cfe9ececf20d1e8773bd5f3ac0bd799641e291a703729314183f5aae4e068d44

Sharing

Copy URL Twitter E-mail

General

Target
cfe9ececf20d1e8773bd5f3ac0bd799641e291a703729314183f5aae4e068d44
Size 8.4MB
Sample260720-x7azeaex5x
SHA256 cfe9ececf20d1e8773bd5f3ac0bd799641e291a703729314183f5aae4e068d44
MD5 29267f91eab4f61aab6caf75b4c13d6a
SHA1 4a531398d786cada5e5ec322918efa4f6bccc8f2
SHA512 6a7e4b113280e92bfa2d5d797f954c7dc2fe9a78d0e932fc5fa1ff429454f3ac210216bb7ecc055696d6cd946d7cf40e5d58f5da266380b323f9b6b200dc8944
SSDEEP 98304:vuDe0nFkY0v1KuQ+c7WcNoGXMYv2vwAOSW/s3qvEnTZSk20ZLbXiy2ydtkEsm31:7wFa1K77qlOs3qk2sXF2atkEsm31
TLSH
T19F967C102F05E0FBCEC2217C566A7FE54BDBDF547765C4DB93A0284AC6802C2AA35ADD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
cfe9ececf20d1e8773bd5f3ac0bd799641e291a703729314183f5aae4e068d44

File Explorer

cfe9ececf20d1e8773bd5f3ac0bd799641e291a703729314183f5aae4e068d44

.exe 8.4MB

cfe9ececf20d1e8773bd5f3ac0bd799641e291a703729314183f5aae4e068d44

IMPHASH 7ebcb83dbf71d22debfb48154f75a1f6
SHA256 cfe9ececf20d1e8773bd5f3ac0bd799641e291a703729314183f5aae4e068d44
MD5 29267f91eab4f61aab6caf75b4c13d6a
SHA1 4a531398d786cada5e5ec322918efa4f6bccc8f2
SHA512 6a7e4b113280e92bfa2d5d797f954c7dc2fe9a78d0e932fc5fa1ff429454f3ac210216bb7ecc055696d6cd946d7cf40e5d58f5da266380b323f9b6b200dc8944
SSDEEP 98304:vuDe0nFkY0v1KuQ+c7WcNoGXMYv2vwAOSW/s3qvEnTZSk20ZLbXiy2ydtkEsm31:7wFa1K77qlOs3qk2sXF2atkEsm31
TLSH
T19F967C102F05E0FBCEC2217C566A7FE54BDBDF547765C4DB93A0284AC6802C2AA35ADD
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

21:d5:bb:60:5b:74:b3:9c:b0:41:7a:8e:46:ea:ac:45:7b:02:58:7f:e1:8c:91:0f:de:25:e1:82:6f:d2:53:f3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Kortuza,1.2.840.113549.1.9.1=#0c126b6f6e74616b74406b6f7274757a612e706c

Chains

Jul 8, 2026

CN=Kortuza,1.2.840.113549.1.9.1=#0c126b6f6e74616b74406b6f7274757a612e706c

Subject

CN=Kortuza,1.2.840.113549.1.9.1=#0c126b6f6e74616b74406b6f7274757a612e706c

Serial Number

11:e4:e9:b5:8e:ce:b7:9e:40:c5:88:4d:24:50:08:0a

Issuer

CN=Kortuza,1.2.840.113549.1.9.1=#0c126b6f6e74616b74406b6f7274757a612e706c

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 26, 2026 - Mar 26, 2029

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

2564855

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Metin2\Zaruko\Bin_src\Client\binka\Kortuza.pdb

