a322c123626e7ea9f96ba60b8fe802a91da1f634365d57273a6f69c018ac79a3

Sharing

Copy URL Twitter E-mail

General

Target
a322c123626e7ea9f96ba60b8fe802a91da1f634365d57273a6f69c018ac79a3
Size 3.4MB
Sample260809-ffhfqs1akg
SHA256 a322c123626e7ea9f96ba60b8fe802a91da1f634365d57273a6f69c018ac79a3
MD5 74777b2d365eba919a495f02c991e544
SHA1 76b8f5cbba818e535ca35771e31be85171347919
SHA512 03805e1f5170ccd635512bd3ccfc07adb43b9c523ae7bc1a7c32637e932737981875b35776b51f8b8ae23f1d8f4e0d14aef7426e5dc845ad9d948cbcde5b6947
SSDEEP 49152:Ra+SkRHoCfnUP/qIodQpQqXmLlXKHaytq1mkXVmy/aY4fIR3KiohBFjnchLP0cHZ:JSkRHoCvbIXpQqXmLlotqB1atfGo
TLSH
T125F57D10BB45C222EA7706B49D7D7B5E002DBDA0173965CBE3D42F1E1E61AC25E3362B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a322c123626e7ea9f96ba60b8fe802a91da1f634365d57273a6f69c018ac79a3

File Explorer

a322c123626e7ea9f96ba60b8fe802a91da1f634365d57273a6f69c018ac79a3

.exe 3.4MB

a322c123626e7ea9f96ba60b8fe802a91da1f634365d57273a6f69c018ac79a3

IMPHASH c11f3581896fbcdc9f828d7459b39d5d
SHA256 a322c123626e7ea9f96ba60b8fe802a91da1f634365d57273a6f69c018ac79a3
MD5 74777b2d365eba919a495f02c991e544
SHA1 76b8f5cbba818e535ca35771e31be85171347919
SHA512 03805e1f5170ccd635512bd3ccfc07adb43b9c523ae7bc1a7c32637e932737981875b35776b51f8b8ae23f1d8f4e0d14aef7426e5dc845ad9d948cbcde5b6947
SSDEEP 49152:Ra+SkRHoCfnUP/qIodQpQqXmLlXKHaytq1mkXVmy/aY4fIR3KiohBFjnchLP0cHZ:JSkRHoCvbIXpQqXmLlotqB1atfGo
TLSH
T125F57D10BB45C222EA7706B49D7D7B5E002DBDA0173965CBE3D42F1E1E61AC25E3362B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1969148

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

I:\build\trunk_cn_9.0\simulator\bin\dnplayer.pdb

cximagecrt

?Draw@CxImage@@QAEHPAUHDC__@@ABUtagRECT@@PAU3@_N3@Z ?AlphaCopy@CxImage@@QAE_NAAV1@@Z ?Resample2@CxImage@@QAE_NHHW4InterpolationMethod@1@W4OverflowMethod@1@QAV1@_N@Z ?Crop@CxImage@@QAE_NABUtagRECT@@PAV1@@Z ??0CxImage@@QAE@I@Z ?GetWidth@CxImage@@QBEIXZ ?Load@CxImage@@QAE_NPB_WI@Z ?SwapRGB2BGR@CxImage@@QAEXXZ ?CreateFromArray@CxImage@@QAE_NPAEIIII_N@Z ?GetHeight@CxImage@@QBEIXZ

libvlc

libvlc_media_get_state libvlc_media_new_path libvlc_media_player_get_time libvlc_media_player_new_from_media libvlc_media_player_pause libvlc_media_player_play libvlc_media_player_release libvlc_media_player_set_hwnd libvlc_media_player_stop libvlc_media_release libvlc_new libvlc_release libvlc_video_get_size libvlc_video_set_aspect_ratio

