9c530db2fb1b7a7df3e46a86d826b9806827653f844555f366037610c902a8d0

Sharing

Copy URL Twitter E-mail

General

Target
9c530db2fb1b7a7df3e46a86d826b9806827653f844555f366037610c902a8d0
Size 4.5MB
Sample260730-t5em2adj6w
SHA256 9c530db2fb1b7a7df3e46a86d826b9806827653f844555f366037610c902a8d0
MD5 898676c360f228d7f9d466c89769bc54
SHA1 e6a73022c9bc79f15244d785372b0e8049fcbf82
SHA512 881ed308f922b384c60556894581e48fb7898bb50a6b572e7b74a3eba3f2a5e02ad167c35eb81ae1a9035680a7052210c94400110404a3363e0857b551eacb3e
SSDEEP 49152:wo6Kg6DAX132oIaoE////R/bvXuTUpceFwksnmc4mwzicL/VRPJJ5SgPgfDRc20d:L5AX13CCXuTUqeFwkhc4mYicLZd
TLSH
T135269E11B106D139E89260F299BE6EBF55DCAD20071814D3A3C83E6ED9B16F33E3615E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
9c530db2fb1b7a7df3e46a86d826b9806827653f844555f366037610c902a8d0

File Explorer

9c530db2fb1b7a7df3e46a86d826b9806827653f844555f366037610c902a8d0

.exe 4.5MB

9c530db2fb1b7a7df3e46a86d826b9806827653f844555f366037610c902a8d0

IMPHASH fc8a88555a93e8f7babcf388404286ca
SHA256 9c530db2fb1b7a7df3e46a86d826b9806827653f844555f366037610c902a8d0
MD5 898676c360f228d7f9d466c89769bc54
SHA1 e6a73022c9bc79f15244d785372b0e8049fcbf82
SHA512 881ed308f922b384c60556894581e48fb7898bb50a6b572e7b74a3eba3f2a5e02ad167c35eb81ae1a9035680a7052210c94400110404a3363e0857b551eacb3e
SSDEEP 49152:wo6Kg6DAX132oIaoE////R/bvXuTUpceFwksnmc4mwzicL/VRPJJ5SgPgfDRc20d:L5AX13CCXuTUqeFwkhc4mYicLZd
TLSH
T135269E11B106D139E89260F299BE6EBF55DCAD20071814D3A3C83E6ED9B16F33E3615E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

30:30:c2:89:91:cf:3b:eb:59:41:6b:0a:1b:16:71:f5:08:1a:93:22:a7:df:c3:88:88:93:7d:44:42:76:bd:75

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=ExGuard Development

Chains

Jul 15, 2026

CN=ExGuard Development

Subject

CN=ExGuard Development

Serial Number

7c:85:fa:03:50:72:3f:9b:4c:d2:6c:b7:78:d9:00:da

Issuer

CN=ExGuard Development

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 16, 2025 - Aug 16, 2030

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

2432883

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualProtect FlushInstructionCache GetCurrentThreadId CreateThread GetPrivateProfileStringA GetProcAddress GlobalFree DeleteFileA LoadLibraryA GetCurrentDirectoryA WriteConsoleW SetEndOfFile HeapQueryInformation HeapSize SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW SetStdHandle HeapReAlloc CreateProcessW GetExitCodeProcess GetTimeZoneInformation MoveFileExW DeleteFileW CreateDirectoryW GetFileAttributesExW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW FlushFileBuffers ReadConsoleW SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP HeapAlloc HeapFree lstrlenA MoveFileA CreateDirectoryA SetUnhandledExceptionFilter CreateProcessA WideCharToMultiByte GetLocalTime GetFileAttributesA CreateToolhelp32Snapshot Module32Next GetCurrentProcess GetTickCount GetCurrentDirectoryW MultiByteToWideChar GetFileSize ReadFile VerifyVersionInfoW GetCurrentProcessId VerSetConditionMask GlobalMemoryStatusEx GetStdHandle GetFileType GetLastError CreateFileMappingW OutputDebugStringA ExitThread GetModuleHandleExW LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InterlockedPushEntrySList RaiseException RtlUnwind GetModuleFileNameW WaitNamedPipeW PeekNamedPipe SetLastError GetStartupInfoW IsDebuggerPresent InitializeSListHead TerminateProcess UnhandledExceptionFilter CreateEventW ResetEvent InitializeCriticalSectionAndSpinCount GetCPInfo CompareStringEx GetSystemTimeAsFileTime SleepConditionVariableSRW SleepConditionVariableCS WakeAllConditionVariable WakeConditionVariable InitializeConditionVariable FlsFree FlsSetValue FlsGetValue FlsAlloc LCMapStringEx DecodePointer EncodePointer QueryPerformanceFrequency GetStringTypeW GetExitCodeThread WaitForSingleObjectEx TryEnterCriticalSection InitializeCriticalSectionEx AcquireSRWLockExclusive ReleaseSRWLockExclusive InitializeSRWLock CreateFileW IsProcessorFeaturePresent MapViewOfFile Module32First ReadProcessMemory EnterCriticalSection IsBadStringPtrA lstrcpynW lstrcpynA GetModuleHandleW GetModuleHandleA UnmapViewOfFile GetModuleFileNameA FindClose FindNextFileA FindFirstFileA SetFileAttributesA DeleteCriticalSection GetSystemInfo SetEvent Sleep WaitForSingleObject InitializeCriticalSection LeaveCriticalSection GetProcessHeap HeapValidate QueryPerformanceCounter ExitProcess ReleaseSemaphore GetLocaleInfoA CompareStringA lstrlenW GlobalLock GlobalUnlock FreeLibrary GetVersionExA GetSystemDirectoryA WriteFile CreateFileMappingA GlobalAlloc CloseHandle CreateFileA FreeLibraryAndExitThread DeviceIoControl

