fadeb4edec14ae567f98a024c9327ea5d6fc218a5fe1c4d76b4da420d409e968

Sharing

Copy URL Twitter E-mail

General

Target
fadeb4edec14ae567f98a024c9327ea5d6fc218a5fe1c4d76b4da420d409e968
Size 8.6MB
Sample260812-2wssaswfnd
SHA256 fadeb4edec14ae567f98a024c9327ea5d6fc218a5fe1c4d76b4da420d409e968
MD5 76fa7dcef7203cad37d5b6bd3e2c6fde
SHA1 bb1574162e8fb72616b81e30da4bb1dedfc024d1
SHA512 41616aaeb1b783364411f52bfa9fc20eac3cf1ea445d7724909b0becc15d07450d8f0e8593f59dd24433fd052fa8ba6e652f800f5ce00fb6dcc83fc6c9126714
SSDEEP 98304:BgB9lKPejhZ/8ifpm7Px9ZWJWaoq13W2QM3wnuR1kT75FrVmgh1D//LB3aNHV:inKWjhZA7rZWTmQoNbLBq
TLSH
T1E7967DA077028932EE8130FA697DEEAA605C5D250B5494C3B3DC3E5A9BB41D33F3255E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fadeb4edec14ae567f98a024c9327ea5d6fc218a5fe1c4d76b4da420d409e968

File Explorer

fadeb4edec14ae567f98a024c9327ea5d6fc218a5fe1c4d76b4da420d409e968

.exe 8.6MB

fadeb4edec14ae567f98a024c9327ea5d6fc218a5fe1c4d76b4da420d409e968

IMPHASH 6d34612b817f32e63ea4c51213abb0a7
SHA256 fadeb4edec14ae567f98a024c9327ea5d6fc218a5fe1c4d76b4da420d409e968
MD5 76fa7dcef7203cad37d5b6bd3e2c6fde
SHA1 bb1574162e8fb72616b81e30da4bb1dedfc024d1
SHA512 41616aaeb1b783364411f52bfa9fc20eac3cf1ea445d7724909b0becc15d07450d8f0e8593f59dd24433fd052fa8ba6e652f800f5ce00fb6dcc83fc6c9126714
SSDEEP 98304:BgB9lKPejhZ/8ifpm7Px9ZWJWaoq13W2QM3wnuR1kT75FrVmgh1D//LB3aNHV:inKWjhZA7rZWTmQoNbLBq
TLSH
T1E7967DA077028932EE8130FA697DEEAA605C5D250B5494C3B3DC3E5A9BB41D33F3255E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4070432

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Cerberus\client-dev\bin_metin2.pdb

