CreateCoreShell
GetSoundShell
_GetDecryptProc@4
_GetEncryptProc@4
_SetDecryptionKey@4
Behavioral task
behavioral1
Sample
e1fb924768141bb32369d0f61b33ca0159fe521c018485eb25afd4638f08295c.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
e1fb924768141bb32369d0f61b33ca0159fe521c018485eb25afd4638f08295c.exe
Resource
win10v2004-20240508-en
Target
e1fb924768141bb32369d0f61b33ca0159fe521c018485eb25afd4638f08295c
Size
2.6MB
MD5
3fe2c89b99cfe639d792797f91be0896
SHA1
0172a70f2fc7197bd792c5f7bdad52ae9733f959
SHA256
e1fb924768141bb32369d0f61b33ca0159fe521c018485eb25afd4638f08295c
SHA512
f605b0d3eb6c4f7fdc562ae70b000bbbf410c7d297fb1d00ae8dce6337851dbe12a0df54ca392080697576f5ddd52b52effbf8ec996c17435c63a2f3e626bb3c
SSDEEP
49152:Mm2o5vSM1lL4EdrD8LNuBVFtaQ9bHeeg/BgWaf2VXu4pF8UjwKgEaXFBhtJc42kG:MwL40vKNuBlawbeeg/BgWaf2VXu4wSdf
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e1fb924768141bb32369d0f61b33ca0159fe521c018485eb25afd4638f08295c |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
inet_ntoa
CloseHandle
TerminateThread
GetExitCodeThread
FreeLibrary
WaitForSingleObject
GetProcAddress
LoadLibraryA
Sleep
SystemTimeToTzSpecificLocalTime
WritePrivateProfileStringA
GetLastError
CreateProcessA
SetUnhandledExceptionFilter
IsBadReadPtr
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
CreateFileA
FormatMessageA
lstrlenA
CreateSemaphoreA
OpenSemaphoreA
CreateEventA
SetEvent
LeaveCriticalSection
EnterCriticalSection
ResetEvent
CreateThread
InitializeCriticalSection
InterlockedDecrement
GetComputerNameA
FileTimeToSystemTime
LocalFileTimeToFileTime
SystemTimeToFileTime
OpenProcess
TerminateProcess
ReadProcessMemory
GetCurrentDirectoryA
GetVersionExA
InterlockedExchange
InterlockedCompareExchange
GetStartupInfoA
UnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetLastError
CreateMutexA
OpenMutexA
VirtualProtect
LoadLibraryW
GetProcessHeap
HeapFree
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
GetTempPathA
GetTempFileNameA
VirtualFreeEx
CreateRemoteThread
WriteProcessMemory
MultiByteToWideChar
CreateFileMappingA
VirtualAllocEx
GetTickCount
GetPrivateProfileIntA
GetLocalTime
GetVersion
FindFirstFileA
SetFileAttributesA
DeleteFileA
FindNextFileA
FindClose
RemoveDirectoryA
AllocConsole
FreeConsole
GetModuleFileNameA
GetDiskFreeSpaceExA
DeleteCriticalSection
MapViewOfFile
UnmapViewOfFile
GetProcessTimes
GetThreadContext
ResumeThread
VirtualProtectEx
FlushInstructionCache