user32

DefWindowProcW UnregisterClassW RegisterClassExW CreateWindowExW GetWindowLongW SetWindowLongW LoadCursorW LoadImageW LoadStringA MoveWindow CreateWindowExA SetFocus GetClientRect UnregisterClassA RegisterClassExA UpdateWindow LoadImageA DestroyIcon FlashWindowEx EnumDisplayDevicesA MessageBoxA IsIconic GetSystemMetrics GetCapture ChangeDisplaySettingsA IsWindow DefWindowProcA SetCapture ReleaseCapture SetCursorPos DestroyCursor SetCursor ShowCursor GetKeyState SetWindowPos ScreenToClient SendMessageA LoadIconA SystemParametersInfoA PostQuitMessage FindWindowA GetCursorPos GetDC FillRect GetAsyncKeyState OffsetRect ClientToScreen PeekMessageA SetRect InvalidateRect RegisterClassA GetMenu AdjustWindowRectEx GetWindowLongA SetWindowLongA LoadCursorA GetMessageA DispatchMessageA GetKeyboardLayoutNameA GetKeyboardLayout OpenClipboard CloseClipboard GetClipboardData CharNextW CharNextExA CharPrevExA MonitorFromPoint GetMonitorInfoA ReleaseDC BeginPaint EndPaint DestroyWindow ShowWindow TranslateMessage

gdi32

GetTextExtentPoint32A GetObjectW SelectObject GetStockObject DeleteDC CreateCompatibleDC BitBlt StretchBlt DeleteObject CreateSolidBrush EnumFontFamiliesExA SetBkColor SetBkMode SetTextColor CreateDIBSection TextOutA CreateFontIndirectA GetCharABCWidthsFloatW GetTextExtentPoint32W TextOutW GetDeviceCaps GetPixel

advapi32

CryptAcquireContextA RegCreateKeyExW RegSetValueExW RegOpenKeyA CryptAcquireContextW RegQueryValueExA CryptCreateHash CryptHashData CryptDestroyHash CryptGetHashParam CryptReleaseContext RegCloseKey RegOpenKeyExW RegQueryValueExW RegOpenKeyExA CryptGenRandom