kernel32

HeapQueryInformation HeapSize OutputDebugStringW GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA HeapReAlloc GetOEMCP GetACP IsValidCodePage SetStdHandle CreateProcessW GetExitCodeProcess SetConsoleCtrlHandler ReadConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers SetFilePointerEx GetCurrentProcess GetLastError FindClose FindNextFileA SetEndOfFile FindFirstFileA GetModuleFileNameA MultiByteToWideChar SetFileAttributesA GetFileSizeEx GetTimeZoneInformation DeleteFileW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW LoadLibraryExW VirtualProtect IsThreadAFiber HeapAlloc HeapFree GetStdHandle FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetFileType GetDriveTypeW UnhandledExceptionFilter IsDebuggerPresent FreeLibraryAndExitThread ResumeThread ExitThread CreateThread TerminateProcess ExitProcess FlsFree FlsSetValue FlsGetValue FlsAlloc InterlockedFlushSList InterlockedPushEntrySList RtlUnwind CreateEventA GetCurrentThread WaitNamedPipeW PeekNamedPipe CreateFileW GetModuleFileNameW SetLastError GetSystemTimeAsFileTime GetStartupInfoW IsProcessorFeaturePresent WriteConsoleW GetCPInfo CompareStringEx LCMapStringEx DecodePointer EncodePointer InitializeCriticalSectionEx GetStringTypeW CreateSymbolicLinkW GetFileInformationByHandleEx CreateHardLinkW MoveFileExW CopyFile2 CreateDirectoryExW GetModuleHandleW DeviceIoControl AreFileApisANSI CreateFile2 GetTempPathW SetFileTime SetFileInformationByHandle SetFileAttributesW GetFullPathNameW GetFinalPathNameByHandleW GetFileInformationByHandle GetFileAttributesExW GetFileAttributesW GetDiskFreeSpaceExW FindNextFileW FindFirstFileExW FindFirstFileW CreateDirectoryW SetCurrentDirectoryW GetLocaleInfoEx LocalFree SleepConditionVariableSRW WakeAllConditionVariable WakeConditionVariable InitOnceBeginInitialize InitOnceComplete GetModuleHandleExW CloseThreadpoolWork SubmitThreadpoolWork CreateThreadpoolWork FreeLibraryWhenCallbackReturns RtlCaptureStackBackTrace RaiseException GetLogicalProcessorInformationEx GetExitCodeThread SwitchToThread WaitForSingleObjectEx TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive FormatMessageA GetSystemTimePreciseAsFileTime QueryPerformanceFrequency QueryPerformanceCounter CopyFileA CreateSemaphoreA ReleaseSemaphore GetLocaleInfoA CompareStringA WideCharToMultiByte lstrlenW GlobalLock GlobalUnlock FreeLibrary GetVersionExA GetSystemDirectoryA GetModuleHandleA WriteFile SetFilePointer ReadFile LoadLibraryA GetProcAddress GetCurrentThreadId SetUnhandledExceptionFilter GetFileSize CreateFileA ReadProcessMemory GetCurrentDirectoryW GetTickCount MoveFileA lstrlenA CreateMutexA ReleaseMutex GetCurrentDirectoryA DeleteFileA GlobalFree GetPrivateProfileStringA InitializeSListHead InitOnceExecuteOnce CreateFileMappingA UnmapViewOfFile MapViewOfFile OutputDebugStringA GlobalAlloc GetTempFileNameA GetTempPathA RemoveDirectoryA CreateDirectoryA AllocConsole DeleteCriticalSection GetSystemInfo CloseHandle Process32Next SetEvent CreateToolhelp32Snapshot OpenProcess Module32First WaitForSingleObject InitializeCriticalSection LeaveCriticalSection SetThreadPriority Module32Next EnterCriticalSection Process32First Sleep VerifyVersionInfoW GetCurrentProcessId GetThreadTimes VerSetConditionMask

user32

BeginPaint ReleaseDC InvalidateRect FlashWindowEx DestroyIcon LoadImageA UpdateWindow RegisterClassExA UnregisterClassA GetClientRect SetFocus CreateWindowExA DefWindowProcA MoveWindow IsWindow ShowWindow DestroyWindow PostQuitMessage GetAsyncKeyState GetCursorPos FindWindowA SystemParametersInfoA LoadIconA SendMessageA ScreenToClient CharNextW GetClipboardData CloseClipboard OpenClipboard GetKeyboardLayout GetKeyboardLayoutNameA DispatchMessageA TranslateMessage GetMessageA CharPrevExA CharNextExA LoadCursorA SetWindowLongA GetWindowLongA AdjustWindowRectEx GetWindowRect SetWindowTextA GetMenu RegisterClassA SetWindowPos GetKeyState ShowCursor SetCursor DestroyCursor SetCursorPos ClientToScreen ReleaseCapture SetCapture ChangeDisplaySettingsA SetRect EndPaint PeekMessageA OffsetRect FillRect GetDC MessageBoxA LoadStringA GetSystemMetrics GetCapture

gdi32

CreateCompatibleDC DeleteDC SelectObject SetBkColor SetBkMode SetDIBitsToDevice SetTextColor CreateDIBSection TextOutA CreateFontIndirectA CreateSolidBrush DeleteObject EnumFontFamiliesExA StretchBlt PatBlt GetTextExtentPoint32A GetStockObject TextOutW GetTextExtentPoint32W GetCharABCWidthsFloatW

