Static task
static1
Behavioral task
behavioral1
Sample
a6c7395a7ac2e36f56df68556055ddf4.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a6c7395a7ac2e36f56df68556055ddf4.exe
Resource
win10v2004-20231215-en
General
-
Target
a6c7395a7ac2e36f56df68556055ddf4.bin
-
Size
3.5MB
-
MD5
a6c7395a7ac2e36f56df68556055ddf4
-
SHA1
26f179391b04d7635d9677370711b61c124cb6bb
-
SHA256
dcf28efebd2c1849af1ed951a12a6604d496d25e08cc66a8986c065b018f009f
-
SHA512
d0fcf9f809ab57bad479fa80aadc4adb350a7b7fd73053448c7f85ae9421ef62ff85a2c63dcaf9f51ea75a65b27fccc2c48fd8537bd2dcbe0dc0608092262ecf
-
SSDEEP
49152:alBOOaWxbA67lBtXxHXgTNpI6WEUAAlT1iTC8X6ODFpjCF+20MwHR7+HQ7q9:A8WxbA0XgT0kAlT1eX75uT0ZHRqHQ7a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6c7395a7ac2e36f56df68556055ddf4.bin
Files
-
a6c7395a7ac2e36f56df68556055ddf4.bin.exe windows:4 windows x86 arch:x86
3ddc803da5ee3cddac71591c7d9b8878
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
sxlrt233
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Mstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?_Xran@_String_base@std@@QBEXXZ
?_Xlen@_String_base@std@@QBEXXZ
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
?length@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?empty@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE_NXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?reserve@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$allocator@G@std@@QAE@XZ
??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEABGI@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV?$_Ptrit@GHPBGABGPAGAAG@2@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?data@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?nothrow@std@@3Unothrow_t@1@B
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?clear@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Raise_handler@std@@3P6AXABVexception@1@@ZA
?_Throw@std@@YAXABVexception@1@@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV?$_Ptrit@GHPBGABGPAGAAG@2@XZ
msvcrt
strcmp
_controlfp
__p__fmode
_except_handler3
__set_app_type
__setusermatherr
__p__commode
_adjust_fdiv
_acmdln
_initterm
__getmainargs
_exit
exit
_XcptFilter
__dllonexit
??1type_info@@UAE@XZ
_onexit
setlocale
malloc
_callnewh
strchr
abs
free
_mbsnbcmp
memcmp
_mbsinc
srand
_ismbcdigit
_mbsncpy
fclose
rand
fopen
asctime
time
localtime
_strnicmp
_stat
strtoul
fflush
atof
atoi
_mbsdec
_mbslwr
pow
fabs
sscanf
fscanf
sprintf
strncmp
_mbslen
_mbsninc
_beginthread
wcscmp
_mbscmp
isdigit
strcpy
strtol
fgets
wcslen
wcstombs
_mbsnbcnt
_itoa
_mbsicmp
fprintf
sqrt
?name@type_info@@QBEPBDXZ
memset
memcpy
__RTDynamicCast
strlen
_strdup
__CxxFrameHandler
fread
fgetc
fwrite
toupper
_splitpath
fputs
towupper
_CxxThrowException
tolower
_stricmp
isspace
??2@YAPAXI@Z
_timezone
mktime
strstr
gmtime
memmove
_snprintf
_utime
??3@YAXPAX@Z
_purecall
_ismbcspace
?terminate@@YAXXZ
low-level engine
?ButtonUp@UIButton@@MAEXXZ
?DrawTextA@UIButton@@UAEJXZ
??1FSDebugFile@@UAE@XZ
?FindFile@FSArchive@@QAEJABVUString@@AAPAVFSMemoryFile@@@Z
?Close@FSMemoryFile@@UAEJXZ
?SetTag@FSArchive@@QAEJABVUWideString@@0@Z
