44b6f274b9294fd8aa9d32a97f75535decf1bf4ba323aba5c4d0d90f809e5015

Sharing

Copy URL Twitter E-mail

General

Target
44b6f274b9294fd8aa9d32a97f75535decf1bf4ba323aba5c4d0d90f809e5015
Size 13.0MB
Sample260810-yn4caaxarg
SHA256 44b6f274b9294fd8aa9d32a97f75535decf1bf4ba323aba5c4d0d90f809e5015
MD5 0ce9dcad8fe77fb42e5760369f5c1167
SHA1 e98526491509a9eb84d9c026658ec263a9437ed7
SHA512 496485a1d1d3d4e31923cb704fcf76e83fac84ca41a7dc7e5e214a2e6d7563763972689b7c2a1f804f5b746d0dbf13c24a15c3aa394a010eafa88d9691c685a0
SSDEEP 196608:Bwz24QPuZvrXNhbc3uTO1Q8YhutQW7vdYOAx:iz2lIvrX43uTwQnhw71r
TLSH
T101D67D307904C53AF54310F1993CBAAFA25C87BA872425D3A2E81A6F5E604D36F379D7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44b6f274b9294fd8aa9d32a97f75535decf1bf4ba323aba5c4d0d90f809e5015

File Explorer

44b6f274b9294fd8aa9d32a97f75535decf1bf4ba323aba5c4d0d90f809e5015

.exe 13.0MB

44b6f274b9294fd8aa9d32a97f75535decf1bf4ba323aba5c4d0d90f809e5015

IMPHASH ad320d40a85b5df7097091ae5a04c8c4
SHA256 44b6f274b9294fd8aa9d32a97f75535decf1bf4ba323aba5c4d0d90f809e5015
MD5 0ce9dcad8fe77fb42e5760369f5c1167
SHA1 e98526491509a9eb84d9c026658ec263a9437ed7
SHA512 496485a1d1d3d4e31923cb704fcf76e83fac84ca41a7dc7e5e214a2e6d7563763972689b7c2a1f804f5b746d0dbf13c24a15c3aa394a010eafa88d9691c685a0
SSDEEP 196608:Bwz24QPuZvrXNhbc3uTO1Q8YhutQW7vdYOAx:iz2lIvrX43uTwQnhw71r
TLSH
T101D67D307904C53AF54310F1993CBAAFA25C87BA872425D3A2E81A6F5E604D36F379D7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10431052

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Projects\C++\PWClient\WMGJ\CElement\CElementClient\Release\ElementClient_test.pdb

winmm

waveInClose waveInPrepareHeader waveInUnprepareHeader waveInAddBuffer waveInOpen waveInStop waveInReset waveOutReset waveOutOpen waveOutSetVolume waveOutUnprepareHeader waveOutClose waveOutPrepareHeader waveOutWrite waveOutGetNumDevs waveInMessage waveOutMessage waveInGetNumDevs waveInStart waveInGetDevCapsW waveOutGetDevCapsW timeGetTime

ws2_32

inet_addr bind __WSAFDIsSet recv select getsockname gethostbyname inet_ntoa WSAStartup socket setsockopt sendto send recvfrom WSAGetLastError ntohs htons ioctlsocket connect closesocket WSACleanup

shlwapi

PathFileExistsA PathFindExtensionA PathFindFileNameA StrToIntW

wininet

HttpSendRequestA HttpAddRequestHeadersA HttpOpenRequestA InternetReadFile InternetConnectA HttpQueryInfoA InternetOpenUrlW InternetCloseHandle InternetOpenA

imm32

ImmSetCompositionWindow ImmNotifyIME ImmGetCandidateListW ImmReleaseContext ImmGetContext ImmIsIME ImmAssociateContext ImmSetCandidateWindow ImmGetProperty ImmGetCompositionStringW ImmGetDescriptionW