kernel32

EnterCriticalSection LoadLibraryExW InitializeCriticalSectionAndSpinCount DeleteCriticalSection DecodePointer lstrcpyW FileTimeToLocalFileTime FileTimeToSystemTime VirtualFree VirtualAlloc InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead OutputDebugStringW RaiseException LeaveCriticalSection HeapFree HeapAlloc GetProcessHeap OpenMutexW SetThreadExecutionState GetDriveTypeW GetLogicalDriveStringsW SetLastError DeviceIoControl GetVolumeInformationW GetDiskFreeSpaceExW Module32NextW Process32NextW CreateToolhelp32Snapshot CreateMutexW IsDebuggerPresent GetCurrentProcess GetCurrentProcessId GetCurrentThreadId FreeLibrary InterlockedDecrement InterlockedIncrement GlobalMemoryStatusEx lstrcmpiW GetLocalTime GetModuleFileNameW FreeResource LockResource SizeofResource LoadResource FindResourceW MultiByteToWideChar LoadLibraryW FindClose FindNextFileW FindFirstFileW lstrcmpW WideCharToMultiByte CreateFileW WriteFile GetTimeZoneInformation GetModuleHandleW GetProcAddress Sleep GetPrivateProfileStringA MapViewOfFile OpenFileMappingW CreateFileMappingW GetTickCount ReadFile CloseHandle LocalFree CreateProcessW GetStartupInfoW CreatePipe WritePrivateProfileStringW GetPrivateProfileStringW GetLastError GetVersionExW ExitProcess GetFileSize GlobalAlloc GlobalLock GlobalUnlock MulDiv InitializeCriticalSection WaitForSingleObject CreateThread GetExitCodeProcess OpenProcess lstrlenA GetSystemTimeAsFileTime QueryPerformanceCounter IsProcessorFeaturePresent EncodePointer K32GetModuleFileNameExW K32EnumProcessModules FlushInstructionCache GetSystemInfo TerminateThread RemoveDirectoryW DeleteFileW CopyFileW MoveFileExW UnmapViewOfFile GetFileSizeEx GetSystemPowerStatus SetFilePointer GlobalFree lstrcpynW GetFileAttributesW SetEvent OpenEventW CreateEventW GetWindowsDirectoryW Process32FirstW lstrlenW

user32

GetClientRect ShowWindow ClientToScreen GetCursorPos UnregisterHotKey RegisterHotKey GetKeyState PtInRect ScreenToClient MapVirtualKeyW CreateWindowExW wsprintfW SendMessageW FindWindowExW GetSystemMetrics EnumDisplaySettingsW KillTimer MessageBoxA DestroyWindow GetDC ReleaseDC IsIconic SetForegroundWindow SwitchToThisWindow SetWindowPos BringWindowToTop SetCursor LoadCursorW SystemParametersInfoW IsWindowVisible PostQuitMessage GetWindowRect MonitorFromWindow GetMonitorInfoW EnableWindow MoveWindow GetDesktopWindow SetTimer PostMessageW SetWindowRgn wvsprintfW UnionRect GetMessageW TranslateMessage DispatchMessageW GetActiveWindow GetFocus BeginPaint EndPaint GetUpdateRect InvalidateRect MapWindowPoints IntersectRect IsRectEmpty GetWindow CallWindowProcW RegisterClassW RegisterClassExW GetClassInfoExW GetMenu SetPropW GetPropW AdjustWindowRectEx GetWindowTextW GetWindowTextLengthW GetCaretBlinkTime GetCaretPos CharPrevW DrawTextW FillRect SetRect CreateAcceleratorTableW InvalidateRgn GetGUIThreadInfo CreateCaret HideCaret ShowCaret SetCaretPos GetSysColor GetWindowThreadProcessId GetClassNameW EnumWindows OpenClipboard GetClipboardData CloseClipboard EmptyClipboard SetClipboardData ExitWindowsEx FindWindowW RedrawWindow IsChild GetDlgItem DestroyAcceleratorTable RegisterWindowMessageW GetParent LoadImageW UnregisterClassW CharNextW GetWindowDC SetWindowLongW SetWindowPlacement GetWindowPlacement CopyRect DefWindowProcW SetWindowTextW IsZoomed GetWindowLongW GetDoubleClickTime SetFocus ReleaseCapture EndDeferWindowPos DeferWindowPos BeginDeferWindowPos GetCapture SetCapture OffsetRect IsWindow MessageBoxW

gdi32

Rectangle RestoreDC SaveDC GetTextMetricsW GetObjectW SetWindowOrgEx GetObjectA CreateRoundRectRgn CreateSolidBrush SetBkMode SetTextColor CombineRgn CreatePenIndirect CreateRectRgnIndirect GetCharABCWidthsW GetClipBox GetStockObject LineTo RoundRect SelectClipRgn ExtSelectClipRgn SetBkColor StretchBlt SetStretchBltMode CreateDIBSection MoveToEx TextOutW ExtTextOutW GdiFlush GetDeviceCaps CreatePen GetTextExtentPoint32W CreateFontIndirectW ChoosePixelFormat SetPixelFormat CreateCompatibleDC CreateCompatibleBitmap SelectObject BitBlt GetDIBits DeleteDC DeleteObject CreatePatternBrush