SetThreadContext
GetDC
CopyRect
CharLowerA
SetWindowLongA
GetWindowLongA
MoveWindow
ReleaseDC
InvalidateRect
BringWindowToTop
SetWindowTextA
wsprintfA
ReleaseCapture
SetCapture
SetCursorPos
InSendMessage
MessageBoxA
GetMessagePos
ScreenToClient
GetKeyState
SetClipboardData
OpenClipboard
GetClipboardData
EmptyClipboard
CloseClipboard
SetCaretPos
EnableWindow
ShowWindow
SetFocus
DestroyWindow
IsWindow
GetClientRect
ClientToScreen
SetWindowPos
CreateWindowExA
ShowCursor
LoadCursorFromFileA
LoadCursorA
SetCursor
SendMessageA
GetParent
GetOpenFileNameA
OpenProcessToken
RegQueryValueExA
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
SHGetSpecialFolderPathA
ShellExecuteA
StgCreateDocfile
OleUninitialize
OleInitialize
OleCreate
OleSetContainedObject
OleSave
CreateTextFilter
lua_typename
lua_setglobal
lua_getn
lua_stackspace
lua_rawgeti
lua_rawseti
lua_error
lua_newtable
lua_settable
lua_curpack
lua_rawget
lua_pushnil
lua_isstring
lua_pushstring
lua_pushnumber
lua_type
lua_tonumber
lua_gettop
lua_tostring
lua_pushcclosure
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEPADXZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBD@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
_localtime32
_purecall
strcat
strftime
isgraph
atoi
printf
freopen
__iob_func
free
realloc
malloc
memmove
_mbsicmp
isspace
abs
_difftime32
memcmp
sscanf
memmove_s
_mktime32
rand
fclose
fwrite
fopen
srand
memcpy
isdigit
_mbsstr
remove
_ui64toa
_i64toa
fflush
fprintf
_gmtime32
sprintf_s
_chmod
vsprintf
_vsnprintf
strrchr
_ctime32
exit
_mkdir
_CIsqrt
puts
floor
strncmp
_CIcos
_CIsin
strtoul
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
strcmp
memset
strlen
??_V@YAXPAX@Z
_snprintf
_time32
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
_CxxThrowException
??2@YAPAXI@Z
_invalid_parameter_noinfo
??3@YAXPAX@Z
__CxxFrameHandler3
strcpy
strchr
strstr
sprintf
strncpy
_itoa
_stricmp
_getcwd
_strlwr
__CxxFrameHandler
labs
calloc
EDOneTimePad_Decipher
?Run@KWin32App@@UAEXXZ
?Init@KWin32App@@UAEHPAUHINSTANCE__@@PAD@Z
??0KWin32App@@QAE@XZ
?InitClass@KWin32App@@MAEHPAUHINSTANCE__@@@Z
?InitWindow@KWin32App@@MAEHPAUHINSTANCE__@@@Z
?ShowMouse@KWin32App@@UAEXH@Z
?SetMultiGame@KWin32App@@UAEXH@Z
?MsgProc@KWin32App@@UAEJPAUHWND__@@IIJ@Z
?SetMouseHoverTime@KWin32App@@QAEXI@Z
?Start@KTimer@@QAEXXZ
?GetElapse@KTimer@@QAEKXZ
InitTextRender
?g_InitEngine@@YAHPBD0@Z
?g_ExitEngine@@YAXXZ
?g_DebugLog@@YAXPBDZZ
EDOneTimePad_Encipher