shell32

SHGetSpecialFolderPathA SetCurrentProcessExplicitAppUserModelID

ole32

CoInitialize CoUninitialize CoInitializeEx CoCreateInstance

winmm

timeGetTime timeGetDevCaps timeEndPeriod timeBeginPeriod

d3d8

Direct3DCreate8

python27

PyInt_AsSsize_t _PyString_Eq PyDict_GetItem PyErr_SetNone PyErr_Restore PyErr_GivenExceptionMatches PyErr_Format PyEval_GetBuiltins PyEval_MergeCompilerFlags PyObject_GetItem PyObject_SetItem PyObject_GetIter PyNumber_Add PyNumber_Index PyNumber_InPlaceAdd PySequence_GetSlice PySequence_Contains PyObject_IsInstance PyClass_Type PyUnicode_Type PyFloat_Type PyExc_UnboundLocalError PyExc_ZeroDivisionError PyFloat_FromString PyFile_WriteObject PyFile_SoftSpace PyFile_WriteString PySys_GetObject PyObject_Size PyNumber_Subtract PyNumber_Multiply PyNumber_Divide PyNumber_Negative PyNumber_Absolute PyTuple_Size PyDict_GetItemString PyArg_ParseTuple Py_IsInitialized PyObject_HasAttrString PyInt_FromLong PyImport_ImportModule PyErr_Occurred PyObject_CallFunction PyObject_GetAttrString PyErr_Clear PyUnicodeUCS2_Compare Py_IncRef PyDict_Size PyDict_Next PyTuple_New PyImport_GetModuleDict PyTuple_SetItem PyExc_SystemError PyModule_AddStringConstant PyString_InternFromString PyObject_GetAttr PyLong_AsLongLong PyLong_AsUnsignedLongLong PyFloat_AsDouble PyErr_BadArgument PyErr_Print PyObject_CallObject PyNumber_Check _Py_NoneStruct PyDict_SetItemString PyModule_GetDict PyErr_Fetch Py_SetProgramName Py_Initialize Py_Finalize PyRun_StringFlags PyImport_AddModule PyEval_EvalCode PyCode_Type PyUnicodeUCS2_DecodeUTF8 PyFloat_FromDouble PyString_FromStringAndSize PyDict_New PyDict_SetItem PyErr_NoMemory PyCode_New PyExc_StopIteration PyExc_ValueError PyUnicodeUCS2_AsUTF8String PyType_IsSubtype PyExc_AssertionError PyExc_BaseException PyTraceBack_Type PyList_Type PyTuple_Type PyString_Type PyExc_NameError PyExc_ImportError PyFrame_New PyNumber_Remainder PyObject_CallFunctionObjArgs PyObject_Call Py_GetVersion PyOS_snprintf PyErr_NormalizeException PyErr_ExceptionMatches PyErr_SetObject PyErr_WarnEx PyTraceBack_Here PyMethod_New PyCFunction_Call PyTuple_Pack PyString_FromFormat PyObject_GC_Del PyObject_GC_UnTrack PyObject_GC_Track _PyObject_GC_New PyObject_ClearWeakRefs PyObject_IsTrue PyObject_SetAttr PyObject_SetAttrString PyObject_RichCompare PyType_Ready PyMem_Free PyMem_Realloc PyMem_Malloc PyExc_TypeError _Py_TrueStruct _Py_ZeroStruct PyLong_AsLong PyList_Append PyList_New PyTuple_GetItem PyString_FromString PyModule_AddIntConstant PyInt_AsLong PyString_AsString PyErr_SetString PyFrame_GetLineNumber PyExc_RuntimeError _PyThreadState_Current Py_BuildValue PyInt_FromSsize_t PyCallable_Check Py_InitModule4

iphlpapi

GetBestInterface GetAdaptersInfo

imm32

ImmGetOpenStatus ImmSetConversionStatus ImmGetConversionStatus ImmGetCandidateListW ImmSetCompositionStringW ImmGetCompositionStringW ImmAssociateContext ImmReleaseContext ImmGetContext ImmIsIME ImmGetIMEFileNameA ImmNotifyIME

devil

ilDeleteImages ilInit ilSave ilSetPixels ilTexImage ilGenImages ilLoad ilCopyPixels ilGetInteger ilBindImage ilShutDown ilOriginFunc ilConvertImage ilEnable

libcef

cef_run_message_loop cef_shutdown cef_initialize cef_execute_process cef_register_extension cef_string_list_free cef_string_list_alloc cef_string_userfree_utf16_free cef_string_utf16_set cef_api_hash cef_log cef_v8context_get_current_context cef_browser_host_create_browser cef_string_utf16_clear cef_string_utf8_to_utf16 cef_string_utf16_cmp cef_string_utf16_to_utf8 cef_string_utf8_clear cef_string_multimap_free cef_string_multimap_alloc cef_string_multimap_append cef_string_multimap_value cef_string_multimap_key cef_string_multimap_size cef_string_map_append cef_string_map_value cef_string_map_key cef_string_map_size cef_string_list_append cef_string_list_value cef_string_list_size cef_command_line_get_global cef_string_map_free cef_string_map_alloc