ddraw

DirectDrawCreate

d3d9

Direct3DCreate9

d3dx9_43

D3DXCreateTextureFromFileInMemoryEx D3DXGetImageInfoFromFileInMemory D3DXSaveSurfaceToFileA D3DXDeclaratorFromFVF D3DXMatrixOrthoOffCenterLH D3DXMatrixLookAtLH D3DXMatrixRotationAxis D3DXLoadSurfaceFromFileInMemory D3DXQuaternionRotationMatrix D3DXMatrixRotationQuaternion D3DXCreateBuffer D3DXAssembleShader D3DXSaveTextureToFileA D3DXSaveSurfaceToFileW D3DXMatrixShadow D3DXVec3TransformCoord D3DXCreateEffect D3DXCreateEffectFromFileW D3DXMatrixMultiply D3DXGetImageInfoFromFileA D3DXLoadSurfaceFromSurface D3DXSaveSurfaceToFileInMemory D3DXPlaneTransform D3DXMatrixPerspectiveFovLH

speedtreert

?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z ?SetCamera@CSpeedTreeRT@@SAXPBM0@Z ?SetTime@CSpeedTreeRT@@SAXM@Z ?Authorize@CSpeedTreeRT@@SAXPBD@Z ??0SGeometry@CSpeedTreeRT@@QAE@XZ ??1SGeometry@CSpeedTreeRT@@QAE@XZ ??0STextures@CSpeedTreeRT@@QAE@XZ ??1STextures@CSpeedTreeRT@@QAE@XZ ??0CSpeedTreeRT@@QAE@XZ ??1CSpeedTreeRT@@QAE@XZ ??2CSpeedTreeRT@@SAPAXI@Z ??3CSpeedTreeRT@@SAXPAX@Z ?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z ?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ ?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z ?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z ?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z ?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z ?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z ?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z ?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z ?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ ?SetLodLevel@CSpeedTreeRT@@QAEXM@Z ?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z ?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z ?GetDiscreteLeafLodLevel@CSpeedTreeRT@@QBEGM@Z ?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ ?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z ?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z ?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z ?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z ?SetLightState@CSpeedTreeRT@@SAXI_N@Z

libssl-3

SSL_CTX_free SSL_set_fd SSL_CTX_set_verify SSL_new SSL_free SSL_read SSL_write SSL_ctrl SSL_CTX_ctrl SSL_get_error TLS_client_method SSL_do_handshake SSL_set_connect_state OPENSSL_init_ssl SSL_CTX_new SSL_is_init_finished

libcrypto-3

ERR_peek_error ERR_clear_error

kernel32

GlobalSize GlobalReAlloc IsDBCSLeadByte GetWindowsDirectoryA GlobalFree LocalAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent InitializeSListHead GetSystemTimeAsFileTime GetStartupInfoW EncodePointer InterlockedPopEntrySList InterlockedPushEntrySList LoadLibraryExA LocalFree ReleaseSRWLockExclusive GetTickCount GetCommandLineA GetFileAttributesA SetFileAttributesA CreateFileW CloseHandle GetLastError EnterCriticalSection LeaveCriticalSection GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId FreeLibrary GetModuleFileNameA GetModuleFileNameW GetProcAddress LoadLibraryW lstrcpyW IsBadReadPtr InitializeCriticalSection DeleteCriticalSection WaitForSingleObject CreateThread VirtualProtect GetModuleHandleA LoadLibraryA TerminateProcess OpenProcess VirtualQueryEx ReadProcessMemory CreateToolhelp32Snapshot Process32First Process32Next CreateFileA DeviceIoControl GlobalMemoryStatusEx GetComputerNameW Sleep GetSystemInfo GetVersionExW GlobalMemoryStatus lstrlenA HeapAlloc HeapFree GetProcessHeap GetSystemTime SystemTimeToFileTime GetFullPathNameA GetModuleHandleW FlushInstructionCache ReleaseMutex CreateMutexW IsBadWritePtr AcquireSRWLockExclusive GlobalUnlock GlobalLock WideCharToMultiByte DeleteFileA MultiByteToWideChar GetCurrentDirectoryW DecodePointer InitializeCriticalSectionAndSpinCount SetEvent CreateEventW ExitThread InitializeCriticalSectionEx CreateDirectoryA FindFirstFileA FindNextFileA GetFileSize ResetEvent WaitForMultipleObjects GetExitCodeThread GetLocalTime CopyFileA ReadFile GetCommandLineW OutputDebugStringA ExitProcess ResumeThread IsDebuggerPresent OpenFileMappingW MapViewOfFile UnmapViewOfFile FindClose WriteFile ConnectNamedPipe CreateNamedPipeW CreateMutexA CreateProcessW K32GetProcessMemoryInfo GetDiskFreeSpaceA OutputDebugStringW SignalObjectAndWait SetThreadPriority SetThreadPriorityBoost GetPrivateProfileStringW WritePrivateProfileStringW SetCurrentDirectoryA GetCurrentDirectoryA GetVersion DuplicateHandle SuspendThread GetPrivateProfileIntA VirtualAlloc VirtualFree OpenFile ReleaseSemaphore CreateSemaphoreW RaiseException SetLastError QueueUserAPC LoadLibraryExW LoadResource SizeofResource FindResourceW MulDiv lstrcmpW lstrcmpiW QueryPerformanceCounter QueryPerformanceFrequency Module32FirstW Module32NextW SetFilePointer IsDBCSLeadByteEx WinExec CreateFileMappingW FormatMessageA SleepConditionVariableSRW GlobalAlloc WakeAllConditionVariable