kernel32

OutputDebugStringW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileA FindFirstFileA FindClose MultiByteToWideChar WriteConsoleW SetFileAttributesA Module32Next Module32First Process32Next SetStdHandle DeleteFileW HeapReAlloc GetTimeZoneInformation CreateProcessW GetExitCodeProcess GetFileSizeEx SetConsoleCtrlHandler SetFilePointerEx ReadConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect IsThreadAFiber FlsFree FlsSetValue FlsGetValue FlsAlloc GetStdHandle FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetFileType ExitProcess GetDriveTypeW GetModuleHandleExW FreeLibraryAndExitThread ResumeThread ExitThread CreateThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount InterlockedFlushSList InterlockedPushEntrySList RtlUnwind RaiseException GetThreadTimes GetCurrentThread SetLastError Process32First PeekNamedPipe GetModuleFileNameW GetStartupInfoW IsDebuggerPresent HeapSize IsProcessorFeaturePresent TerminateProcess UnhandledExceptionFilter CloseThreadpoolWait SetThreadpoolWait CreateThreadpoolWait CloseThreadpoolTimer WaitForThreadpoolTimerCallbacks SetThreadpoolTimer CreateThreadpoolTimer FreeLibraryWhenCallbackReturns GetTickCount64 GetSystemTimeAsFileTime GetCurrentProcessorNumber FlushProcessWriteBuffers CreateSemaphoreExW CreateEventExW InitOnceExecuteOnce GetCPInfo CompareStringEx SleepConditionVariableSRW WakeAllConditionVariable WakeConditionVariable TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive QueryPerformanceFrequency LCMapStringEx DecodePointer EncodePointer InitializeCriticalSectionEx GetStringTypeW CreateSymbolicLinkW GetFileInformationByHandleEx CreateHardLinkW MoveFileExW CopyFileW CreateDirectoryExW GetModuleHandleW AreFileApisANSI GetTempPathW SetFileTime SetFileInformationByHandle SetFileAttributesW GetFullPathNameW GetFinalPathNameByHandleW GetFileInformationByHandle GetFileAttributesExW GetFileAttributesW GetDiskFreeSpaceExW FindNextFileW FindFirstFileExW FindFirstFileW CreateFileW CreateDirectoryW SetCurrentDirectoryW GetLocaleInfoEx LocalFree GetNativeSystemInfo GetExitCodeThread SwitchToThread WaitForSingleObjectEx FormatMessageA QueryPerformanceCounter CopyFileA CreateSemaphoreA ReleaseSemaphore GetLocaleInfoA CompareStringA WideCharToMultiByte lstrlenW GlobalLock GlobalUnlock FreeLibrary GetVersionExA HeapQueryInformation GetLastError SetEndOfFile GetCurrentProcess GetCurrentProcessId ReadProcessMemory GetCurrentDirectoryW GetCurrentDirectoryA ReleaseMutex CreateMutexA GetModuleFileNameA GlobalFree lstrlenA GetPrivateProfileStringA InitializeSListHead MoveFileA CreateToolhelp32Snapshot GetSystemInfo OpenProcess SetThreadPriority Sleep CreateEventA WaitForSingleObject SetEvent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection GetTickCount GetProcessHeap HeapFree GetSystemDirectoryA GetModuleHandleA WriteFile SetFilePointer ReadFile LoadLibraryA GetProcAddress GetCurrentThreadId SetUnhandledExceptionFilter GetFileSize CreateFileMappingA UnmapViewOfFile MapViewOfFile OutputDebugStringA GetTempFileNameA GetTempPathA RemoveDirectoryA DeleteFileA CreateDirectoryA AllocConsole GlobalAlloc HeapAlloc DeviceIoControl CloseHandle WaitNamedPipeW CreateFileA

user32

ShowWindow GetCapture SetCursorPos LoadImageA DestroyCursor SetCursor ShowCursor GetKeyState SystemParametersInfoA LoadIconA FindWindowA ScreenToClient GetCursorPos GetAsyncKeyState SetWindowPos PostQuitMessage SetCapture ReleaseCapture ChangeDisplaySettingsA GetSystemMetrics CharNextW GetClipboardData CloseClipboard OpenClipboard GetKeyboardLayout GetKeyboardLayoutNameA DispatchMessageA TranslateMessage GetMessageA LoadCursorA AdjustWindowRectEx GetWindowRect SetWindowTextA GetMenu RegisterClassA CharPrevExA CharNextExA SetWindowLongA GetWindowLongA UpdateWindow SetFocus MoveWindow DestroyWindow IsWindow CreateWindowExA RegisterClassExA UnregisterClassA DefWindowProcA PeekMessageA GetDC ReleaseDC BeginPaint EndPaint InvalidateRect GetClientRect FillRect SetRect OffsetRect LoadStringA MessageBoxA ClientToScreen

gdi32

EnumFontFamiliesExA DeleteDC SelectObject SetBkColor SetBkMode SetDIBitsToDevice SetTextColor CreateDIBSection TextOutA CreateFontIndirectA GetCharABCWidthsFloatW CreateSolidBrush DeleteObject PatBlt GetTextExtentPoint32A GetStockObject CreateCompatibleDC StretchBlt TextOutW GetTextExtentPoint32W