advapi32

RegQueryValueExW RegQueryValueExA RegCreateKeyExW RegSetValueExW CryptAcquireContextA CryptReleaseContext CryptGenRandom RegOpenKeyExA RegOpenKeyExW RegCloseKey

shell32

SHGetSpecialFolderPathA SetCurrentProcessExplicitAppUserModelID ShellExecuteA

ole32

CoInitializeEx CoUninitialize CoInitialize CoCreateInstance

winmm

timeEndPeriod timeGetDevCaps timeGetTime timeBeginPeriod

d3d9

Direct3DCreate9

d3dx9_43

D3DXVec3Normalize D3DXMatrixRotationZ D3DXVec3TransformCoord D3DXCreateMatrixStack D3DXCreateSphere D3DXGetFVFVertexSize D3DXLoadSurfaceFromSurface D3DXCreateTexture D3DXCreateTextureFromFileInMemoryEx D3DXMatrixRotationY D3DXMatrixMultiplyTranspose D3DXPlaneNormalize D3DXCreateTextureFromFileA D3DXMatrixTranslation D3DXMatrixMultiply D3DXCompileShader D3DXQuaternionRotationAxis D3DXMatrixRotationQuaternion D3DXQuaternionMultiply D3DXMatrixRotationYawPitchRoll D3DXMatrixInverse D3DXMatrixRotationX D3DXVec3TransformNormal D3DXMatrixRotationAxis D3DXVec4Transform D3DXMatrixTranspose D3DXVec3Project D3DXVec3Unproject D3DXMatrixScaling D3DXCreateEffectFromFileA D3DXVec2Normalize D3DXMatrixLookAtRH D3DXQuaternionRotationYawPitchRoll D3DXVec3Transform D3DXMatrixDeterminant D3DXMatrixOrthoRH D3DXCreateCylinder D3DXMatrixOrthoOffCenterRH D3DXMatrixPerspectiveFovRH D3DXAssembleShader

python27

_PyLong_New PyMarshal_ReadObjectFromString PyCode_New PyEval_GetRestricted PyErr_NoMemory PyErr_Occurred PyExc_StopIteration PyExc_EOFError PyExc_ValueError _Py_EllipsisObject PyString_FromStringAndSize PyComplex_FromCComplex PyFloat_FromDouble _PyLong_FromByteArray PyUnicodeUCS2_DecodeUTF8 PyCode_Type Py_OptimizeFlag PyEval_EvalCode PyCode_Addr2Line PyObject_AsCharBuffer PyImport_GetMagicNumber Py_FlushLine PyEval_SetTrace Py_CompileStringFlags PyRun_StringFlags Py_Finalize Py_Initialize Py_SetProgramName PyErr_Fetch PyModule_GetDict PyDict_SetItemString PyImport_AddModule PyNumber_Check PyObject_CallObject PyErr_Print PyErr_BadArgument PyErr_Clear PyFloat_AsDouble PyLong_AsLongLong PyCallable_Check PyObject_GetAttr PyString_InternFromString PyModule_AddStringConstant PyImport_ImportModule PyTuple_SetItem PyTuple_New PyArg_ParseTuple PyString_FromString PyErr_SetString PyExc_RuntimeError PyDict_Next PyLong_FromLongLong PyDict_Size PyInt_AsLong PyList_SetItem PyString_AsString PyDict_New PyDict_SetItem Py_InitModule4 PyModule_AddIntConstant Py_BuildValue PyTuple_GetItem PyLong_AsLong PyTuple_Size PyDict_GetItemString PyList_New PyList_Append PyInt_FromLong _Py_NoneStruct PyObject_GetAttrString