advapi32

RegOpenKeyExA LookupPrivilegeValueW AdjustTokenPrivileges RegDeleteValueW RegDeleteKeyW RegQueryValueExA RegOpenKeyW RegSetValueExW RegCreateKeyExW RegEnumKeyExW RegQueryInfoKeyW RegOpenKeyExW SetSecurityDescriptorDacl InitializeSecurityDescriptor RegCloseKey RegQueryValueExW RegCreateKeyW DuplicateTokenEx OpenProcessToken

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFolderPathW ord165 DragFinish DragQueryFileW ShellExecuteExW SHGetMalloc DragAcceptFiles SHGetSpecialFolderLocation Shell_NotifyIconW SHGetDesktopFolder ShellExecuteW

ole32

CoTaskMemAlloc CoTaskMemRealloc CLSIDFromProgID CoInitialize CreateStreamOnHGlobal CLSIDFromString CoGetClassObject StringFromGUID2 CoCreateGuid OleLockRunning OleUninitialize CoInitializeSecurity OleInitialize CoInitializeEx CoSetProxyBlanket CoUninitialize CoTaskMemFree CreateBindCtx CoCreateInstance

oleaut32

VarUI4FromStr SysAllocStringLen SysAllocString SysFreeString VariantClear SysStringLen LoadTypeLi LoadRegTypeLi OleCreateFontIndirect VariantInit

ws2_32

WSAStartup

msvcp120

??_7_Facet_base@std@@6B@ ?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z ?_Init@locale@std@@CAPAV_Locimp@12@_N@Z ?tolower@?$ctype@_W@std@@QBE_W_W@Z ?is@?$ctype@_W@std@@QBE_NF_W@Z _Wcsxfrm ?_Incref@facet@locale@std@@UAEXXZ ?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ??1_Locinfo@std@@QAE@XZ ??1_Lockit@std@@QAE@XZ ??0_Locinfo@std@@QAE@PBD@Z ??0_Lockit@std@@QAE@H@Z ??1facet@locale@std@@MAE@XZ ??_7facet@locale@std@@6B@ ??0facet@locale@std@@IAE@I@Z ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ?id@?$ctype@_W@std@@2V0locale@2@A ?_Orphan_all@_Container_base0@std@@QAEXXZ ?id@?$collate@_W@std@@2V0locale@2@A _Wcscoll ?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ ?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z ?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z ?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z ?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?id@?$codecvt@DDH@std@@2V0locale@2@A ?always_noconv@codecvt_base@std@@QBE_NXZ ?_BADOFF@std@@3_JB ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z ?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ ??Bios_base@std@@QBE_NXZ ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?_Syserror_map@std@@YAPBDH@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z ?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z ?_Throw_C_error@std@@YAXH@Z _Mtx_init _Mtx_lock _Mtx_unlock _Cnd_init _Cnd_wait _Cnd_broadcast _Cnd_destroy _Mtx_destroy _Cnd_register_at_thread_exit _Cnd_unregister_at_thread_exit ?_Future_error_map@std@@YAPBDH@Z ?_Throw_future_error@std@@YAXABVerror_code@1@@Z ?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z ?_Xinvalid_argument@std@@YAXPBD@Z ?_Stat@sys@tr2@std@@YA?AW4file_type@123@PB_WAAH@Z ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z ?width@ios_base@std@@QAE_J_J@Z ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ?flags@ios_base@std@@QBEHXZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?uncaught_exception@std@@YA_NXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ?width@ios_base@std@@QBE_JXZ ?_Open_dir@sys@tr2@std@@YAPAXAAY0BAE@_WPB_WAAHAAW4file_type@123@@Z ?_Close_dir@sys@tr2@std@@YAXPAX@Z ?_Read_dir@sys@tr2@std@@YAPA_WAAY0BAE@_WPAXAAW4file_type@123@@Z ?_File_size@sys@tr2@std@@YA_KPB_W@Z ?_Copy_file@sys@tr2@std@@YAHPB_W0_N@Z ?_Winerror_map@std@@YAPBDH@Z ?_Unlink@sys@tr2@std@@YAHPB_W@Z ?_Rename@sys@tr2@std@@YAHPB_W0@Z ?_Remove_dir@sys@tr2@std@@YA_NPB_W@Z _Xtime_get_ticks ?getloc@ios_base@std@@QBE?AVlocale@2@XZ ?_Gettrue@_Locinfo@std@@QBEPBDXZ ?_Getfalse@_Locinfo@std@@QBEPBDXZ ?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ ?id@?$numpunct@D@std@@2V0locale@2@A ?widen@?$ctype@D@std@@QBEPBDPBD0PAD@Z ?widen@?$ctype@D@std@@QBEDD@Z ?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?id@?$ctype@D@std@@2V0locale@2@A ??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?_Xbad_function_call@std@@YAXXZ ?_Xout_of_range@std@@YAXPBD@Z ?_Xlength_error@std@@YAXPBD@Z ?_Xbad_alloc@std@@YAXXZ ?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z ?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z ?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ ??0_Pad@std@@QAE@XZ ?_Release@_Pad@std@@QAEXXZ ??1_Pad@std@@QAE@XZ ?_Launch@_Pad@std@@QAEXPAU_Thrd_imp_t@@@Z _Thrd_equal _Thrd_current ?_Throw_Cpp_error@std@@YAXH@Z _Mtx_current_owns _Cnd_timedwait _Thrd_join ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ?_Make_dir@sys@tr2@std@@YAHPB_W@Z ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z ??Bid@locale@std@@QAEIXZ