?Create@FSArchive@@QAEJABVFSFileSpec@@AAV?$vector@VUString@@V?$allocator@VUString@@@std@@@std@@K@Z
?Close@FSArchive@@QAEJXZ
??0FSArchive@@QAE@ABVFSFileSpec@@@Z
?Open@FSArchive@@QAEJXZ
?GetFileArchiveStatus@FSPath@@QAE_NABVUWideString@@AA_N@Z
??0U2DFractal@@QAE@KMMK@Z
??1U2DFractal@@UAE@XZ
?FindFile@FSArchive@@QAEJABVUWideString@@AAPAVFSMemoryFile@@@Z
?sDirectory@PIMModule@@0VFSFileSpec@@A
?sType@PIMModule@@0KA
?NestedTokenize@UString@@QBE_NABV1@0AAV?$vector@VUString@@V?$allocator@VUString@@@std@@@std@@@Z
?Unload@PIMModule@@QAEXXZ
?GetModule@PIMModule@@CAJ_NAAPAV1@@Z
?SelectText@UIEditBox@@QAEXXZ
?Sort@?$UIListBox@VUWideString@@@@QAEXXZ
??9@YA_NABVUString@@PBD@Z
?SetScrollBarBgColor@?$UIListBox@VUWideString@@@@QAEXABVGEColor@@@Z
?UpdateTranslatedKey@UIManager@@QAEJPBDF@Z
?DrawScrollBarText@?$UIListBox@VUWideString@@@@IAEJXZ
?CreateIMECandidateWindow@UIManager@@QAEXPAVGEFont@@@Z
?IsFormOnStack@UIManager@@QAE_NPAVUIForm@@@Z
?Notify@SECD@@SAXIJ@Z
?SetThreadName@TSThread@@SAXKPBD@Z
?RelayoutAllForms@UIManager@@QAEXXZ
?AddIMEResultString@UIManager@@QAEXABVUWideString@@@Z
?DrawPolygons@UILineGraph@@UAEJXZ
??1UILineGraph@@UAE@XZ
?DrawSeries@UILineGraph@@UAEJABVUGraphSeries@@@Z
?CopyData@UIGraph@@UAEJXZ
?DrawTextA@UIGraph@@UAEJXZ
??0UILineGraph@@QAE@KABVGERectangle@@PAVUIForm@@KK@Z
??0UString@@QAE@PBD@Z
??1UString@@UAE@XZ
?SetCurrentRangeValue@UISlider@@QAEXJ@Z
?GetCurrentForm@UIManager@@QBEPAVUIForm@@XZ
?GetFormByID@UIManager@@QBEPAVUIForm@@K@Z
??1UWideString@@UAE@XZ
?GetString@UResourceFile@@QAEJJAAVUWideString@@@Z
?Pop@UIManager@@QAEJXZ
??0UWideString@@QAE@XZ
??_7UReferenceCounter@@6B@
?Dereference@UReferenceCounter@@QAEXXZ
?SetSendToAllAndWaitMessageID@NEMessage@@UAEXK@Z
?GetSendToAllAndWaitMessageID@NEMessage@@UBE_NAAK@Z
?GetCountsTowardsPlayerInputThrottle@NEMessage@@UBE_NXZ
?GetCanSendWhilePaused@NEMessage@@UBE_NXZ
??_7NEMessage@@6B@
?Apply@GETransformation@@QBEXABVGE3DPoint@@AAV2@@Z
??0GETransformation@@QAE@ABV0@@Z
??8@YA_NABVUWideString@@0@Z
??4UWideString@@QAEAAV0@ABV0@@Z
?GetCurrentSelection@?$UIListBox@VUWideString@@@@QBEJAAK@Z
?GetDisplayLine@?$UIListBox@VUWideString@@@@QBEKXZ
?GetLineCount@?$UIListBox@VUWideString@@@@QBEKXZ
?GetDetectedGame@NESynchronousClient@@QAEJKAAVUString@@0AAVUWideString@@@Z
??0UString@@QAE@XZ
??M@YA_NABVUWideString@@0@Z
?UninitializeEvent@UIEvent@@MAEJXZ
?InitializeEvent@UIEvent@@MAEJXZ
?GetMessageLabel@NEMClientConnectionRequest@@UBEPADXZ
?Execute@NEMClientConnectionRequest@@UAEXXZ
?IsResponse@NEMClientConnectionRequest@@UAE_NPAVNEMessage@@@Z
?ImportMessage@NEMClientConnectionRequest@@UAEXPAE@Z
?ExportSize@NEMClientConnectionRequest@@UAEKXZ
?ExportMessage@NEMClientConnectionRequest@@UAEXPAPAEAAK@Z
?GetIsAvailableToSend@NEMessage@@UBE_NXZ
??8@YA_NABVUString@@PBD@Z
?SetFormOpenEvent@UIForm@@QAEXPAVUIEvent@@@Z
??0NEMClientConnectionRequest@@QAE@ABVUWideString@@0K_N@Z
?SendStartConnectMessage@NESynchronousClient@@QAEXXZ
?Connect@NESynchronousClient@@QAEJABVUString@@0ABVUWideString@@@Z
??4UWideString@@QAEAAV0@PBD@Z
??4UString@@QAEAAV0@PBD@Z
?WriteUnlock@TSReadWriteLock@@QAEXXZ
?WriteLock@TSReadWriteLock@@QAEXXZ
??AUWideString@@QBEDH@Z
??1NEMClientConnectionRequest@@UAE@XZ
??_7UIEvent@@6B@
??4UString@@QAEAAV0@ABV0@@Z