winhttp

WinHttpReceiveResponse WinHttpOpen WinHttpQueryDataAvailable WinHttpConnect WinHttpSetTimeouts WinHttpSendRequest WinHttpCloseHandle WinHttpSetOption WinHttpOpenRequest WinHttpReadData WinHttpQueryHeaders

libconfig++

?getRoot@Config@libconfig@@QBEAAVSetting@2@XZ ?writeFile@Config@libconfig@@QAEXPBD@Z ?readFile@Config@libconfig@@QAEXPBD@Z ??1Config@libconfig@@UAE@XZ ??0Config@libconfig@@QAE@XZ ?getPath@SettingException@libconfig@@QBEPBDXZ ?getLength@Setting@libconfig@@QBEHXZ ?add@Setting@libconfig@@QAEAAV12@PBDW4Type@12@@Z ?add@Setting@libconfig@@QAEAAV12@W4Type@12@@Z ?lookupValue@Setting@libconfig@@QBE_NPBDAA_J@Z ?lookupValue@Setting@libconfig@@QBE_NPBDAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??4Setting@libconfig@@QAEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??4Setting@libconfig@@QAEAAV01@PBD@Z ??4Setting@libconfig@@QAEAAV01@AB_J@Z ??ASetting@libconfig@@QBEAAV01@H@Z ??ASetting@libconfig@@QBEAAV01@PBD@Z

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

granny2

_GrannySetControlEaseOut@8 _GrannySetControlEaseInCurve@28 _GrannySetControlEaseIn@8 _GrannyGetControlLocalDuration@4 _GrannySetControlSpeed@8 _GrannyGetControlSpeed@4 _GrannySetControlLoopCount@8 _GrannyGetControlLoopCount@4 _GrannyFreeControlIfComplete@4 _GrannyControlIsComplete@4 _GrannyPlayControlledAnimation@12 _GrannyCompleteControlAt@8 _GrannyFreeControlOnceUnused@4 _GrannyFreeControl@4 _GrannyFindTrackGroupForModel@12 _GrannyGetSourceModel@4 _GrannySetControlEaseOutCurve@28 _GrannyGetMeshIndexCount@4 _GrannyMeshIsRigid@4 _GrannyGetMaterialTextureByType@8 _GrannyFindMatchingMember@16 _GrannyConvertSingleObject@20 _GrannyReadEntireFileFromMemory@8 _GrannyFreeFileSection@8 _GrannyFreeFile@4 _GrannyGetMeshVertexCount@4 _GrannyGetTotalTypeSize@4 _GrannyGetWorldPoseComposite4x4@8 _GrannyGetControlRawLocalClock@4 _GrannyFreeWorldPose@4 _GrannyNewWorldPose@4 _GrannyFindBoneByName@12 _GrannyGetMeshBindingToBoneIndices@4 _GrannyFreeMeshBinding@4 _GrannyNewMeshBinding@12 _GrannyFreeModelInstance@4 _GrannyInstantiateModel@4 _GrannyGetFileInfo@4 _GrannyBeginControlledAnimation@8 _GrannyEndControlledAnimation@4 _GrannySetTrackGroupTarget@12 _GrannySetTrackGroupLOD@16 _GrannyGetMeshTriangleGroupCount@4 _GrannyGetMeshTriangleGroups@4 _GrannyGetMeshVertexType@4 _GrannyCopyMeshVertices@12 _GrannyGetMeshVertices@4 _GrannyCopyMeshIndices@12 _GrannyNewMeshDeformer@16 _GrannyFreeMeshDeformer@4 _GrannyGetWorldPoseComposite4x4Array@4 _GrannyDeformVertices@24 GrannyPNT332VertexType _GrannyFreeLocalPose@4 _GrannyNewLocalPose@4 _GrannyUpdateModelMatrix@20 _GrannySampleModelAnimationsAccelerated@20 _GrannyFreeCompletedModelControls@4 _GrannyGetWorldPose4x4@8 _GrannySetControlRawLocalClock@8 _GrannyGetSourceSkeleton@4 _GrannySetModelClock@8