user32

SetCursor MessageBoxA EndPaint BeginPaint GetForegroundWindow PeekMessageW DispatchMessageW TranslateMessage SetWindowTextW SetCursorPos SetWindowLongW AdjustWindowRectEx InvalidateRect GetAsyncKeyState GetMenuBarInfo EnumChildWindows SetActiveWindow GetActiveWindow IsWindow SendMessageW GetClassNameW GetAncestor GetWindowLongW GetWindowTextW IsWindowEnabled IsZoomed ChangeDisplaySettingsW IsWindowVisible SetWindowPos ShowWindow GetClientRect PostMessageW ClientToScreen GetKeyState EmptyClipboard SetClipboardData CloseClipboard OpenClipboard ScreenToClient GetCursorPos PostQuitMessage EnumWindows CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW FindWindowA PtInRect IsRectEmpty GetWindowRect GetWindow GetWindowThreadProcessId GetTopWindow GetClassNameA GetWindowTextA LoadIconW GetGUIThreadInfo GetCapture SetCapture ReleaseCapture wsprintfW DefWindowProcW RegisterClassExW CreateWindowExW MoveWindow GetSystemMetrics UpdateWindow SetForegroundWindow AdjustWindowRect LoadCursorW MessageBoxW RegisterWindowMessageW GetMessageW CallWindowProcW GetClassInfoExW IsChild DestroyWindow GetDlgItem CharNextW SetFocus GetFocus keybd_event SetTimer KillTimer CreateAcceleratorTableW DestroyAcceleratorTable GetDC ReleaseDC InvalidateRgn RedrawWindow GetWindowTextLengthW GetSysColor FillRect SetWindowLongA GetDesktopWindow IsIconic GetParent EnumDisplaySettingsW CreateCaret GetKeyboardLayout GetClipboardData SetCaretPos IsWindowUnicode GetWindowDC EnumThreadWindows CreateWindowExA WindowFromDC RegisterClipboardFormatW SetRect IntersectRect LoadCursorFromFileA DestroyCursor FindWindowW UnregisterClassW

gdi32

EnumFontFamiliesExW CreatePolygonRgn PtInRegion CreateFontIndirectW GetGlyphOutlineW CreateEllipticRgn SetBkColor GetDIBits TextOutA CreateCompatibleBitmap GetStockObject BitBlt SetPixel SetMapMode GetTextExtentPoint32W CreateFontW ExtTextOutW CreateSolidBrush DeleteDC DeleteObject GetDeviceCaps SelectObject GetObjectW CreateCompatibleDC SetTextColor SetTextAlign CreateDIBSection