imm32

ImmGetOpenStatus ImmSetConversionStatus ImmGetConversionStatus ImmGetCandidateListW ImmSetCompositionStringW ImmGetCompositionStringW ImmAssociateContext ImmReleaseContext ImmGetContext ImmIsIME ImmGetIMEFileNameA ImmNotifyIME

libcef

cef_stream_reader_create_for_data cef_stream_reader_create_for_file cef_post_data_element_create cef_print_settings_create cef_menu_model_create cef_post_data_create cef_response_create cef_v8stack_trace_get_current cef_media_router_get_global cef_cookie_manager_get_global_manager cef_stream_writer_create_for_handler cef_stream_writer_create_for_file cef_image_create cef_list_value_create cef_urlrequest_create cef_process_message_create cef_request_create cef_string_multimap_free cef_string_multimap_alloc cef_create_context_shared cef_request_context_create_context cef_request_context_get_global_context cef_drag_data_create cef_dictionary_value_create cef_v8value_create_function cef_v8value_create_array_buffer cef_v8value_create_array cef_v8value_create_object cef_v8value_create_string cef_v8value_create_date cef_v8value_create_double cef_v8value_create_uint cef_v8value_create_int cef_v8value_create_bool cef_v8value_create_null cef_v8value_create_undefined cef_task_runner_get_for_thread cef_task_runner_get_for_current_thread cef_string_multimap_append cef_string_multimap_value cef_string_multimap_key cef_string_multimap_size cef_string_map_append cef_string_map_value cef_string_map_key cef_string_map_size cef_string_list_append cef_string_list_value cef_string_list_size cef_value_create cef_binary_value_create cef_command_line_get_global cef_command_line_create cef_string_map_free cef_string_map_alloc cef_browser_host_create_browser_sync cef_browser_host_create_browser cef_v8context_in_context cef_v8context_get_entered_context cef_v8context_get_current_context cef_string_wide_to_utf8 cef_log cef_api_hash cef_execute_java_script_with_user_gesture_for_tests cef_register_widevine_cdm cef_is_web_plugin_unstable cef_register_web_plugin_crash cef_unregister_internal_web_plugin cef_refresh_web_plugins cef_visit_web_plugin_info cef_now_from_system_trace_time cef_end_tracing cef_stream_reader_create_for_handler cef_string_utf16_clear cef_string_utf8_to_utf16 cef_string_utf16_cmp cef_string_utf16_to_utf8 cef_string_utf8_clear cef_write_json cef_begin_tracing cef_parse_jsonand_return_error cef_parse_json cef_uridecode cef_uriencode cef_base64decode cef_base64encode cef_get_extensions_for_mime_type cef_get_mime_type cef_format_url_for_security_display cef_get_path cef_create_url cef_parse_url cef_clear_cross_origin_whitelist cef_remove_cross_origin_whitelist_entry cef_add_cross_origin_whitelist_entry cef_load_crlsets_file cef_zip_directory cef_delete_file cef_directory_exists cef_create_temp_directory_in_directory cef_create_new_temp_directory cef_get_temp_directory cef_create_directory cef_set_crash_key_value cef_crash_reporting_enabled cef_enable_highdpi_support cef_set_osmodal_loop cef_quit_message_loop cef_run_message_loop cef_do_message_loop_work cef_shutdown cef_initialize cef_execute_process cef_clear_scheme_handler_factories cef_register_scheme_handler_factory cef_register_extension cef_post_delayed_task cef_post_task cef_currently_on cef_string_list_free cef_string_list_alloc cef_string_userfree_utf16_free cef_string_utf16_set cef_launch_process cef_is_cert_status_error