??0FSFileSpec@@QAE@XZ
??4FSFileSpec@@QAEAAV0@ABV0@@Z
??0UString@@QAE@ABV0@@Z
??1FSFileSpec@@UAE@XZ
??0GETransformation@@QAE@XZ
??0NEMessage@@QAE@EEEE@Z
?UMArcTan2@@YAMMM@Z
?Apply@GETransformation@@QBEXABVGE2DPoint@@AAV2@@Z
?GetCenter@GERectangle@@QBEXAAVGE2DPoint@@@Z
?GetPointAt@GE3DLine@@QBEXMAAVGE3DPoint@@@Z
??4GEVector@@QAEAAV0@ABV0@@Z
??4GE3DPoint@@QAEAAV0@ABV0@@Z
?Intersects@GE3DLine@@QBE_NABVGE3DPlane@@AAM@Z
?IsPointOnOrBelowPlane@GE3DPlane@@QBE_NABVGE3DPoint@@@Z
?GetMeshZ@GETerrainMesh@@QBEMMM@Z
??0GE3DLine@@QAE@XZ
?Enter@TSCriticalSection@@QAEXXZ
?Leave@TSCriticalSection@@QAEXXZ
?Push@UIManager@@QAEJPAVUIForm@@@Z
?TMGetTime@@YAKXZ
??0TMPoll@@QAE@KK_N@Z
?Start@TMPoll@@QAEXXZ
?Poll@TMPoll@@QAEKXZ
?GetMessageLabel@NEMClientReconnectionRequest@@UBEPADXZ
?Execute@NEMClientReconnectionRequest@@UAEXXZ
?IsResponse@NEMClientReconnectionRequest@@UAE_NPAVNEMessage@@@Z
?ImportMessage@NEMClientReconnectionRequest@@UAEXPAE@Z
?ExportSize@NEMClientReconnectionRequest@@UAEKXZ
?ExportMessage@NEMClientReconnectionRequest@@UAEXPAPAEAAK@Z
?GetCountsTowardsPlayerInputThrottle@NEMClientReconnectionRequest@@UBE_NXZ
??0NEMClientReconnectionRequest@@QAE@KK@Z
?Set@TSEvent@@QAEJXZ
??0UWideString@@QAE@PBD@Z
?sprintf@@YAJAAVUWideString@@PBDZZ
??_7NEMClientReconnectionRequest@@6B@
?Play@SESoundManager@@QAEKKMMM_NPAD@Z
?UpdateHelpString@UIForm@@QAEXXZ
??9@YA_NABVUWideString@@PBD@Z
?SetText@UITextLabel@@AAEXABVUWideString@@_N@Z
??YUWideString@@QAEAAV0@ABV0@@Z
?PauseGame@NESynchronousServer@@QAEXXZ
?UnpauseGame@NESynchronousServer@@QAEXXZ
?GetChecksum@FSRestorable@@UBEXAAVESChecksum@@@Z
?MakeIdentity@GETransformation@@QAEXXZ
??4GETransformation@@QAEAAV0@ABV0@@Z
?Load@GETransformation@@QAEJAAVFSFile@@@Z
?Save@GETransformation@@QBEJAAVFSFile@@@Z
?NextInSeries@URandom@@AAEKXZ
?UMCos@@YAMM@Z
?Contains@U2DSparseArrayPointContainer@@QBE_NABV?$U2DPoint@J@@@Z
?SetTriggerEvent@UIControl@@QAEXKPAVUIEvent@@@Z
?GetTriggerEvent@UIControl@@QAEPAVUIEvent@@K@Z
?SetCurrentSelection@UIComboBox@@QAEXK@Z
?AppendLine@UIComboBox@@QAEXAAVUWideString@@@Z
?DeleteAllEntries@UIComboBox@@QAEXXZ
?ChangeWidth@UIComboBox@@QAEXK@Z
??0UWideString@@QAE@ABV0@@Z
?SetTabStop@UIForm@@QAE_NK@Z
?Disable@UIEntityGroup@@QAEXXZ
?SetText@UIButton@@QAEXABVUWideString@@PAVGEFont@@@Z
?Enable@UIEntityGroup@@QAEXXZ
?GetProtocol@NEProtocol@@SAJKAAPAV1@@Z
?ProcessEvent@UIEPolledEvent@@UAEJPAVUIForm@@PAVUIEntity@@@Z
?SetChecked@UICheckBox@@QAEX_N@Z
?AllowNewPlayers@NESynchronousServer@@QAEX_N@Z
?Disconnect@NESynchronousClient@@QAEJXZ
?SetText@UIEditBox@@QAEXABVUWideString@@@Z
?SetFormUpdateEvent@UIForm@@QAEXPAVUIEvent@@@Z
??0UIEPolledEvent@@QAE@K@Z
?SetFormCloseEvent@UIForm@@QAEXPAVUIEvent@@@Z
??0UIEvent@@QAE@XZ
??1UIEPolledEvent@@UAE@XZ
??YUWideString@@QAEAAV0@PBD@Z
?Insert@U2DSparseArrayPointContainer@@QAEXABV?$vector@V?$U2DPoint@J@@V?$allocator@V?$U2DPoint@J@@@std@@@std@@@Z
?GetOnlyExtremeEdgePoints@U2DSparseArrayPointContainer@@QAEXAAV?$vector@V?$U2DPoint@J@@V?$allocator@V?$U2DPoint@J@@@std@@@std@@@Z
?Create@U2DSparseArrayPointContainer@@QAEXABV?$vector@V?$U2DPoint@J@@V?$allocator@V?$U2DPoint@J@@@std@@@std@@@Z
?GetClosestPoint@U2DSparseArrayPointContainer@@QAE?AV?$U2DPoint@J@@ABV2@@Z