advapi32

RegOpenKeyExA RegQueryValueExA RegQueryValueExW RegOpenKeyExW RegCreateKeyExW RegSetValueExW CryptAcquireContextA CryptReleaseContext CryptGenRandom RegCloseKey

shell32

SHGetSpecialFolderPathA ShellExecuteA

ole32

CoInitializeEx OleSetContainedObject OleUninitialize OleInitialize CoCreateInstance CoInitialize CoUninitialize CoGetClassObject

winmm

timeGetDevCaps timeBeginPeriod timeEndPeriod timeGetTime

d3d9

Direct3DCreate9

d3dx9_43

D3DXVec3Transform D3DXVec2Normalize D3DXQuaternionRotationYawPitchRoll D3DXVec3Normalize D3DXVec3TransformCoord D3DXMatrixDeterminant D3DXMatrixMultiply D3DXMatrixInverse D3DXMatrixTranspose D3DXPlaneNormalize D3DXMatrixRotationY D3DXCreateTextureFromFileInMemoryEx D3DXCreateTexture D3DXLoadSurfaceFromSurface D3DXGetFVFVertexSize D3DXCreateSphere D3DXCreateCylinder D3DXCreateMatrixStack D3DXMatrixOrthoOffCenterRH D3DXMatrixOrthoRH D3DXMatrixPerspectiveFovRH D3DXMatrixScaling D3DXVec3Unproject D3DXVec3Project D3DXVec4Transform D3DXVec3TransformNormal D3DXMatrixRotationX D3DXQuaternionMultiply D3DXMatrixRotationZ D3DXMatrixRotationAxis D3DXMatrixLookAtRH D3DXMatrixTranslation D3DXMatrixRotationQuaternion D3DXQuaternionRotationAxis D3DXMatrixRotationYawPitchRoll

vmprotectsdk32

VMProtectDecryptStringA VMProtectBeginUltra VMProtectEnd VMProtectBeginMutation

python27

PyDict_GetItemString PyLong_FromUnsignedLong PyLong_FromLongLong PyTuple_New PyTuple_SetItem PyList_New PyList_SetItem PyList_Append PyDict_New PyDict_SetItemString PyInt_AsLong PyList_GetItem PyModule_AddObject PyDict_Next PyDict_Size PyErr_SetString PyExc_RuntimeError PyString_FromString PyInt_FromLong PyLong_AsUnsignedLong PyLong_AsLongLong PyString_AsString PyList_Size PyDict_GetItem PyArg_ParseTuple PyDict_SetItem PyErr_Occurred PyModule_AddStringConstant PyImport_GetModuleDict PyExc_SystemError PyString_InternFromString PyObject_GetAttrString PyObject_GetAttr PyTuple_Size PyFloat_AsDouble PyErr_Clear PyErr_BadArgument PyErr_Print PyObject_CallObject PyNumber_Check _Py_NoneStruct PyModule_GetDict PyErr_Fetch Py_SetProgramName Py_Initialize Py_Finalize PyRun_StringFlags PyEval_SetTrace Py_FlushLine PyImport_GetMagicNumber PyImport_AddModule PyObject_AsCharBuffer PyCode_Addr2Line PyEval_EvalCode Py_OptimizeFlag PyCode_Type PyUnicodeUCS2_DecodeUTF8 _PyLong_FromByteArray PyFloat_FromDouble PyComplex_FromCComplex PyString_FromStringAndSize PyErr_NoMemory PyEval_GetRestricted PyCode_New Py_InitModule4 PyTuple_GetItem PyLong_AsLong PyModule_AddIntConstant Py_BuildValue PyMarshal_ReadObjectFromString _PyLong_New _Py_EllipsisObject PyExc_StopIteration PyExc_EOFError PyExc_ValueError PyObject_IsInstance PyCallable_Check PyMem_Malloc PyMem_Realloc PyObject_SetAttrString PyObject_SetAttr PyString_FromFormat PyTuple_Pack PyTraceBack_Here PyErr_WarnEx PyErr_SetObject PyOS_snprintf Py_GetVersion PyObject_CallFunctionObjArgs PyFrame_New PyExc_ImportError PyExc_NameError _PyThreadState_Current PyNumber_Add PyInt_FromString PyObject_Call PyNumber_Subtract PyNumber_Divide PyInt_FromSsize_t PyObject_GetItem PyObject_SetItem PyTuple_Type PyList_Type PyNumber_Multiply PyFloat_FromString PyUnicode_Type PyFloat_Type PyString_Type _Py_TrueStruct PyObject_IsTrue _Py_ZeroStruct PyNumber_Remainder PyTraceBack_Type PyExc_BaseException PyExc_GeneratorExit PyExc_AttributeError PyExc_TypeError PyType_IsSubtype PyType_Ready PyObject_SelfIter PyObject_GenericGetAttr PyObject_ClearWeakRefs _PyObject_GC_New PyObject_GC_Track PyObject_GC_UnTrack PyObject_GC_Del PyErr_SetNone PyErr_GivenExceptionMatches PyErr_ExceptionMatches PyErr_NormalizeException PyErr_WriteUnraisable PyArg_UnpackTuple _PyObject_CallFunction_SizeT _PyObject_CallMethod_SizeT PyObject_GetIter PyIter_Next PyNumber_InPlaceAdd PyImport_ImportModule