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

devil

ilGetInteger ilBindImage ilEnable ilLoad ilGenImages ilConvertImage ilCopyPixels ilTexImage ilSetPixels ilOriginFunc ilDeleteImages ilInit ilSave ilShutDown

granny2

_GrannySetLogCallback@4 _GrannyReadEntireFileFromMemory@8 _GrannyFreeFileSection@8 _GrannyFreeFile@4 _GrannySetModelClock@8 _GrannyFreeCompletedModelControls@4 _GrannySampleModelAnimationsAccelerated@20 _GrannyUpdateModelMatrix@20 _GrannyNewLocalPose@4 _GrannyFreeLocalPose@4 _GrannyInstantiateModel@4 _GrannyGetSourceSkeleton@4 _GrannyConvertSingleObject@20 _GrannyFindMatchingMember@16 _GrannyFreeModelInstance@4 _GrannyNewMeshBinding@12 _GrannyFreeMeshBinding@4 _GrannyGetMeshBindingToBoneIndices@4 _GrannyFindBoneByName@12 _GrannyNewWorldPose@4 _GrannyFreeWorldPose@4 _GrannyGetWorldPose4x4@8 _GrannyGetWorldPoseComposite4x4@8 _GrannyGetTotalTypeSize@4 _GrannyGetMeshVertexCount@4 _GrannyMeshIsRigid@4 _GrannyGetMeshIndexCount@4 _GrannyGetSourceModel@4 _GrannyFindTrackGroupForModel@12 _GrannyFreeControl@4 _GrannyFreeControlOnceUnused@4 _GrannyCompleteControlAt@8 _GrannyControlIsComplete@4 _GrannyFreeControlIfComplete@4 _GrannyGetControlLoopCount@4 _GrannySetControlLoopCount@8 _GrannyGetControlSpeed@4 _GrannySetControlSpeed@8 _GrannyGetControlLocalDuration@4 _GrannySetControlEaseIn@8 _GrannySetControlEaseInCurve@28 _GrannySetControlEaseOut@8 _GrannySetControlEaseOutCurve@28 _GrannyGetControlRawLocalClock@4 _GrannyGetFileInfo@4 _GrannySetControlRawLocalClock@8 _GrannyPlayControlledAnimation@12 _GrannyBeginControlledAnimation@8 _GrannyEndControlledAnimation@4 _GrannySetTrackGroupTarget@12 _GrannySetTrackGroupLOD@16 _GrannyGetMeshTriangleGroupCount@4 _GrannyGetMeshTriangleGroups@4 _GrannyGetMeshVertexType@4 _GrannyCopyMeshVertices@12 _GrannyGetMeshVertices@4 _GrannyCopyMeshIndices@12 _GrannyNewMeshDeformer@16 _GrannyFreeMeshDeformer@4 _GrannyDeformVertices@24 _GrannyGetWorldPoseComposite4x4Array@4 GrannyPNT332VertexType _GrannyGetMaterialTextureByType@8

mss32

_AIL_open_digital_driver@16 _AIL_file_type@8 _AIL_close_digital_driver@4 _AIL_decompress_ASI@24 _AIL_WAV_info@8 _AIL_enumerate_3D_providers@12 _AIL_set_file_callbacks@16 _AIL_file_read@8 _AIL_mem_free_lock@4 _AIL_open_3D_provider@4 _AIL_close_3D_provider@4 _AIL_open_3D_listener@4 _AIL_close_3D_listener@4 _AIL_set_3D_position@16 _AIL_set_3D_velocity@20 _AIL_set_3D_orientation@28 _AIL_startup@0 _AIL_shutdown@0 _AIL_set_redist_directory@4 _AIL_close_stream@4 _AIL_start_stream@4 _AIL_pause_stream@8 _AIL_set_stream_volume_levels@12 _AIL_stream_volume_levels@12 _AIL_set_stream_loop_count@8 _AIL_stream_status@4 _AIL_last_error@0 _AIL_allocate_sample_handle@4 _AIL_release_sample_handle@4 _AIL_init_sample@4 _AIL_set_sample_file@12 _AIL_start_sample@4 _AIL_stop_sample@4 _AIL_resume_sample@4 _AIL_end_sample@4 _AIL_set_sample_volume_pan@12 _AIL_set_sample_loop_count@8 _AIL_sample_status@4 _AIL_sample_volume_pan@12 _AIL_allocate_3D_sample_handle@4 _AIL_release_3D_sample_handle@4 _AIL_start_3D_sample@4 _AIL_resume_3D_sample@4 _AIL_end_3D_sample@4 _AIL_set_3D_sample_file@8 _AIL_set_3D_sample_volume@8 _AIL_set_3D_sample_loop_count@8 _AIL_3D_sample_status@4 _AIL_3D_sample_volume@4 _AIL_update_3D_position@8 _AIL_auto_update_3D_position@8 _AIL_open_stream@12 _AIL_stop_3D_sample@4 _AIL_decompress_ADPCM@12