?BuildPointList@U2DSparseArrayPointContainer@@QAEXAAV?$vector@V?$U2DPoint@J@@V?$allocator@V?$U2DPoint@J@@@std@@@std@@J@Z
?GetRandomPoint@U2DSparseArrayPointContainer@@QAE?AV?$U2DPoint@J@@AAVURandom@@@Z
?Remove@U2DSparseArrayPointContainer@@QAE_NABV?$U2DPoint@J@@@Z
??AU2DSparseArrayPointContainer@@QBE?AV?$U2DPoint@J@@J@Z
??0U2DSparseArrayPointContainer@@QAE@XZ
?Clear@U2DSparseArrayPointContainer@@QAEXXZ
??_7U2DSparseArrayPointContainer@@6B@
?Normalize@GEVector@@QAEXXZ
?IntersectsIn2D@GE3DLine@@QBE_NABV1@AAM1@Z
??0GE3DLine@@QAE@ABVGE3DPoint@@ABVGEVector@@@Z
?Insert@U2DSparseArrayPointContainer@@QAEXABV?$U2DPoint@J@@@Z
?ComputeCenterPoint@U2DSparseArrayPointContainer@@QAE?AV?$U2DPoint@J@@_N@Z
?ESVerify@@YAXPBDK0@Z
?Generate@URandom@@QAEMXZ
?DistanceToSquared@GE3DPoint@@QBEMABV1@@Z
?UShutdownInProgress@@YA_NXZ
?ESDebugOut@@YAXPBDZZ
??H@YA?AVUString@@ABV0@PBD@Z
?DistanceTo@GE2DPoint@@QBEMABV1@@Z
?RepairPointers@FSRestorable@@UAEJKK@Z
??_7FSRestorable@@6B@
?Load@GE3DPoint@@QAEJAAVFSFile@@@Z
?Load@GERectangle@@QAEJAAVFSFile@@@Z
?Save@GE3DPoint@@QBEJAAVFSFile@@@Z
?Save@GERectangle@@QBEJAAVFSFile@@@Z
?LastDereference@SESMInstanceNode@@QAEXXZ
?Stop@SESoundManager@@QAEJPAVSESMInstanceNode@@_N@Z
?SetSoundParameters@SESoundManager@@QAEJPAVSESMInstanceNode@@MMM@Z
?PlayAndReturnReferencedNode@SESoundManager@@QAEPAVSESMInstanceNode@@KMMM_NPAD@Z
??0GE2DPoint@@QAE@ABV0@@Z
?DistanceTo@GE3DPoint@@QBEMABV1@@Z
??4GERectangle@@QAEAAV0@ABV0@@Z
?Apply@GETransformation@@QBEXABVGEVector@@AAV2@@Z
?Rotate@GETransformation@@QAEXMMM@Z
??0GE3DPoint@@QAE@MMM@Z
?SetOrientationYPR@GETransformation@@QAEXMMM@Z
?ConvertToOrientation@GETransformation@@QBEXAAVGEOrientation@@@Z
?Unload@SESoundManager@@QAEJK@Z
?SetPosition@GETransformation@@QAEXMMM@Z
?Contains@GERectangle@@QBE_NABVGE2DPoint@@@Z
??YGE3DPoint@@QAEAAV0@ABV0@@Z
?DistanceSquaredTo@GETransformation@@QBEMABV1@@Z
?StopThreads@NESynchronousClient@@UAEXXZ
?StartThreads@NESynchronousClient@@UAEXXZ
?SetCurrentCommunicationsTick@NESynchronousClient@@UAEXK@Z
?SearchForGame@NESynchronousClient@@UAEJ_N@Z
?ProcessLocalUserInput@NESynchronousClient@@UAEJPAVNEMessage@@E@Z
?GetCurrentCommunicationsTick@NESynchronousClient@@UBEKXZ
?CreateCriticalSection@TSScheduler@@SAJAAPAVTSCriticalSection@@@Z
??0NESynchronousClient@@QAE@XZ
??1NESynchronousClient@@UAE@XZ
?DestroyCriticalSection@TSScheduler@@SAXPAVTSCriticalSection@@@Z
?IsFormVisible@UIManager@@QAE_NPAVUIForm@@@Z
?Unlock@FSFileSpec@@UAEJXZ
?SetPosition@FSFileSpec@@UAEJJK_N@Z
?SetLength@FSFileSpec@@UAEJAAK_N@Z
?Lock@FSFileSpec@@UAEJXZ
?IsDirectory@FSFileSpec@@UBE_NXZ
?GetPosition@FSFileSpec@@UBEJAAJ@Z
?GetParentDirectory@FSFileSpec@@UBEXAAV1@@Z
?GetNextFile@FSFileSpec@@UAEJAAV1@@Z
?GetLength@FSFileSpec@@UBEJAAK@Z
?GetFirstFile@FSFileSpec@@UAEJAAV1@@Z
?GetFirstFile@FSFileSpec@@UAEJABVUString@@AAV1@@Z
?FOpen@FSFileSpec@@UAEJPAD@Z
?DeleteDirectory@FSFileSpec@@UAEJXZ
?CreateDirectoryA@FSFileSpec@@UAEJXZ
?Write@FSFileSpec@@UAEJPBEKAAK@Z
?Write@FSFileSpec@@UAEJPBDKAAK@Z
?Write@FSFileSpec@@UAEJABK@Z
?Write@FSFileSpec@@UAEJABJ@Z
?Write@FSFileSpec@@UAEJABG@Z
?Write@FSFileSpec@@UAEJABF@Z
?Write@FSFileSpec@@UAEJABE@Z