advapi32

RegSetValueExW DeleteService OpenSCManagerW OpenServiceA OpenProcessToken OpenThreadToken AdjustTokenPrivileges LookupPrivilegeValueW StartServiceW GetUserNameW CloseServiceHandle RegCloseKey CreateServiceA RegQueryInfoKeyW RegOpenKeyExW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW

shell32

SHOpenFolderAndSelectItems ShellExecuteW Shell_NotifyIconW ShellExecuteExA

ole32

CLSIDFromProgID CLSIDFromString CoGetClassObject CreateStreamOnHGlobal CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree OleInitialize OleUninitialize OleLockRunning CoCreateInstance PropVariantClear CoSetProxyBlanket CoInitialize CoUninitialize StringFromGUID2

oleaut32

DispCallFunc LoadRegTypeLi LoadTypeLi VarUI4FromStr VariantCopy VariantInit SysStringLen CreateErrorInfo SetErrorInfo VariantChangeType GetErrorInfo SysAllocStringLen OleCreateFontIndirect VariantClear SysFreeString SysAllocString

elementskill_test

?LearnCondition@ElementSkill@GNET@@SAHIAAULearnRequirement@2@H@Z ?SetLevel@ElementSkill@GNET@@SAHIH@Z ?SetAbility@ElementSkill@GNET@@SAHIH@Z ?GetComboSkActivated@ElementSkill@GNET@@SAXABUComboSkillState@2@AAV?$vector@U?$pair@IH@std@@V?$allocator@U?$pair@IH@std@@@2@@std@@@Z ?Condition@ElementSkill@GNET@@SAHIAAUUseRequirement@2@H@Z ?GetVersion@ElementSkill@GNET@@SAHXZ ?GetExecuteTime@ElementSkill@GNET@@SAHIH@Z ?GetRequiredBook@ElementSkill@GNET@@SAHIH@Z ?PetLearn@ElementSkill@GNET@@SAHIAAUPetRequirement@2@H@Z ?GetAbilityPercent@ElementSkill@GNET@@SAHI@Z ?Create@ElementSkill@GNET@@SAPAV12@IH@Z ?GetName@ElementSkill@GNET@@SAPB_WI@Z ?GetNativeName@ElementSkill@GNET@@SAPBDI@Z ?InitStaticData@ElementSkill@GNET@@SAXXZ ?GetComboSkPreSkill@ElementSkill@GNET@@SAHI@Z ?GetInherentSkills@ElementSkill@GNET@@SAABV?$vector@IV?$allocator@I@std@@@std@@H@Z ?NextSkill@ElementSkill@GNET@@SAII@Z ?IsMovingSkill@ElementSkill@GNET@@SA_NI@Z ?Query@VisibleState@GNET@@SAPBV12@HH@Z ?GetMaxAbility@ElementSkill@GNET@@SAHIH@Z ?GetAbility@ElementSkill@GNET@@SAHI@Z ?GetRequiredRealmLevel@ElementSkill@GNET@@SAHIH@Z ?GetRequiredLevel@ElementSkill@GNET@@SAHIH@Z ?IsOverridden@ElementSkill@GNET@@SA_NI@Z ?GetType@ElementSkill@GNET@@SADI@Z ?IsGoblinSkill@ElementSkill@GNET@@SA_NI@Z ?Query@TeamState@GNET@@SAPBV12@H@Z ?GetRequiredMoney@ElementSkill@GNET@@SAHIH@Z ?GetRequiredSp@ElementSkill@GNET@@SAHIH@Z ?GetIcon@ElementSkill@GNET@@SAPBDI@Z ?LoadSkillData@ElementSkill@GNET@@SAXPAX@Z ?GoblinLearn@ElementSkill@GNET@@SAHIAAUGoblinRequirement@2@H@Z ?GetEffect@ElementSkill@GNET@@SAPBDI@Z ?GetCommonCoolDown@ElementSkill@GNET@@SAHI@Z ?GoblinCondition@ElementSkill@GNET@@SAHIAAUGoblinUseRequirement@2@H@Z ?Destroy@ElementSkill@GNET@@QAEXXZ