gdiplus

GdipImageGetFrameDimensionsCount GdipGetImageHeight GdipGetImageWidth GdipGetFamily GdipImageGetFrameDimensionsList GdipCreateFontFromLogfontA GdipDrawString GdipDeleteFontFamily GdipDrawImageRectI GdipDrawImage GdipImageGetFrameCount GdipImageSelectActiveFrame GdipGetPropertyItemSize GdipDeleteFont GdipGetPropertyItem GdipDrawPath GdipAddPathLine GdipDeletePath GdipCreateFontFromDC GdipCreatePath GdipDrawEllipseI GdiplusShutdown GdipSetSmoothingMode GdipSetPenDashStyle GdipDeletePen GdipCreatePen1 GdipDeleteGraphics GdipCreateFromHDC GdipLoadImageFromStream GdipSetStringFormatLineAlign GdipSetStringFormatAlign GdipGraphicsClear GdipAlloc GdipFree GdiplusStartup GdipDeleteStringFormat GdipCloneBrush GdipDeleteBrush GdipCreateLineBrushI GdipCloneImage GdipDisposeImage GdipGetImageGraphicsContext GdipCreateBitmapFromScan0 GdipSetCompositingQuality GdipSetPixelOffsetMode GdipSetTextRenderingHint GdipSetInterpolationMode GdipCreateStringFormat

shlwapi

StrCmpLogicalW PathFileExistsW

dnplycore

uninitVbox createVBoxClient initVbox

libcurl

curl_global_init curl_global_cleanup curl_easy_init curl_easy_setopt curl_easy_perform curl_easy_strerror curl_easy_cleanup curl_slist_append