speedtreert

?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z ?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z ?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z ?GetLeafLodSizeAdjustments@CSpeedTreeRT@@QAEPBMXZ ?GetLeafBillboardTable@CSpeedTreeRT@@QBEPBMAAI@Z ?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ ?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z ?SetLodLevel@CSpeedTreeRT@@QAEXM@Z ?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ ?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z ?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z ?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z ?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetLeafLightingAdjustment@CSpeedTreeRT@@QBEMXZ ?GetCurrentError@CSpeedTreeRT@@SAPBDXZ ?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z ?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z ?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ ?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z ?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z ?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z ?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z ?DeleteTransientData@CSpeedTreeRT@@QAEXXZ ?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ ?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z ??3CSpeedTreeRT@@SAXPAX@Z ??1CSpeedTreeRT@@QAE@XZ ??0CSpeedTreeRT@@QAE@XZ ??1STextures@CSpeedTreeRT@@QAE@XZ ??0STextures@CSpeedTreeRT@@QAE@XZ ??1SGeometry@CSpeedTreeRT@@QAE@XZ ??0SGeometry@CSpeedTreeRT@@QAE@XZ ?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z ?SetTime@CSpeedTreeRT@@SAXM@Z ?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z ?SetCamera@CSpeedTreeRT@@SAXPBM0@Z ?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z ?SetLightState@CSpeedTreeRT@@SAXI_N@Z ?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ ?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z ?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ??2CSpeedTreeRT@@SAPAXI@Z

dinput8

DirectInput8Create

ws2_32

htons htonl WSACleanup WSAStartup WSAGetLastError socket inet_addr select recv ioctlsocket connect closesocket __WSAFDIsSet gethostname ntohl ntohs gethostbyname send

ddraw

DirectDrawCreate

oleaut32

SysFreeString VariantClear

Name

.text

Size

6.0MB

Virtual Size

6.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

170KB

Virtual Size

721KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

896KB

Virtual Size

895KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

347KB

Virtual Size

346KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=43, id=224, productName=VS2013 build 21005, version=21005,

count=45, id=259, version=35222,

count=221, id=261, version=35222,

count=4, id=131, productName=VS2008 build 21022, version=21022,

count=2, id=25, version=9210,

count=1, id=29, version=9178,

count=2, id=262, version=35222,

count=58, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,

count=1, id=48, version=9044,

count=2, id=203, productName=VS2012 UPD3 build 60610, version=60610,

count=2, id=257, productName=VS2015 [14.0] build 23026, version=23026,

count=5, id=261, productName=VS2019 v16.11.1 build 30133, version=30133,

count=117, id=261, productName=VS2019 v16.4.4 build 28316, version=28316,

count=2, productName=Unmarked objects (old),

count=2, id=253, version=35721,

count=18, id=260, version=35721,

count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=2, id=156, version=21202,

count=2, id=123, productName=VS2005 build 50727, version=50727,

count=28, id=259, version=35721,

count=107, id=261, version=35721,

count=1, id=260, version=36248,

count=271, id=261, version=36248,

count=40, id=260, version=35222,

count=25, id=257, version=35222,

count=706, id=1, productName=Unmarked objects,

count=110, id=265, version=36248,

count=1, id=256, version=36248,

count=1, id=255, version=36248,

count=1, id=258, version=36248,