msvcp140

?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ ?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE_W_W@Z ?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WXZ ?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ ?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W0@Z ?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ ?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z ?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z ?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ ?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ ?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ ?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ ?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ _Cnd_broadcast ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ ?getloc@ios_base@std@@QBE?AVlocale@2@XZ ?width@ios_base@std@@QAE_J_J@Z ?width@ios_base@std@@QBE_JXZ ?setf@ios_base@std@@QAEHHH@Z ?setf@ios_base@std@@QAEHH@Z ?flags@ios_base@std@@QBEHXZ ?good@ios_base@std@@QBE_NXZ ?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?widen@?$ctype@_W@std@@QBE_WD@Z ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ?_W_Getmonths@_Locinfo@std@@QBEPBGXZ ?_W_Getdays@_Locinfo@std@@QBEPBGXZ ?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ _Cnd_signal ?_Xout_of_range@std@@YAXPBD@Z ?_Xbad_alloc@std@@YAXXZ ??1_Lockit@std@@QAE@XZ ??0_Lockit@std@@QAE@H@Z ?_Xlength_error@std@@YAXPBD@Z ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?_Id_cnt@id@locale@std@@0HA ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ ?id@?$ctype@_W@std@@2V0locale@2@A ?_Xinvalid_argument@std@@YAXPBD@Z ?always_noconv@codecvt_base@std@@QBE_NXZ ?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ ?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ _Cnd_register_at_thread_exit _Cnd_unregister_at_thread_exit ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ ?_Throw_Cpp_error@std@@YAXH@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z ?_Syserror_map@std@@YAPBDH@Z ?_Xbad_function_call@std@@YAXXZ ?_Random_device@std@@YAIXZ _Thrd_join _Thrd_id _Cnd_do_broadcast_at_thread_exit ??Bios_base@std@@QBE_NXZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z ?__ExceptionPtrCreate@@YAXPAX@Z ?__ExceptionPtrDestroy@@YAXPAX@Z ?__ExceptionPtrCopy@@YAXPAXPBX@Z ?__ExceptionPtrAssign@@YAXPAXPBX@Z ?__ExceptionPtrToBool@@YA_NPBX@Z ?__ExceptionPtrCurrentException@@YAXPAX@Z ?__ExceptionPtrRethrow@@YAXPBX@Z ?__ExceptionPtrCopyException@@YAXPAXPBX1@Z _Mtx_lock _Mtx_unlock ?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ _Xtime_get_ticks ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A _Thrd_hardware_concurrency _Cnd_wait ?uncaught_exception@std@@YA_NXZ

iphlpapi

GetAdaptersAddresses

mpg123

mpg123_close mpg123_open_feed mpg123_format mpg123_format_none mpg123_strerror mpg123_decode mpg123_new mpg123_init

urlmon

URLDownloadToFileW

d3dcompiler_47

D3DCompileFromFile

opus

opus_decoder_create opus_encoder_create opus_encode opus_decode

vcruntime140

__std_exception_destroy __std_type_info_destroy_list memcpy __std_exception_copy __CxxFrameHandler3 strrchr __std_terminate memmove memset _purecall strstr strchr __RTDynamicCast _setjmp3 memchr _local_unwind4 wcsstr wcsrchr wcschr __std_type_info_name longjmp __current_exception __current_exception_context _except_handler4_common _CxxThrowException

api-ms-win-crt-utility-l1-1-0

rand qsort srand

api-ms-win-crt-math-l1-1-0

__libm_sse2_tanf frexp _libm_sse2_sqrt_precise _libm_sse2_pow_precise _CIatan2 ldexp _except1 __libm_sse2_tan __libm_sse2_atan modf __libm_sse2_cosf __libm_sse2_sin __libm_sse2_acosf __libm_sse2_acos __libm_sse2_asinf __libm_sse2_powf _isnan _libm_sse2_tan_precise __setusermatherr _libm_sse2_acos_precise __libm_sse2_pow __libm_sse2_exp _libm_sse2_sin_precise ceil _libm_sse2_exp_precise _libm_sse2_log_precise _libm_sse2_asin_precise _CIfmod __libm_sse2_sinf _libm_sse2_cos_precise __libm_sse2_log __libm_sse2_cos __libm_sse2_atan2 __libm_sse2_asin _CIcosh floor _libm_sse2_atan_precise _libm_sse2_log10_precise _CIsinh _CItanh __libm_sse2_log10