?Write@FSFileSpec@@UAEJABC@Z
?Write@FSFileSpec@@UAEJABM@Z
?Write@FSFileSpec@@UAEJABN@Z
?Write@FSFileSpec@@UAEJAB_N@Z
?SetVolume@FSBasicFile@@UAEXABVUString@@@Z
?SetFile@FSBasicFile@@UAEXABVUString@@@Z
?SetDirectory@FSBasicFile@@UAEXABVUString@@@Z
?Read@FSFileSpec@@UAEJPAEKAAK@Z
?Read@FSFileSpec@@UAEJPADKAAK@Z
?Read@FSFileSpec@@UAEJAAK@Z
?Read@FSFileSpec@@UAEJAAJ@Z
?Read@FSFileSpec@@UAEJAAG@Z
?Read@FSFileSpec@@UAEJAAF@Z
?Read@FSFileSpec@@UAEJAAE@Z
?Read@FSFileSpec@@UAEJAAC@Z
?Read@FSFileSpec@@UAEJAAM@Z
?Read@FSFileSpec@@UAEJAAN@Z
?Read@FSFileSpec@@UAEJAA_N@Z
?PushIndentHint@FSFile@@UAEXXZ
?PopIndentHint@FSFile@@UAEXXZ
?Open@FSFileSpec@@UAEJK@Z
?GetVolume@FSBasicFile@@UBEXAAVUString@@@Z
?GetVolume@FSBasicFile@@UBEABVUString@@XZ
?GetIsOpen@FSFileSpec@@UBE_NXZ
?GetFile@FSBasicFile@@UBEXAAVUString@@@Z
?GetFile@FSBasicFile@@UBEABVUString@@XZ
?GetDirectory@FSBasicFile@@UBEXAAVUString@@@Z
?GetDirectory@FSBasicFile@@UBEABVUString@@XZ
?Delete@FSBasicFile@@UAEJXZ
?Copy@FSFileSpec@@UAEJABVUString@@_N1@Z
?Close@FSFileSpec@@UAEJXZ
?Create@FSFileSpec@@UAEJXZ
?gStartupDirectory@@3VUString@@A
?gStartupVolume@@3VUString@@A
?GetIndexedSubstring@UWideString@@QBE?AV1@KK@Z
?GetMessageLabel@NEMPhysicsTick@@UBEPADXZ
?Execute@NEMPhysicsTick@@UAEXXZ
?IsResponse@NEMPhysicsTick@@UAE_NPAVNEMessage@@@Z
?ImportMessage@NEMPhysicsTick@@UAEXPAE@Z
?ExportSize@NEMPhysicsTick@@UAEKXZ
?ExportMessage@NEMPhysicsTick@@UAEXPAPAEAAK@Z
?GetCountsTowardsPlayerInputThrottle@NEMPhysicsTick@@UBE_NXZ
?GetPlayerInput@NEMCommunicationsTick@@QAEJKAAPAVNEMessage@@@Z
?GetNumberOfPlayerInputs@NEMCommunicationsTick@@QBEKXZ
?GetMessageLabel@NEMPlayerConnectionCheckResponse@@UBEPADXZ
?Execute@NEMPlayerConnectionCheckResponse@@UAEXXZ
?IsResponse@NEMPlayerConnectionCheckResponse@@UAE_NPAVNEMessage@@@Z
?ImportMessage@NEMPlayerConnectionCheckResponse@@UAEXPAE@Z
?ExportSize@NEMPlayerConnectionCheckResponse@@UAEKXZ
?ExportMessage@NEMPlayerConnectionCheckResponse@@UAEXPAPAEAAK@Z
?GetCountsTowardsPlayerInputThrottle@NEMPlayerConnectionCheckResponse@@UBE_NXZ
?Post@TSThread@@QAEJKPAX0@Z
??H@YA?AVUWideString@@ABV0@0@Z
?sConstructors@NEMessage@@2PAP6APAV1@PAE@ZA
?ExportHeader@NEMessage@@QAEKPAE@Z
?ImportHeader@NEMessage@@QAEKPAE@Z
?GetExportSize@UWideString@@QBEKXZ
?Export@UWideString@@QBEXPAE@Z
?Import@UWideString@@QAEKPAE@Z
??H@YA?AVUWideString@@ABV0@PBD@Z
?SwapForm@UIManager@@QAEJPAVUIForm@@@Z
?GetMessageLabel@NEMStartGame@@UBEPADXZ
?Execute@NEMStartGame@@UAEXXZ
?IsResponse@NEMStartGame@@UAE_NPAVNEMessage@@@Z
?ImportMessage@NEMStartGame@@UAEXPAE@Z
?ExportSize@NEMStartGame@@UAEKXZ
?ExportMessage@NEMStartGame@@UAEXPAPAEAAK@Z
?GetCountsTowardsPlayerInputThrottle@NEMStartGame@@UBE_NXZ
??0NEMStartGame@@QAE@AAK@Z
?LogResponse@NESynchronousServer@@QAEJPAVNEMessage@@@Z
??BUWideString@@QBEPBDXZ
??YUString@@QAEAAV0@PBD@Z
??H@YA?AVUString@@ABV0@0@Z
?gISMouse@@3PAVISMouse@@A
??0UWideString@@QAE@K@Z
?ReadUnlock@TSReadWriteLock@@QAEXXZ
?ReadLock@TSReadWriteLock@@QAEXXZ
?StopThreads@NESynchronousServer@@UAEXXZ
?StartThreads@NESynchronousServer@@UAEXXZ
?SetCurrentCommunicationsTick@NESynchronousServer@@UAEXK@Z
?SearchForGame@NESynchronousServer@@UAEJ_N@Z