iphlpapi

GetAdaptersInfo GetPerAdapterInfo

imm32

ImmGetOpenStatus ImmSetConversionStatus ImmGetConversionStatus ImmGetCandidateListW ImmSetCompositionStringW ImmGetCompositionStringW ImmAssociateContext ImmReleaseContext ImmGetContext ImmIsIME ImmGetIMEFileNameA ImmNotifyIME

devil

ilGetInteger ilGenImages ilDeleteImages ilBindImage ilInit ilConvertImage ilCopyPixels ilEnable ilOriginFunc ilShutDown ilTexImage ilSetPixels ilSave ilLoad

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

granny2

_GrannyReadEntireFileFromMemory@8 _GrannyFreeFileSection@8 _GrannyFreeFile@4 _GrannyGetFileInfo@4 _GrannyGetMaterialTextureByType@8 _GrannyFindMatchingMember@16 _GrannyConvertSingleObject@20 _GrannyGetSourceSkeleton@4 _GrannySetModelClock@8 _GrannyFreeCompletedModelControls@4 _GrannySampleModelAnimationsAccelerated@20 _GrannyUpdateModelMatrix@20 _GrannyNewLocalPose@4 _GrannyFreeLocalPose@4 _GrannyGetWorldPoseComposite4x4Array@4 _GrannyInstantiateModel@4 _GrannyFreeModelInstance@4 _GrannyNewMeshBinding@12 _GrannyFindBoneByName@12 _GrannyGetMeshBindingToBoneIndices@4 _GrannySetLogCallback@4 _GrannyFreeMeshBinding@4 _GrannyFreeWorldPose@4 _GrannyGetWorldPose4x4@8 _GrannyGetWorldPoseComposite4x4@8 _GrannyGetTotalTypeSize@4 _GrannyGetMeshVertexCount@4 _GrannyMeshIsRigid@4 _GrannyGetMeshIndexCount@4 _GrannyGetSourceModel@4 _GrannyFindTrackGroupForModel@12 _GrannyFreeControl@4 _GrannyFreeControlOnceUnused@4 _GrannyCompleteControlAt@8 _GrannyControlIsComplete@4 _GrannyFreeControlIfComplete@4 _GrannyGetControlLoopCount@4 _GrannySetControlLoopCount@8 _GrannyGetControlSpeed@4 GrannyPNT332VertexType _GrannyDeformVertices@24 _GrannyFreeMeshDeformer@4 _GrannyNewMeshDeformer@16 _GrannyCopyMeshIndices@12 _GrannyGetMeshVertices@4 _GrannyCopyMeshVertices@12 _GrannyGetMeshVertexType@4 _GrannyGetMeshTriangleGroups@4 _GrannyGetMeshTriangleGroupCount@4 _GrannySetTrackGroupLOD@16 _GrannySetTrackGroupTarget@12 _GrannyEndControlledAnimation@4 _GrannyBeginControlledAnimation@8 _GrannyPlayControlledAnimation@12 _GrannySetControlRawLocalClock@8 _GrannyGetControlRawLocalClock@4 _GrannySetControlEaseOutCurve@28 _GrannySetControlEaseOut@8 _GrannySetControlEaseInCurve@28 _GrannySetControlEaseIn@8 _GrannyGetControlLocalDuration@4 _GrannySetControlSpeed@8 _GrannyNewWorldPose@4