mss32

_AIL_auto_update_3D_position@8 _AIL_file_read@8 _AIL_set_file_callbacks@16 _AIL_WAV_info@8 _AIL_decompress_ASI@24 _AIL_decompress_ADPCM@12 _AIL_file_type@8 _AIL_open_digital_driver@16 _AIL_open_stream@12 _AIL_close_digital_driver@4 _AIL_enumerate_3D_providers@12 _AIL_open_3D_provider@4 _AIL_3D_sample_volume@4 _AIL_close_3D_provider@4 _AIL_open_3D_listener@4 _AIL_close_3D_listener@4 _AIL_set_3D_position@16 _AIL_set_3D_velocity@20 _AIL_set_3D_orientation@28 _AIL_startup@0 _AIL_shutdown@0 _AIL_set_redist_directory@4 _AIL_close_stream@4 _AIL_start_stream@4 _AIL_pause_stream@8 _AIL_set_stream_volume_levels@12 _AIL_stream_volume_levels@12 _AIL_set_stream_loop_count@8 _AIL_stream_status@4 _AIL_last_error@0 _AIL_allocate_sample_handle@4 _AIL_release_sample_handle@4 _AIL_init_sample@4 _AIL_set_sample_file@12 _AIL_start_sample@4 _AIL_stop_sample@4 _AIL_resume_sample@4 _AIL_end_sample@4 _AIL_set_sample_volume_pan@12 _AIL_set_sample_loop_count@8 _AIL_sample_status@4 _AIL_sample_volume_pan@12 _AIL_allocate_3D_sample_handle@4 _AIL_release_3D_sample_handle@4 _AIL_start_3D_sample@4 _AIL_stop_3D_sample@4 _AIL_resume_3D_sample@4 _AIL_end_3D_sample@4 _AIL_set_3D_sample_file@8 _AIL_set_3D_sample_volume@8 _AIL_set_3D_sample_loop_count@8 _AIL_3D_sample_status@4 _AIL_mem_free_lock@4

speedtreert

?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z ?SetLightState@CSpeedTreeRT@@SAXI_N@Z ?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z ?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z ?SetTime@CSpeedTreeRT@@SAXM@Z ??2CSpeedTreeRT@@SAPAXI@Z ??3CSpeedTreeRT@@SAXPAX@Z ?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z ?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ ?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z ?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z ?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z ?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ ?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ ?SetCamera@CSpeedTreeRT@@SAXPBM0@Z ?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ ?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z ?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z ?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z ?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ ?SetLodLevel@CSpeedTreeRT@@QAEXM@Z ?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z ?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z ?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ ?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z ?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z ?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z ?GetCurrentError@CSpeedTreeRT@@SAPBDXZ ?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z ?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ ?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z ??0SGeometry@CSpeedTreeRT@@QAE@XZ ??1SGeometry@CSpeedTreeRT@@QAE@XZ ??0STextures@CSpeedTreeRT@@QAE@XZ ??1STextures@CSpeedTreeRT@@QAE@XZ ??0CSpeedTreeRT@@QAE@XZ ?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ ?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z ??1CSpeedTreeRT@@QAE@XZ

dinput8

DirectInput8Create

ws2_32

sendto gethostbyname htons WSACleanup WSAStartup WSAGetLastError socket send select recv ioctlsocket connect closesocket __WSAFDIsSet inet_addr

ddraw

DirectDrawCreate

oleaut32

VariantClear SysFreeString

Name

.text

Size

3.4MB

Virtual Size

3.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

559KB

Virtual Size

558KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

194KB

Virtual Size

708KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

138KB

Virtual Size

137KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

197KB

Virtual Size

196KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=43, id=224, productName=VS2013 build 21005, version=21005,

count=55, id=259, version=33145,

count=223, id=261, version=33145,

count=4, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=57, id=261, productName=VS2019 v16.11.1 build 30133, version=30133,

count=1, id=262, version=33145,

count=1, id=48, version=9044,

count=4, id=260, version=30153,

count=2, id=257, productName=VS2019 v16.7.5 build 29112, version=29112,

count=117, id=261, productName=VS2019 v16.4.4 build 28316, version=28316,

count=60, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,

count=2, id=253, version=28518,

count=20, id=260, version=30034,

count=29, id=259, version=30034,

count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=99, id=261, version=30034,

count=5, id=28, version=9178,

count=76, id=29, version=9178,

count=1, id=18, version=8444,

count=10, productName=Unmarked objects (old),

count=4, id=25, version=9210,

count=217, id=261, version=30159,

count=37, id=260, version=33145,

count=29, id=257, version=33145,

count=835, id=1, productName=Unmarked objects,

count=2, id=261, version=35222,

count=123, id=265, version=30159,

count=1, id=256, version=30159,

count=1, id=255, version=30159,

count=1, id=151,

count=1, id=258, version=30159,