RegisterInlineCtrl
RemoveInlineWndCtrl
?g_StrCpy@@YAXPADPBD@Z
?g_StrCmpLen@@YAHPBD0H@Z
?g_StrLen@@YAHPBD@Z
?GetString@KTabFile@@UAEHHHPBDPADK@Z
?SetKeepDataForOutMaxWidth@KTabFile@@QAEXH@Z
?Init@KSG_LogFile@@QAEHPBD@Z
?puts@KSG_LogFile@@QAEXPBD@Z
?write_date_time@KSG_LogFile@@QAEXXZ
?GetScript@KLuaScriptSet@@QAEPAVKLuaScript@@PBD@Z
?LoadScriptByRelPath@KLuaScriptSet@@QAE?AW4_CODE_RESULT@@PBDPAPAVKLuaScript@@H@Z
?FormatCallByVaList@KLuaCall@@QAEHPBDPAH0PAD@Z
??1KNode@@UAE@XZ
?RegisterFunctions@KLuaScriptSet@@QAEHPAUTLua_Funcs@@H@Z
?SetGlobalInt@KLuaScriptSet@@QAEXPBDH@Z
?SetRootPath@KLuaScriptSet@@QAEXPBD@Z
?GetScript@KLuaScriptSet@@QAEPAVKLuaScript@@K@Z
?GetFloat@KTabFile@@UAEHHPBDMPAMH@Z
?Insert@KLinkArray@@QAEXH@Z
?Init@KLinkArray@@QAEXH@Z
?GetInteger@KTabFile@@UAEHHHHPAH@Z
?FindColumn@KTabFile@@UAEHPBD@Z
??0KLuaScriptSet@@QAE@HH@Z
??1KLuaScriptSet@@QAE@XZ
?SetGlobalName@KLuaCall@@QAEXPBD@Z
?g_FileName2Id@@YAKPBD@Z
?GetNext@KLinkArray@@QBEHH@Z
??1KLinkArray@@QAE@XZ
??0KLinkArray@@QAE@XZ
?Remove@KLinkArray@@QAEXH@Z
??1KSoundCache@@QAE@XZ
?Exit@KDirectSound@@QAEXXZ
?SetVolume@KWavSound@@QAEXH@Z
?SetPan@KWavSound@@QAEXH@Z
?Stop@KWavSound@@QAEXXZ
?IsPlaying@KWavSound@@QAEHXZ
??0KDirectSound@@QAE@XZ
??1KDirectSound@@QAE@XZ
??1KMusic@@UAE@XZ
??0KMemClass@@QAE@XZ
??_7KMp3Music@@6B@
??0KMusic@@QAE@XZ
??0KSoundCache@@QAE@XZ
?Init@KDirectSound@@QAEHXZ
?Open@KMp3Music@@UAEHPAD@Z
?Close@KMusic@@UAEXXZ
?Play@KMusic@@UAEXH@Z
?Stop@KMusic@@UAEXXZ
?Rewind@KMp3Music@@UAEXXZ
?SetVolume@KMusic@@UAEXJ@Z
?HandleNotify@KMusic@@UAEHXZ
?IsPlaying@KMusic@@UAEHXZ
?Init@KMusic@@MAEHXZ
?InitSoundFormat@KMp3Music@@MAEXXZ
?InitSoundBuffer@KMusic@@MAEHXZ
?FreeSoundBuffer@KMusic@@MAEXXZ
?InitSoundNotify@KMusic@@MAEHXZ
?FreeSoundNotify@KMusic@@MAEXXZ
?InitEventHandle@KMusic@@MAEHXZ
?FreeEventHandle@KMusic@@MAEXXZ
?FillBufferWithSound@KMusic@@MAEHK@Z
?FillBufferWithSilence@KMusic@@MAEHXZ
?ReadWaveData@KMp3Music@@MAEKPAEK@Z
?Mp3Init@KMp3Music@@MAEHXZ
?Mp3FillBuffer@KMp3Music@@MAEHXZ
?Mp3Decode@KMp3Music@@MAEKPAEK@Z
?Mp3FileOpen@KMp3Music@@MAEHPAD@Z
?Mp3FileRead@KMp3Music@@MAEKPAEK@Z
?Mp3FileSeek@KMp3Music@@MAEKJ@Z
?Seek@KMp3Music@@UAEXH@Z
??1KMemClass@@QAE@XZ
?Play@KWavSound@@QAEXHHH@Z
?GetNext@KNode@@QBEPAV1@XZ
?Remove@KNode@@QAEXXZ
?GetHead@KList@@QBEPAVKNode@@XZ
??0KNode@@QAE@XZ
?GetPrev@KLinkArray@@QBEHH@Z
?AddTail@KList@@QAEXPAVKNode@@@Z
?GetString@KTabFile@@UAEHPBD00PADK@Z
?g_StrCat@@YAXPADPBD@Z