mss32

_AIL_mem_free_lock@4 _AIL_file_read@8 _AIL_set_file_callbacks@16 _AIL_WAV_info@8 _AIL_decompress_ASI@24 _AIL_decompress_ADPCM@12 _AIL_file_type@8 _AIL_open_digital_driver@16 _AIL_open_stream@12 _AIL_close_digital_driver@4 _AIL_enumerate_3D_providers@12 _AIL_open_3D_provider@4 _AIL_close_3D_provider@4 _AIL_open_3D_listener@4 _AIL_close_3D_listener@4 _AIL_set_3D_position@16 _AIL_set_3D_velocity@20 _AIL_set_3D_orientation@28 _AIL_startup@0 _AIL_shutdown@0 _AIL_set_redist_directory@4 _AIL_close_stream@4 _AIL_start_stream@4 _AIL_pause_stream@8 _AIL_set_stream_volume_levels@12 _AIL_stream_volume_levels@12 _AIL_set_stream_loop_count@8 _AIL_stream_status@4 _AIL_last_error@0 _AIL_allocate_sample_handle@4 _AIL_release_sample_handle@4 _AIL_init_sample@4 _AIL_set_sample_file@12 _AIL_start_sample@4 _AIL_stop_sample@4 _AIL_resume_sample@4 _AIL_end_sample@4 _AIL_set_sample_volume_pan@12 _AIL_set_sample_loop_count@8 _AIL_sample_status@4 _AIL_sample_volume_pan@12 _AIL_allocate_3D_sample_handle@4 _AIL_release_3D_sample_handle@4 _AIL_start_3D_sample@4 _AIL_stop_3D_sample@4 _AIL_resume_3D_sample@4 _AIL_end_3D_sample@4 _AIL_set_3D_sample_file@8 _AIL_set_3D_sample_volume@8 _AIL_set_3D_sample_loop_count@8 _AIL_3D_sample_volume@4 _AIL_update_3D_position@8 _AIL_auto_update_3D_position@8 _AIL_3D_sample_status@4

speedtreert

?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ ?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ ?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z ?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z ?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z ?DeleteTransientData@CSpeedTreeRT@@QAEXXZ ?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ ?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z ??3CSpeedTreeRT@@SAXPAX@Z ??2CSpeedTreeRT@@SAPAXI@Z ??1CSpeedTreeRT@@QAE@XZ ??0CSpeedTreeRT@@QAE@XZ ??1STextures@CSpeedTreeRT@@QAE@XZ ??0STextures@CSpeedTreeRT@@QAE@XZ ??1SGeometry@CSpeedTreeRT@@QAE@XZ ??0SGeometry@CSpeedTreeRT@@QAE@XZ ?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ ?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z ?SetLightState@CSpeedTreeRT@@SAXI_N@Z ?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z ?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z ?SetTime@CSpeedTreeRT@@SAXM@Z ?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ ?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?GetLeafLightingAdjustment@CSpeedTreeRT@@QBEMXZ ?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ ?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z ?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z ?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z ?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z ?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z ?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z ?GetCurrentError@CSpeedTreeRT@@SAPBDXZ ?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z ?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ ?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z ?SetCamera@CSpeedTreeRT@@SAXPBM0@Z ?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z

dinput8

DirectInput8Create

ws2_32

gethostname gethostbyname ntohs ntohl inet_addr htons htonl WSACleanup WSAStartup WSAGetLastError socket __WSAFDIsSet closesocket connect ioctlsocket recv select send

ddraw

DirectDrawCreate

oleaut32

SysAllocString SafeArrayCreate SafeArrayDestroy SafeArrayAccessData VariantInit VariantClear SysFreeString