?ProcessLocalUserInput@NESynchronousServer@@UAEJPAVNEMessage@@E@Z
?GetCurrentCommunicationsTick@NESynchronousServer@@UBEKXZ
??0NESynchronousServer@@QAE@EKEKKMKKKKKAAVUWideString@@_N1K@Z
??1NESynchronousServer@@UAE@XZ
?GetMessageLabel@NEMClientConnectionRequestResponse@@UBEPADXZ
?Execute@NEMClientConnectionRequestResponse@@UAEXXZ
?IsResponse@NEMClientConnectionRequestResponse@@UAE_NPAVNEMessage@@@Z
?ImportMessage@NEMClientConnectionRequestResponse@@UAEXPAE@Z
?ExportSize@NEMClientConnectionRequestResponse@@UAEKXZ
?ExportMessage@NEMClientConnectionRequestResponse@@UAEXPAPAEAAK@Z
?GetCountsTowardsPlayerInputThrottle@NEMClientConnectionRequestResponse@@UBE_NXZ
?XferFileToClient@NESynchronousServer@@QAEJAAVFSFileSpec@@KEAAK_N@Z
?GetLengthFromClosedFile@FSFileSpec@@QAEJAAK@Z
?RegisterSlot@NESynchronousServer@@QAEXE@Z
?UnregisterSlot@NESynchronousServer@@IAEXE@Z
?SendMessageTo@NESynchronousServer@@IAEJEPAVNEMessage@@_N@Z
??0NEMClientConnectionRequestResponse@@QAE@JABVUWideString@@EKE@Z
??9@YA_NABVUWideString@@0@Z
?AbortXfer@NESynchronousServer@@QAEXK@Z
?RemovePlayerFromGameInProgress@NESynchronousServer@@QAEXE_N00@Z
?Load@SESoundManager@@QAEKABVUString@@KK@Z
??_7NEMClientConnectionRequestResponse@@6B@
?SetMessageManagerLowestCTs@NESynchronousServer@@QAEXK@Z
?SendMessageToAll@NESynchronousServer@@IAEJPAVNEMessage@@_N@Z
?GetMessageLabel@NEMXferStatus@@UBEPADXZ
?Execute@NEMXferStatus@@UAEXXZ
?IsResponse@NEMXferStatus@@UAE_NPAVNEMessage@@@Z
?ImportMessage@NEMXferStatus@@UAEXPAE@Z
?ExportSize@NEMXferStatus@@UAEKXZ
?ExportMessage@NEMXferStatus@@UAEXPAPAEAAK@Z
?GetCountsTowardsPlayerInputThrottle@NEMXferStatus@@UBE_NXZ
?BroadcastMessage@NESynchronousServer@@IAEJPAVNEMessage@@@Z
??_7NEMXferStatus@@6B@
?PopTo@UIManager@@QAEJPAVUIForm@@@Z
?Tokenize@UString@@QBE_NABV1@AAV?$vector@VUString@@V?$allocator@VUString@@@std@@@std@@@Z
?GetSubstring@UString@@QBE?AV1@KK@Z
?TMGetTimeOfDay@@YAXAAUTMTime@@@Z
?CopyString@UWideString@@QAEXPBDK@Z
?SetName@TSThread@@QAEXAAVUString@@@Z
?Wait@TSEvent@@QAEJK@Z
?SetPriority@TSThread@@QAEJJ@Z
?CreateThread@TSScheduler@@SAJAAPAVTSThread@@P6AKPAX@Z1K_N@Z
?CreateEventA@TSScheduler@@SAJAAPAVTSEvent@@_N@Z
?DestroyThread@TSScheduler@@SAJPAVTSThread@@@Z
?DestroyEvent@TSScheduler@@SAXPAVTSEvent@@@Z
?UMSetFloatingPointRoundingMode@@YAXK@Z
?UMGetFloatingPointRoundingMode@@YAKXZ
?UMGetFloatingPointPrecision@@YAKXZ
?UMSetFloatingPointPrecision@@YAXK@Z
?Receive@TSThread@@SAJAAKAAPAX1@Z
?GetPriority@TSThread@@QAEJXZ
?Clear@TSEvent@@QAEJXZ
?Dereference@GETexture@@QAEXXZ
?Copy@UString@@QAEAAV1@PBDKKK_N@Z
?SetStageMipMapBias@GETexture@@QAEXMK@Z
?SetStageMipFilterMode@GETexture@@QAEXKK@Z
?SetStageMagFilterMode@GETexture@@QAEXKK@Z
?SetStageMinFilterMode@GETexture@@QAEXKK@Z
?LoadTexture@GETextureManager@@QAEPAVGETexture@@ABVUString@@ABUGETextureDescription@@@Z
?ComputeRotation@GEBitmap@@AAEXXZ
?SetTextureCoordinates@GEBitmap@@QAEXAAVGETextureCoordinate@@000@Z
?SetTexture@GEBitmap@@QAEXPAVGETexture@@K@Z
?ReloadTexture@GETextureManager@@QAEJABVUString@@ABUGETextureDescription@@@Z
?GetCurrentThreadIndex@TSScheduler@@SAKXZ
?Apply@GETransformation@@QBEXABV1@AAV1@@Z
?Load@UString@@QAEJAAVFSFile@@@Z