api-ms-win-crt-runtime-l1-1-0

_resetstkoflw _invalid_parameter_noinfo _initialize_onexit_table abort _initialize_narrow_environment _configure_narrow_argv terminate _beginthread _beginthreadex _seh_filter_dll _register_thread_local_exe_atexit_callback _c_exit _cexit _exit _initterm_e _initterm _get_wide_winmain_command_line _initialize_wide_environment _errno _configure_wide_argv _set_app_type _seh_filter_exe system _invoke_watson _crt_atexit perror _crt_at_quick_exit _controlfp_s exit _execute_onexit_table _register_onexit_function strerror

api-ms-win-crt-stdio-l1-1-0

freopen getc ferror __stdio_common_vswscanf __stdio_common_vfwprintf _chsize __stdio_common_vsprintf fflush fwrite _fileno fread fgets fopen fclose __acrt_iob_func __stdio_common_vfprintf __stdio_common_vfscanf fseek ftell tmpnam __stdio_common_vswprintf _get_stream_buffer_pointers fgetc fgetpos fputc fsetpos _set_fmode _fseeki64 setvbuf ungetc clearerr _pclose __p__commode tmpfile _popen fputs fgetwc fgetws feof __stdio_common_vsscanf __stdio_common_vswprintf_s

api-ms-win-crt-time-l1-1-0

_mktime64 strftime _gmtime64 clock _mktime32 _gmtime32 _localtime64 asctime _difftime64 _localtime32_s _time64 _localtime32 _time32

api-ms-win-crt-string-l1-1-0

iscntrl isalnum _strlwr _wcsicmp isalpha _strupr _strnicmp isdigit strncat strcoll _strdup _stricmp wcsncpy strtok strncmp _wcsupr _wcslwr islower ispunct isxdigit isupper toupper strpbrk wcsncpy_s wcsncat iswdigit strcspn strcpy_s wcscspn wcsncmp tolower strncpy isspace

api-ms-win-crt-filesystem-l1-1-0

_lock_file _fstat64i32 _wremove remove _stat64i32 _rmdir _findfirst64i32 _findnext64i32 _access _mkdir _findclose _findfirst32 _findnext32 _stat32 _unlock_file rename _splitpath

api-ms-win-crt-convert-l1-1-0

wcstoull strtol strtod _wtoi64 atol _itow atoi _itoa atof _wtoi strtoul

api-ms-win-crt-heap-l1-1-0

_callnewh _recalloc calloc realloc _set_new_mode malloc free

api-ms-win-crt-locale-l1-1-0

setlocale _configthreadlocale localeconv

glu32

gluTessBeginPolygon gluTessBeginContour gluTessVertex gluTessCallback gluDeleteTess gluNewTess gluTessProperty gluTessEndPolygon gluTessEndContour

dsound

ord11

ftdriver

?CreateFTManager@@YAPAVIFTManager@@HHH@Z

api-ms-win-crt-environment-l1-1-0

getenv

generic

count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=4, id=257, version=33134,

count=8, id=253, version=35207,

count=35, id=259, version=35207,

count=12, id=260, version=35207,

count=47, id=261, version=35207,

count=4, id=257, version=35207,

count=5, id=260, version=33145,

count=4, id=257, version=34123,

count=29, id=264, version=35228,

count=6, id=257, version=35228,

count=3, id=261, version=33145,

count=2, id=156, version=21202,

count=39, id=257, version=33145,

count=933, id=1, productName=Unmarked objects,

count=32, id=260, version=35228,

count=1182, id=261, version=35228,

count=1, id=255, version=35228,

count=1, id=151,

count=1, id=258, version=35228,