AmdPowerXpressRequestHighPerformance NvOptimusEnablement initAcce_AbsorbWindow initAcce_CombineWindow initArtefaktSystemWindow initAtlasWindow initAttachStoneDialog initAura_AbsorbWindow initAura_LevelUpWindow initBattlepassDialog initBeltInventoryWindow initBonus initBonusChanger initBuffNpcCreateWindow initBuffNpcRenameWindow initBuffNpcSelectSkillWindow initBuffNpcWindow initBuffNpcWindow_new initBuildGuildBuildingWindow initChangeGradeNameDialog initChangePasswordDialog initCharacterWindow initChatSettingWindow initChestDropInfoWindow initCollectWindow initCollectionsWindow initConnectingDialog initCostumeWindow initCreateCharacterWindow initCubeRenewalWindow initCubeResultWindow initCubeWindow initDeclareGuildWarDialog initDepoIsWindow initDopalaczeWindow initDragonSoulRefineWindow initDragonSoulWindow initDungeonInfoWindow initDungeonRankingWindow initEquipmentDialog initEventCalendar initExchangeDialog initExpandedMoneyTaskBar initExpandedTaskBar initExtendedInventoryWindow initFastEquip initFishingWindow initGameOptionDialog initGameOptionDialog_forMobile initGameWindow initGiftCodeWindow initGuildWindow initGuildWindow_BaseInfoPage initGuildWindow_BoardPage initGuildWindow_GradePage initGuildWindow_GuildInfoPage initGuildWindow_GuildInfoPage_Eu initGuildWindow_GuildInfoPage_Jp initGuildWindow_GuildSkillPage initGuildWindow_MemberPage initHelpWindow initHelpWindow2 initHorseShoe initIMEKOR initIkonki initInputDialog initInputDialogWithDescription initInputDialogWithDescription2 initInventoryWindow initInventoryWindowEx initItemShopEditorWindow initItemShopPopUpDialog initItemShopSelectAttributeDialog initItemShopSelectList initItemShopWindow initKeyChange_Window initLoadingWindow initLocationRenderMapDialog initLocationWindow initMallWindow initMapaSw initMarkListWindow initMarmur_Window initMessengerWindow initMiniGameRumiGamePage initMiniGameRumiWaitingPage initMiniGameWindow initMiniMap initMiniMapDungeonInfo initMoneyInputDialog initMount_Window initMouseButtonWindow initMoveChannelDialog initMusicListWindow initOdlamkiWindow initPartyMemberInfoBoard initPasswordDialog initPickEtcDialog initPickEtcDialog2 initPickMoneyDialog initPopUpDialog initPrivateShopBuilder initQuestDialog initQuestionDialog initQuestionDialog2 initQueueWindow initRefineDialog initRemoveItemDialog initRespDialog initRespMiniMapDialog initRespRenderMapDialog initRespRenderTargetDialog initRestartDialog initRightMouseButtonWindow initRuneWindow initSafeBoxWindow initSelectCharacterWindow initSelectEmpireWindow initSelectItemWindow initShopDialog initShopSearch initSkillChooseWindow initSkillPointResetDialog initStoneDetach initSystemDialog initSystemDialog_forMall initSystemDialog_forPortal initSystemOptionDialog initSystemsWindow initSystemsWindow_new initTaskBar initWarteSchleife initWebWindow initWeeklyRank initWhisperDialog initWonExchangeWindow init_Pety_script initacceptguildwardialog initmaintenance initmaintenanceadmin initprivateshopdecorationdialog initprivateshoppriceinputdialog initprivateshopsalehistorydialog initprivateshopsearchdialog initprivateshopsearchfilterdialog initprivateshopsearchfilterslot initprivateshopsearchwindow initprivateshopwindow

Name

.text

Size

6.5MB

Virtual Size

6.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

731KB

Virtual Size

730KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

528KB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

42KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

615KB

Virtual Size

614KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=43, id=264, version=35221,

count=48, id=259, version=33145,

count=218, id=261, version=33145,

count=60, id=261, productName=VS2019 v16.8.3 build 29335, version=29335,

count=2, id=28, version=9178,

count=2, id=25, version=9210,

count=1, id=29, version=9178,

count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=58, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,

count=1, id=48, version=9044,

count=2, id=203, productName=VS2012 UPD3 build 60610, version=60610,

count=5, id=261, productName=VS2019 v16.9.4 build 29914, version=29914,

count=2, id=257, productName=VS2015 [14.0] build 23026, version=23026,

count=1, id=253, version=35207,

count=26, id=259, version=35207,

count=18, id=260, version=35207,

count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=2, id=156, version=21202,

count=2, id=123, productName=VS2005 build 50727, version=50727,

count=100, id=261, version=35207,

count=147, id=260, version=35221,

count=45, id=260, version=33145,

count=25, id=257, version=33145,

count=656, id=1, productName=Unmarked objects,

count=322, id=261, version=35221,

count=1, id=256, version=35221,

count=1, id=255, version=35221,

count=1, id=151,

count=1, id=258, version=35221,