?SetGlobalName@KLuaScript@@QAEXPBD@Z
??0KList@@QAE@XZ
?GetWidth@KTabFile@@UAEHXZ
TGetLimitLenEncodedString
?g_StrLower@@YAXPAD@Z
?Clear@KPolygon@@QAEXXZ
??0KPolygon@@QAE@XZ
?g_StrCmp@@YAHPBD0@Z
?AddHead@KList@@QAEXPAVKNode@@@Z
?RemoveHead@KList@@QAEPAVKNode@@XZ
?GetRect@KIniFile@@QAEXPBD0PAUtagRECT@@@Z
?Seek@KPakFile@@QAEKHI@Z
?Stop@KTimer@@QAEXXZ
?g_GetRandomSeed@@YAIXZ
?GetValuesFromStack@KLuaScript@@QAAHPBDZZ
?g_StrWrap@@YAXPADPBDH@Z
?g_UnitePathAndName@@YAXPBD0PAD@Z
?KSG_StringGetInt@@YAHPAPBDH@Z
?KSG_StringSkipSymbol@@YA_NPAPBDH@Z
gAdviseMemFileNotify
?GetInteger@KTabFile@@UAEHPBD0HPAH@Z
?GetActionScriptID@KLuaScript@@SAKPAUlua_State@@@Z
?PushNumber@KLuaCall@@QAEXN@Z
?IsLoaded@KLuaScript@@QBEHXZ
?g_GetRootPath@@YAXPADI@Z
??0KTabFile@@QAE@ABV0@@Z
?WriteString@KTabFileCtrl@@QAEHHPBD0H@Z
?WriteString@KTabFileCtrl@@QAEHHHPBDK@Z
?Search@KTabFile@@QAEHPBD0H@Z
?Search@KTabFile@@QAEHPBDHH@Z
?Save@KTabFileCtrl@@QAEHXZ
?Save@KTabFile@@UAEHPBD@Z
?FindRow@KTabFile@@UAEHPBDH@Z
?GetFloat@KTabFile@@UAEHPBD0MPAM@Z
?GetFloat@KTabFile@@UAEHHHMPAM@Z
??0KTabFileCtrl@@QAE@XZ
?Load@KTabFileCtrl@@UAEHPBD@Z
?Save@KTabFileCtrl@@UAEHPBD@Z
?FindRow@KTabFileCtrl@@UAEHPBDH@Z
?FindColumn@KTabFileCtrl@@UAEHPBD@Z
?GetWidth@KTabFileCtrl@@UAEHXZ
?GetHeight@KTabFileCtrl@@UAEHXZ
?GetString@KTabFileCtrl@@UAEHPBD00PADK@Z
?GetString@KTabFileCtrl@@UAEHHHPBDPADK@Z
?GetString@KTabFileCtrl@@UAEHHPBD0PADKH@Z
?GetInteger@KTabFileCtrl@@UAEHPBD0HPAH@Z
?GetInteger@KTabFileCtrl@@UAEHHHHPAH@Z
?GetInteger@KTabFileCtrl@@UAEHHPBDHPAHH@Z
?GetFloat@KTabFileCtrl@@UAEHPBD0MPAM@Z
?GetFloat@KTabFileCtrl@@UAEHHHMPAM@Z
?GetFloat@KTabFileCtrl@@UAEHHPBDMPAMH@Z
?Clear@KTabFileCtrl@@UAEXXZ
??1KTabFileCtrl@@UAE@XZ
?GetNodeCount@KList@@QBEJXZ
gAddToMemFileManager
gOnUpdateFinishForMemFileManager
?release_image@@YAXPAUKSGImageContent@@@Z
?g_FileExists@@YAHPBD@Z
?Tell@KPakFile@@QAEKXZ
?RemoveTail@KList@@QAEPAVKNode@@XZ
?GetTail@KList@@QBEPAVKNode@@XZ
?GetGlobalName@KLuaScript@@QAEXPBD@Z
??0KMutex@@QAE@XZ
?Lock@KMutex@@QAEXXZ
?Unlock@KMutex@@QAEXXZ
??1KMutex@@QAE@XZ
?GetTopIndex@KLuaCall@@QBEHXZ
?StackCall@KLuaCall@@QAEHPBDHHPAH@Z
?ValueToNumber@KLuaCall@@QAEIH@Z
?ValueToString@KLuaCall@@QAEPBDH@Z
??1KLuaCall@@QAE@XZ
?g_RandomSeed@@YAXI@Z
?CallFunction@KLuaScript@@QAEHPBDH0PAD@Z
?SafeCallBegin@KLuaScript@@QAEXPAH@Z
?SafeCallEnd@KLuaScript@@QAEXH@Z
?GetNextKey@KIniFile@@QAEHPBD0PAD@Z
TGetEncodedTextOutputLenPos
TGetEncodedTextEffectCtrls