?LoadModel@GEModelManager@@QAEPAVGEModel@@ABVUString@@AAV?$map@KJU?$less@K@std@@V?$allocator@U?$pair@$$CBKJ@std@@@2@@std@@@Z
?SetStageTextureAddressingMode@GETexture@@QAEXKK@Z
?SetStageColorMode@GETexture@@QAEXKK@Z
?SetStageAlphaMode@GETexture@@QAEXKK@Z
?Dereference@GEModel@@QAEXXZ
??M@YA_NABVUString@@0@Z
?Generate@URandomIntegers@@QAEJJJ@Z
?LoadScore@SEConductor@@AAEJABVUWideString@@AAJ_N@Z
?UnloadScore@SEConductor@@QAEJJ@Z
?RegisterOneShotSound@SESoundManager@@QAEJKK@Z
?GEUnpackBlue@@YAEKK@Z
?GEUnpackGreen@@YAEKK@Z
?GEUnpackRed@@YAEKK@Z
?Load@GESurface@@QAEJAAVFSFileSpec@@E@Z
?FindFile@FSPath@@QAEJABVUString@@AAPAVFSFileSpec@@@Z
?SetTexture@GETextureSet@@QAEXKKPAVGETexture@@@Z
?SetFrame@GETexture@@QAEXK@Z
?sprintf@@YAJAAVUString@@PBDZZ
??YGE3DPoint@@QAEAAV0@ABVGEVector@@@Z
??0GE3DPoint@@QAE@XZ
?UMTan@@YAMM@Z
?PrepareTransforms@GEModel@@QAEXXZ
?SetTexture@GEMaterial@@QAEXPAVGETexture@@K@Z
?URegisterShutdown@@YAJP6AX_N@Z@Z
?ComputeBoundingVolumes@GEModel@@QAEXXZ
?CreateModel@GEModelManager@@QAEPAVGEModel@@KKKKKKABVUString@@K@Z
?Find@UString@@QBEKPBDK@Z
?Copy@UString@@QAEAAV1@ABV1@KKK_N@Z
?GetMagnitude@GEVector@@QBEMXZ
?Load@GE3DLine@@QAEJAAVFSFile@@@Z
?Save@GE3DLine@@QBEJAAVFSFile@@@Z
?GetMeshNormal@GETerrainMesh@@QBEXMMAAVGEVector@@@Z
?Load@GEVector@@QAEJAAVFSFile@@@Z
?Save@GEVector@@QBEJAAVFSFile@@@Z
??0GE3DPoint@@QAE@ABVGETransformation@@@Z
?SetOpacity@GEModel@@QAEXM@Z
?SetGraphicsCurrentFrame@GEModel@@QAEXK@Z
?SetTexture@GEModel@@QAEXPAVGETexture@@K@Z
?ComputeModelNormals@GEModel@@QAEXXZ
?CreateSubModel@GEModelManager@@QAEPAVGEModel@@KKKKKKKKPAV2@@Z
?GetBlending@GERasterizer@@QBEXAAK0K@Z
?DrawClippedText@UIForm@@QAEJABVGERectangle@@PAVGEText@@PAVUIControl@@@Z
?ComputeTextExtent@GEText@@AAEXXZ
??4GEColor@@QAEAAV0@ABV0@@Z
??0GEText@@QAE@PAVGEFont@@@Z
?SetFractionalFramePosition@GEModel@@QAEXM@Z
?SetGraphicsNextFrame@GEModel@@QAEXK@Z
??1GELine@@QAE@XZ
?SetOpacityPerVertex@GELine@@QAEXMM@Z
?SetEndPoint@GELine@@QAEXAAVGE2DPoint@@@Z
?SetStartPoint@GELine@@QAEXAAVGE2DPoint@@@Z
??0GELine@@QAE@XZ
?SolveForY@GE3DLine@@QBE_NMAAM@Z
?SolveForX@GE3DLine@@QBE_NMAAM@Z
?Scale@GETransformation@@QAEXMMM@Z
?Revolve@GETransformation@@QAEXMMM@Z
?UMArcCos@@YAMM@Z
?SetScale@GETransformation@@QAEXMMM@Z
?DistanceToSquared@GE2DPoint@@QBEMABV1@@Z
?GEUnpackAlpha@@YAEKK@Z
??0GEColor@@QAE@XZ
?GetFogAttributes@GERasterizer@@QBEXAAUGERFogAttributes@@K@Z
?NormalizeOrthographicCameraPoint@GEViewport@@QAEXABVGE3DPoint@@AAV2@AAM@Z
?NormalizePerspectiveCameraPoint@GEViewport@@QAEXABVGE3DPoint@@AAV2@AAM@Z
?RedrawAll@UIManager@@QAEXXZ
?Save@GESurface@@QAEJAAVFSFileSpec@@E@Z
??1GEViewport@@QAE@XZ
?SetOrthographicRectangle@GEViewport@@QAEXABVGERectangle@@@Z
??4GE3DLine@@QAEAAV0@ABV0@@Z
?SolveForZ@GE3DLine@@QBE_NMAAMAAVGE3DPoint@@@Z
?Intersects@GE3DPlane@@QBE_NABV1@AAVGE3DLine@@@Z
?SetViewRectangle@GEViewport@@QAEXABVGERectangle@@@Z
??0GE3DPlane@@QAE@XZ
??0GEViewport@@QAE@XZ
??1GEColor@@QAE@XZ
??0GEVector@@QAE@XZ
??1GEVector@@QAE@XZ
??0GELight@@QAE@XZ
??0GEBitmap@@QAE@XZ
??1GEBitmap@@EAE@XZ
?SetModel@GEPhysicalModel@@QAEXPAVGEModel@@@Z
??1GEPhysicalModel@@QAE@XZ
?Intersects@GEPhysicalModel@@QBE_NABVGEViewport@@_N@Z