msvcr120

free mbstowcs_s wcstoul swprintf_s iswdigit wcstol realloc malloc swscanf_s strchr ??0exception@std@@QAE@ABV01@@Z ??0bad_cast@std@@QAE@ABV01@@Z ??1bad_cast@std@@UAE@XZ ??0bad_cast@std@@QAE@PBD@Z sprintf_s fclose fwrite fputc fflush setvbuf fgetpos _fseeki64 fsetpos memcpy_s ungetc fgetc _unlock_file _lock_file ??_V@YAXPAX@Z longjmp _wtoi memchr ?Alloc@Concurrency@@YAPAXI@Z ?Free@Concurrency@@YAXPAX@Z ?_RunAndWait@_TaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z ?_GetCurrentInlineDepth@_StackGuard@details@Concurrency@@CAAAIXZ ?_Schedule@_TaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z ?_Cancel@_TaskCollection@details@Concurrency@@QAEXXZ _setjmp3 ?set@event@Concurrency@@QAEXXZ ?what@exception@std@@UBEPBDXZ ??1exception@std@@UAE@XZ ??0exception@std@@QAE@ABQBDH@Z ??0event@Concurrency@@QAE@XZ ??1event@Concurrency@@QAE@XZ ??0critical_section@Concurrency@@QAE@XZ ??1critical_section@Concurrency@@QAE@XZ ??0scoped_lock@critical_section@Concurrency@@QAE@AAV12@@Z ??1scoped_lock@critical_section@Concurrency@@QAE@XZ ?wait@event@Concurrency@@QAEII@Z ?_NewCollection@_AsyncTaskCollection@details@Concurrency@@SAPAV123@PAV_CancellationTokenState@23@@Z ?_ScheduleTask@_CurrentScheduler@details@Concurrency@@SAXP6AXPAX@Z0@Z ?_Oversubscribe@_Context@details@Concurrency@@SAX_N@Z ?__ExceptionPtrCopy@@YAXPAXPBX@Z ?__ExceptionPtrDestroy@@YAXPAX@Z ?_ReportUnobservedException@details@Concurrency@@YAXXZ ?__ExceptionPtrCurrentException@@YAXPAX@Z ?__ExceptionPtrCreate@@YAXPAX@Z ?__ExceptionPtrToBool@@YA_NPBX@Z ?__ExceptionPtrAssign@@YAXPAXPBX@Z ?__ExceptionPtrCopyException@@YAXPAXPBX1@Z rand wcsncpy_s ?terminate@@YAXXZ atoi _errno srand _time64 round _gmtime64_s vswprintf_s ??0exception@std@@QAE@ABQBD@Z sscanf ??8type_info@@QBE_NABV0@@Z strtol sprintf ?_wopen@@YAHPB_WHH@Z _write _close _strnicmp wcstod fopen strcpy_s strncmp _swprintf _waccess atof localeconv strcspn wcschr _vswprintf _wcsicmp wcsstr _recalloc memset _CxxThrowException __CxxFrameHandler3 memcpy wcsncpy wcsrchr _wcslwr _vsnwprintf isdigit isalnum toupper _itow _wtof iswalnum wcsncmp wcscpy_s _wcsnicmp getchar tolower _vswprintf_c_l _beginthreadex vsprintf_s _wfopen fseek ftell fread strncpy _wcserror getenv _lock _unlock _calloc_crt __dllonexit _onexit ??1type_info@@UAE@XZ _crt_debugger_hook __crtUnhandledException __crtTerminateProcess _XcptFilter __crtGetShowWindowMode _amsg_exit __wgetmainargs __set_app_type exit _exit _cexit _configthreadlocale __setusermatherr _initterm_e _initterm _wcmdln _fmode _commode _except1 _except_handler4_common __crtSetUnhandledExceptionFilter _invoke_watson _controlfp_s memmove ??2@YAPAXI@Z _purecall ??3@YAXPAX@Z calloc ?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ

opengl32

wglMakeCurrent glGetString wglDeleteContext wglCreateContext

comctl32

_TrackMouseEvent ord17

imm32

ImmSetCompositionWindow ImmGetVirtualKey ImmGetContext ImmReleaseContext ImmSetCompositionFontW

wininet

HttpSendRequestW HttpOpenRequestW HttpQueryInfoW InternetCloseHandle InternetConnectW InternetCrackUrlW InternetReadFile InternetOpenW

msi

ord173 ord217

comdlg32

GetOpenFileNameW

generic

count=2, id=199, version=41118,

count=11, id=223, productName=VS2013 build 21005, version=21005,

count=21, id=224, productName=VS2013 build 21005, version=21005,

count=1, id=224, productName=VS2013 UPD5 build 40629, version=40629,

count=35, id=225, productName=VS2013 UPD5 build 40629, version=40629,

count=8, id=225, version=20806,

count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=4, id=221, productName=VS2013 build 21005, version=21005,

count=12, id=225, productName=VS2013 build 21005, version=21005,

count=17, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=36, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=16, productName=Unmarked objects (old),

count=7, id=221, productName=VS2013 UPD5 build 40629, version=40629,

count=831, id=1, productName=Unmarked objects,

count=218, id=229, version=40629,

count=1, id=220, productName=VS2013 UPD5 build 40629, version=40629,

count=1, id=219, productName=VS2013 build 21005, version=21005,

count=1, id=151,

count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,