXKHH@Z
?OnTimer@WWindow@@UAEXXZ
?OnReleaseCapture@WWindow@@UAEXXZ
?OnMdiActivate@WWindow@@UAEXH@Z
?OnMouseMove@WWindow@@UAEXKUFPoint@@@Z
?OnLeftButtonDown@WWindow@@UAEXXZ
?OnFinishSplitterDrag@WProperties@@UAEXPAVWDragInterceptor@@H@Z
?OnSetCursor@WProperties@@UAEHXZ
?OnDestroy@WProperties@@UAEXXZ
?GetRoot@WObjectProperties@@UAEPAVFTreeItem@@XZ
?GetDividerWidth@WProperties@@UAEHXZ
?ResizeList@WProperties@@UAEXXZ
?SetItemFocus@WProperties@@UAEXH@Z
?ForceRefresh@WProperties@@UAEXXZ
?BeginSplitterDrag@WProperties@@UAEXXZ
?OnLeftButtonDoubleClick@WWindow@@UAEXXZ
?OnMiddleButtonDoubleClick@WWindow@@UAEXXZ
?OnRightButtonDoubleClick@WWindow@@UAEXXZ
?OnRightButtonDown@WWindow@@UAEXXZ
?OnLeftButtonUp@WWindow@@UAEXXZ
?OnRightButtonUp@WWindow@@UAEXXZ
?OnFinishSplitterDrag@WWindow@@UAEXPAVWDragInterceptor@@H@Z
?OnSetCursor@WWindow@@UAEHXZ
?OnClose@WWizardDialog@@UAE_NXZ
?OnDestroy@WWizardDialog@@UAEXXZ
?MyDrawEdge@WWindow@@UAEXPAUHDC__@@PAUtagRECT@@H@Z
?DoModal@WDialog@@UAEHPAUHINSTANCE__@@@Z
?LocalizeText@WDialog@@UAEXPBG0@Z
?Advance@WWizardDialog@@UAEXPAVWWizardPage@@@Z
?RefreshPage@WWizardDialog@@UAEXXZ
?OnBack@WWizardDialog@@UAEXXZ
?OnNext@WWizardDialog@@UAEXXZ
?OnFinish@WWizardDialog@@UAEXXZ
?OnCancel@WWizardDialog@@UAEXXZ
??0FWindowsBitmap@@QAE@H@Z
?LoadFile@FWindowsBitmap@@QAEHPBG@Z
??1FWindowsBitmap@@QAE@XZ
?GetBitmapHandle@FWindowsBitmap@@QAEPAUHBITMAP__@@XZ
?OnSize@WWindow@@UAEXKHH@Z
?SetValue@WProperties@@UAEXPBG@Z
?OnKeyUp@WWindow@@UAEXIJ@Z
d3d8
Direct3DCreate8
ddraw
DirectDrawCreate
steam_api
SteamAPI_Init
SteamApps
kernel32
GetModuleHandleA
InterlockedDecrement
GetModuleFileNameW
GetWindowsDirectoryW
GetSystemDirectoryW
GetModuleFileNameA
GetWindowsDirectoryA
GetSystemDirectoryA
FreeLibrary
GetSystemInfo
GetLastError
CloseHandle
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
CreateFileA
CreateFileW
GetProcAddress
LoadLibraryW
VirtualAlloc
VirtualFree
GetFileSize
DeleteFileA
SetFileAttributesA
DeleteFileW
SetFileAttributesW
GetFileAttributesA
GetFileAttributesW
MoveFileA
MoveFileW
lstrlenW
LocalFree
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
SetCurrentDirectoryA
GetCommandLineW
OpenProcess
SetThreadPriority
Sleep
FindFirstFileW
FindNextFileW
FindFirstFileA
FindNextFileA
FindClose
RemoveDirectoryW
RemoveDirectoryA
GetCurrentThread
CreateMutexW
CreateMutexA
CreateDirectoryW
CreateDirectoryA
GlobalMemoryStatus
CopyFileW
CopyFileA
WriteFile
ReadFile
SetFilePointer
GetFileAttributesExW
GetLogicalDrives
GetDriveTypeW
GetDriveTypeA
GetCurrentDirectoryW
GetCurrentDirectoryA
SetCurrentDirectoryW
GetStartupInfoA
user32
FindWindowExA
GetPropW
GetPropA
SendMessageTimeoutW
SetPropW
SetPropA
RemovePropW
RemovePropA
PeekMessageA
DispatchMessageA
GetForegroundWindow
GetWindowThreadProcessId
SetFocus
ShowWindow
PeekMessageW
TranslateMessage
DispatchMessageW
MessageBoxW
LoadIconW
LoadIconA
SetForegroundWindow
DestroyWindow
CreateDialogParamW
CreateDialogParamA
GetDlgItem
GetSystemMetrics
SetWindowPos
SendMessageW
SendMessageA
UpdateWindow
FindWindowExW
advapi32
RegFlushKey
shell32
ShellExecuteA
ShellExecuteW
ole32
CoUninitialize
CoInitialize
CoCreateInstance
CoSetProxyBlanket
oleaut32
GetErrorInfo
CreateErrorInfo
SetErrorInfo
VariantChangeType
SysFreeString
SysAllocString
VariantInit
VariantClear
msvcr71
__getmainargs
_amsg_exit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
__CxxFrameHandler
_CxxThrowException
floor
_vsnwprintf
_purecall
_stat
srand
rand
_except_handler3
free
malloc
wcslen
calloc
??1type_info@@UAE@XZ
__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
?terminate@@YAXXZ
_controlfp
_acmdln
_initterm
psapi
EnumProcesses
GetModuleBaseNameW
EnumProcessModules
Exports
Exports
Sections
.text Size: 104KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