?Normalize@GEColor@@QAEXXZ
??4GEViewport@@QAEAAV0@ABV0@@Z
?SetCamera@GEViewport@@QAEXABVGETransformation@@@Z
?UpdateVisibleTerrain@GETerrainMesh@@QAEXABVGETransformation@@AAVGEViewport@@KKK_N@Z
?GetVisibleTileRow@GETerrainMesh@@QBEXKAAJ00@Z
?GetNumVisibleTileRows@GETerrainMesh@@QBEKXZ
?GetControlById@UIForm@@QAEPAVUIControl@@K@Z
?SetDirection@GELight@@QAEXABVGEVector@@@Z
?SetIntensity@GELight@@QAEXM@Z
?SetColor@GELight@@QAEXABVGEColor@@@Z
?UpdateFogOfWar@GETerrainMesh@@QAEX_N@Z
?SetRearClippingDistance@GEViewport@@QAEXM@Z
?SetRectangle@GERhombus@@QAEXABVGERectangle@@@Z
?SetColorPerVertex@GERhombus@@QAEXABVGEColor@@000@Z
?ComputeRotation@GERhombus@@AAEXXZ
?SetColor@GELine@@QAEXABVGEColor@@@Z
?SetTextureCoordinates@GELine@@QAEXAAVGETextureCoordinate@@0@Z
?SetColor@GERhombus@@QAEXABVGEColor@@@Z
?SetFont@GEText@@QAEXPAVGEFont@@@Z
?SetTexture@GELine@@QAEXPAVGETexture@@K@Z
??0GERhombus@@QAE@XZ
??1GERhombus@@QAE@XZ
?CopyData@UIManager@@QAEJXZ
?DrawPolygons@UIManager@@QAEJXZ
?DrawTextA@UIManager@@QAEJXZ
?UpdateWaterAnimation@GETerrainMesh@@QAEXXZ
?GetFrustrumWorldPlanes@GEViewport@@QBEXABVGERectangle@@AAV?$vector@VGE3DPlane@@V?$allocator@VGE3DPlane@@@std@@@std@@_N@Z
?IsPointBelowPlane@GE3DPlane@@QBE_NABVGE3DPoint@@@Z
?IsPointOnOrAbovePlane@GE3DPlane@@QBE_NABVGE3DPoint@@@Z
?GetPixelSize@GERasterizer@@QAEMABVGEPhysicalModel@@AAVGEViewport@@_N@Z
?Intersects@GEPhysicalModel@@ABE_NABVGETransformation@@PBVGEModel@@KABVGE3DLine@@KAAM_N@Z
?ComputeDirection@GE3DLine@@AAEXABVGE3DPoint@@@Z
?DenormalizePerspectivePoint@GEViewport@@QBEXABVGE3DPoint@@MAAV2@@Z
??4GEPhysicalModel@@QAEAAV0@ABV0@@Z
wsock32
closesocket
getsockopt
ntohl
ioctlsocket
gethostbyname
shutdown
recvfrom
recv
send
select
__WSAFDIsSet
WSAGetLastError
listen
connect
htonl
htons
bind
socket
inet_ntoa
setsockopt
WSACleanup
WSAStartup
getsockname
ntohs
imm32
ImmGetCandidateListA
ImmGetCompositionStringA
ImmSetOpenStatus
ImmReleaseContext
ImmGetContext
kernel32
GetStartupInfoA
GetDiskFreeSpaceA
CreateMutexA
GetTickCount
GetSystemTimeAsFileTime
GetFileAttributesExA
GetCurrentDirectoryA
WaitForMultipleObjects
GetLastError
WideCharToMultiByte
GetVolumeInformationA
GetWindowsDirectoryA
CloseHandle
CreateEventA
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
GetCurrentThreadId
WaitForSingleObject
InterlockedDecrement
OutputDebugStringA
Sleep
WaitForSingleObjectEx
SetEvent
GetModuleHandleA
GetProcAddress
user32
GetWindowPlacement
RedrawWindow
CloseWindow
CallNextHookEx
LoadIconA
SetFocus
LoadBitmapA
SetWindowsHookExA
UnhookWindowsHookEx
ReleaseDC
ShowCursor
GetDC
RegisterClassExA
CreateWindowExA
UnregisterClassA
DefWindowProcA
GetWindowRect
GetDesktopWindow
PostQuitMessage
PostMessageA
LoadCursorA
gdi32
SelectObject
BitBlt
DeleteObject
CreateCompatibleDC
GetStockObject
GetObjectA
shell32
ShellExecuteA
ole32
CoUninitialize
CoInitialize
advapi32
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
Sections
.text Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 292KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 596KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 492KB - Virtual size: 490KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