?g_Random@@YAII@Z
?Clear@KTabFile@@UAEXXZ
?Open@KFile@@QAEHPBD@Z
?Read@KFile@@QAEKPAXK@Z
?Load@KTabFile@@UAEHPBD@Z
?GetHeight@KTabFile@@UAEHXZ
?GetInteger@KTabFile@@UAEHHPBDHPAHH@Z
?GetString@KTabFile@@UAEHHPBD0PADKH@Z
??1KTabFile@@UAE@XZ
??0KTabFile@@QAE@XZ
TSplitEncodedString
?IsSectionExist@KIniFile@@QAEHPBD@Z
?KSG_StringToMD5String@@YAHQADQBD@Z
?WriteStruct@KIniFile@@QAEXPBD0PAXK@Z
?EraseKey@KIniFile@@QAEXPBD0@Z
?GetStruct@KIniFile@@QAEXPBD0PAXK@Z
TClearSpecialCtrlInEncodedText
?g_GetDrawHWnd@@YAPAUHWND__@@XZ
TEncodeTextAndPickCtrl
?GetInteger2@KIniFile@@QAEHPBD0PAH1@Z
TRemoveCtrlInEncodedText
GetCtrlHandle
??1KIme@@QAE@XZ
??0KIme@@QAE@XZ
TIsLocalWord
TSplitString
TSplitStringLine
TIsHightChar
?EnableLanguageChange@KIme@@QAEXXZ
?OpenIME@KIme@@QAEXXZ
?SetCaretPos@KIme@@QAEXHH@Z
?IsIme@KIme@@QAEHXZ
TGetLimitLenString
??0KPakFile@@QAE@XZ
??0KFile@@QAE@XZ
?Create@KFile@@QAEHPBD@Z
?Open@KPakFile@@QAEHPBD@Z
?Size@KPakFile@@QAEKXZ
?Read@KPakFile@@QAEKPAXI@Z
?Close@KPakFile@@QAEXXZ
??1KFile@@QAE@XZ
??1KPakFile@@QAE@XZ
TGetEncodedTextLineCount
TFindSpecialCtrlInEncodedText
??0KTimer@@QAE@XZ
?Clear@KIniFile@@QAEXXZ
?Close@KFile@@QAEXXZ
?Write@KFile@@QAEKPAXK@Z
?Seek@KFile@@QAEKJK@Z
?g_pIme@@3PAVKIme@@A
?DisableLanguageChange@KIme@@QAEXXZ
?CloseIME@KIme@@QAEXXZ
?TurnOn@KIme@@QAEXXZ
?EraseSection@KIniFile@@QAEXPBD@Z
?LoadBuffer@KLuaScript@@QAEHPAEKPBD@Z
?ExecuteCode@KLuaScript@@QAEHXZ
?Release@KLuaScript@@QAEXXZ
?CreateScript@KLuaScriptSet@@QAEPAVKLuaScript@@XZ
?RegisterFunctions@KLuaScript@@QAEHPAUTLua_Funcs@@H@Z
?g_StrCpyLen@@YAXPADPBDH@Z
?WriteInteger@KIniFile@@QAEXPBD0H@Z
?Save@KIniFile@@QAEHPBD@Z
?g_GetFullPath@@YAXPADIPBD@Z
?g_GetMainHWnd@@YAPAUHWND__@@XZ
?g_CreatePath@@YAXPBD@Z
??1KSG_LogFile@@UAE@XZ
??0KSG_LogFile@@QAE@PBD@Z
?InitWithDate@KSG_LogFile@@QAEHPBD0H@Z
?printf_t@KSG_LogFile@@QAAXPBDZZ
?GetTmpScript@KLuaScriptSet@@QAEPAVKLuaScript@@XZ
?AddIncluder@KLuaScript@@QAEXK@Z
??0KLuaCall@@QAE@PAVKLuaScript@@H@Z
??1KIniFile@@QAE@XZ
?GetString@KIniFile@@QAEHPBD00PADK@Z
?Load@KIniFile@@QAEHPBD@Z
?WriteString@KIniFile@@QAEXPBD00@Z
?g_HashString2Id@@YAKPBD@Z
TEncodeText
?GetInteger@KIniFile@@QAEHPBD0HPAH@Z
??0KIniFile@@QAE@XZ
TIsLocalChar
ImmAssociateContext
timeGetTime
GetDeviceCaps
RealizePalette
SelectPalette
SysAllocString
VariantClear
SysFreeString
CreateCoreShell
GetSoundShell
_GetDecryptProc@4
_GetEncryptProc@4
_SetDecryptionKey@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE