c0ed39ea4fb61dd630fe76674bdbe513b0a6fcc3fb78fa43d31746f3b2a9ee6d

Sharing

Copy URL Twitter E-mail

General

Target
c0ed39ea4fb61dd630fe76674bdbe513b0a6fcc3fb78fa43d31746f3b2a9ee6d
Size 6.9MB
Sample260916-qvrm3a1dqc
SHA256 c0ed39ea4fb61dd630fe76674bdbe513b0a6fcc3fb78fa43d31746f3b2a9ee6d
MD5 28a53c955cbdcee89afb3e5934547c33
SHA1 a4bbf12e86e74857f09581c6349566332c8c0ad8
SHA512 c143fa4383f53074da56a8c804441db1168ab582487cd1fcb6f2a018d7d00e17a9a1952e61c0af184f2f74b4cd0896d0271175cfe89aec34efb98ace57014c09
SSDEEP 98304:HXOJDMg+X8IhWcY03Bt6e70cMrf/+O1W1AX/5OlSTrdJeduGL:H+Jog+MIh60xt64FgxwB
TLSH
T1BF769D20B602D035E9E310B6C9BD6FFE466CAD110B5925D3D3C83D6EDA716E23A3254B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0ed39ea4fb61dd630fe76674bdbe513b0a6fcc3fb78fa43d31746f3b2a9ee6d

File Explorer

c0ed39ea4fb61dd630fe76674bdbe513b0a6fcc3fb78fa43d31746f3b2a9ee6d

.exe 6.9MB

c0ed39ea4fb61dd630fe76674bdbe513b0a6fcc3fb78fa43d31746f3b2a9ee6d

IMPHASH 2cec285b44cec5f3aa5644659b55c23c
SHA256 c0ed39ea4fb61dd630fe76674bdbe513b0a6fcc3fb78fa43d31746f3b2a9ee6d
MD5 28a53c955cbdcee89afb3e5934547c33
SHA1 a4bbf12e86e74857f09581c6349566332c8c0ad8
SHA512 c143fa4383f53074da56a8c804441db1168ab582487cd1fcb6f2a018d7d00e17a9a1952e61c0af184f2f74b4cd0896d0271175cfe89aec34efb98ace57014c09
SSDEEP 98304:HXOJDMg+X8IhWcY03Bt6e70cMrf/+O1W1AX/5OlSTrdJeduGL:H+Jog+MIh60xt64FgxwB
TLSH
T1BF769D20B602D035E9E310B6C9BD6FFE466CAD110B5925D3D3C83D6EDA716E23A3254B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3359271

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\darkr\Desktop\.client\Client.pdb

kernel32

VirtualQuery GetWindowsDirectoryW GetSystemDirectoryW GetPriorityClass OpenThread CreateThread TerminateProcess ExitProcess CreateMutexA ReleaseMutex RemoveVectoredExceptionHandler AddVectoredExceptionHandler OutputDebugStringA WriteFile ReadFile GetFullPathNameW WriteConsoleW SetEndOfFile HeapQueryInformation HeapSize OutputDebugStringW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW HeapReAlloc SetFileAttributesW GetTimeZoneInformation GetFileAttributesW DeleteFileA CreateFileW CreateDirectoryW GetCurrentDirectoryA GetEnvironmentVariableW GetCommandLineW GetCurrentDirectoryW GetTickCount ReadProcessMemory GetModuleHandleExW GetCurrentProcessId GetCurrentProcess GetLastError FindNextFileA FindFirstFileA FindClose MultiByteToWideChar SetFileAttributesA QueryPerformanceFrequency QueryPerformanceCounter CreateProcessW GetExitCodeProcess SetStdHandle SetCurrentDirectoryW ReadConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetFileAttributesExW MoveFileExW DeleteFileW Module32Next GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW LoadLibraryW GetModuleFileNameA FlsFree FlsSetValue FlsGetValue FlsAlloc SetFilePointerEx SetConsoleCtrlHandler FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetFileInformationByHandle GetDriveTypeW FreeLibraryAndExitThread ResumeThread ExitThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount InterlockedFlushSList InterlockedPushEntrySList RtlUnwind RaiseException GetFileSizeEx VerifyVersionInfoA VerSetConditionMask FormatMessageW WaitForMultipleObjects GetFileType GetStdHandle GetEnvironmentVariableA MoveFileExA SleepEx GetThreadTimes GetCurrentThread WaitNamedPipeW PeekNamedPipe SetLastError GetStartupInfoW IsDebuggerPresent InitializeSListHead SetUnhandledExceptionFilter UnhandledExceptionFilter FindResourceW FindResourceA SizeofResource LoadResource LockResource IsProcessorFeaturePresent InterlockedDecrement HeapValidate InterlockedIncrement GetCPInfo CompareStringEx CreateSymbolicLinkW GetFileInformationByHandleEx CloseThreadpoolWait SetThreadpoolWait CreateThreadpoolWait CloseThreadpoolTimer WaitForThreadpoolTimerCallbacks SetThreadpoolTimer CreateThreadpoolTimer FreeLibraryWhenCallbackReturns GetTickCount64 GetSystemTimeAsFileTime GetCurrentProcessorNumber FlushProcessWriteBuffers CreateSemaphoreExW CreateEventExW InitOnceExecuteOnce GetTempPathW SetFileInformationByHandle SleepConditionVariableSRW GetModuleFileNameW IsThreadAFiber GetModuleHandleW GlobalFree lstrlenA QueryFullProcessImageNameW GetPrivateProfileStringA MoveFileA WideCharToMultiByte Process32FirstW Process32NextW Thread32First Thread32Next Module32FirstW VirtualProtect Module32NextW Module32First Process32Next Process32First CreateToolhelp32Snapshot GetSystemInfo OpenProcess SetThreadPriority Sleep CreateEventA WaitForSingleObject SetEvent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection WakeAllConditionVariable WakeConditionVariable GetLocalTime GetFileAttributesA CreateDirectoryA LoadLibraryA GetProcAddress FreeLibrary GetProcessHeap HeapFree LCMapStringEx DecodePointer EncodePointer GetLocaleInfoEx LocalFree InitializeCriticalSectionEx TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive GetStringTypeW GetNativeSystemInfo GetExitCodeThread GetCurrentThreadId SwitchToThread WaitForSingleObjectEx FormatMessageA CopyFileA CreateSemaphoreA ReleaseSemaphore GetLocaleInfoA CompareStringA lstrlenW GlobalLock GlobalUnlock GetVersionExA GetSystemDirectoryA GetModuleHandleA SetFilePointer GetFileSize CreateFileMappingA UnmapViewOfFile MapViewOfFile GlobalAlloc GetTempFileNameA GetTempPathA RemoveDirectoryA AllocConsole HeapAlloc DeviceIoControl CloseHandle EnumSystemLocalesW CreateFileA

user32

EndPaint TrackMouseEvent DefWindowProcA UnregisterClassA RegisterClassExA CreateWindowExA IsWindow DestroyWindow ShowWindow MoveWindow SetWindowPos SetFocus BeginPaint UpdateWindow DrawTextA GetClientRect SetCapture ReleaseCapture SetCursor PtInRect LoadCursorA PostQuitMessage GetAsyncKeyState GetSystemMetrics GetCursorPos ScreenToClient FindWindowA LoadIconA SystemParametersInfoA GetKeyState ShowCursor DestroyCursor LoadImageA GetMonitorInfoA MonitorFromPoint CharNextW GetClipboardData ClientToScreen CloseClipboard OpenClipboard GetKeyboardLayout GetKeyboardLayoutNameA DispatchMessageA TranslateMessage GetMessageA SetWindowLongA GetWindowLongA AdjustWindowRectEx GetCapture ChangeDisplaySettingsA PeekMessageA GetDC ReleaseDC FillRect SetRect OffsetRect LoadStringA IsWindowVisible GetWindowTextW GetWindowTextLengthW MessageBoxA EnumWindows GetWindowRect SetWindowTextA GetMenu RegisterClassA CharPrevExA InvalidateRect CharNextExA SetCursorPos

gdi32

GetTextExtentPoint32W TextOutW GetDeviceCaps GetCharABCWidthsFloatW SetTextColor PatBlt StretchBlt GetTextExtentPoint32A CreateFontIndirectA TextOutA CreateDIBSection SetDIBitsToDevice SetBkColor DeleteDC CreateCompatibleDC GetStockObject EnumFontFamiliesExA CreateFontA CreatePen CreateSolidBrush DeleteObject RoundRect GetPixel SelectObject SetBkMode

advapi32

RegOpenKeyExA RegQueryValueExW RegQueryValueExA RegOpenKeyA RegCloseKey CryptAcquireContextA CryptReleaseContext CryptGetHashParam CryptCreateHash CryptHashData CryptDestroyHash RegCreateKeyExW RegSetValueExW CryptGenRandom CryptDestroyKey CryptImportKey CryptEncrypt RegOpenKeyExW

shell32

ShellExecuteA SHGetSpecialFolderPathA

ole32

CoInitializeEx CoCreateInstance CoInitialize CoUninitialize

winmm

timeGetTime timeBeginPeriod timeEndPeriod timeGetDevCaps

d3d8

Direct3DCreate8

python27

PyErr_Print PyString_FromString PyModule_AddObject PyErr_Clear Py_IsInitialized PyErr_Occurred PyList_GetItem PyErr_SetString PyDict_Size PyDict_Next PyInt_AsLong PyList_Append PyTuple_Size Py_BuildValue Py_InitModule4 PyModule_AddIntConstant PyLong_AsLong PyTuple_GetItem PyDict_GetItemString PyArg_ParseTuple PyString_AsString PyThreadState_Get PyTuple_New PyTuple_SetItem PyLong_FromLongLong PyModule_AddStringConstant PyImport_ImportModule PyString_InternFromString PyObject_GetAttrString PyObject_GetAttr PyCallable_Check PyLong_AsLongLong PyInt_FromLong PyErr_BadArgument PyObject_CallObject PyNumber_Check _Py_NoneStruct PyDict_SetItemString PyModule_GetDict PyErr_Fetch Py_SetProgramName Py_Initialize Py_Finalize PyRun_StringFlags PyEval_SetTrace Py_FlushLine PyImport_GetMagicNumber PyImport_AddModule PyObject_AsCharBuffer PyCode_Addr2Line PyEval_EvalCode Py_OptimizeFlag PyCode_Type PyUnicodeUCS2_DecodeUTF8 _PyLong_FromByteArray PyFloat_FromDouble PyComplex_FromCComplex PyString_FromStringAndSize PyList_SetItem PyDict_New PyDict_SetItem PyErr_NoMemory PyEval_GetRestricted PyCode_New PyMarshal_ReadObjectFromString _PyLong_New _Py_EllipsisObject PyExc_StopIteration PyExc_EOFError PyExc_ValueError PyFloat_AsDouble PyList_New PyList_Size PyExc_RuntimeError Py_IncRef

libcef

cef_stream_reader_create_for_handler cef_stream_reader_create_for_data cef_stream_reader_create_for_file cef_post_data_element_create cef_print_settings_create cef_menu_model_create cef_post_data_create cef_response_create cef_v8stack_trace_get_current cef_media_router_get_global cef_cookie_manager_get_global_manager cef_stream_writer_create_for_handler cef_stream_writer_create_for_file cef_image_create cef_list_value_create cef_urlrequest_create cef_process_message_create cef_request_create cef_string_multimap_free cef_string_multimap_alloc cef_create_context_shared cef_request_context_create_context cef_request_context_get_global_context cef_drag_data_create cef_dictionary_value_create cef_v8value_create_function cef_v8value_create_array_buffer cef_v8value_create_array cef_v8value_create_object cef_v8value_create_string cef_v8value_create_date cef_v8value_create_double cef_v8value_create_uint cef_v8value_create_int cef_v8value_create_bool cef_v8value_create_null cef_v8value_create_undefined cef_task_runner_get_for_thread cef_task_runner_get_for_current_thread cef_string_multimap_append cef_string_multimap_value cef_string_multimap_key cef_string_multimap_size cef_string_map_append cef_string_map_value cef_string_map_key cef_string_map_size cef_string_list_append cef_string_list_value cef_string_list_size cef_value_create cef_binary_value_create cef_browser_host_create_browser_sync cef_browser_host_create_browser cef_command_line_get_global cef_command_line_create cef_string_map_free cef_string_map_alloc cef_v8context_in_context cef_v8context_get_entered_context cef_v8context_get_current_context cef_string_wide_to_utf8 cef_log cef_api_hash cef_execute_java_script_with_user_gesture_for_tests cef_register_widevine_cdm cef_is_web_plugin_unstable cef_register_web_plugin_crash cef_unregister_internal_web_plugin cef_refresh_web_plugins cef_visit_web_plugin_info cef_now_from_system_trace_time cef_end_tracing cef_begin_tracing cef_is_cert_status_error cef_launch_process cef_get_path cef_uridecode cef_string_utf16_clear cef_string_utf8_to_utf16 cef_string_utf8_clear cef_string_utf16_to_utf8 cef_string_utf16_cmp cef_write_json cef_parse_jsonand_return_error cef_parse_json cef_uriencode cef_base64decode cef_base64encode cef_get_extensions_for_mime_type cef_get_mime_type cef_string_utf16_set cef_string_userfree_utf16_free cef_string_list_alloc cef_string_list_free cef_currently_on cef_post_task cef_post_delayed_task cef_register_extension cef_register_scheme_handler_factory cef_clear_scheme_handler_factories cef_execute_process cef_initialize cef_shutdown cef_do_message_loop_work cef_run_message_loop cef_quit_message_loop cef_set_osmodal_loop cef_enable_highdpi_support cef_crash_reporting_enabled cef_set_crash_key_value cef_create_directory cef_get_temp_directory cef_create_new_temp_directory cef_create_temp_directory_in_directory cef_directory_exists cef_delete_file cef_zip_directory cef_load_crlsets_file cef_add_cross_origin_whitelist_entry cef_remove_cross_origin_whitelist_entry cef_clear_cross_origin_whitelist cef_parse_url cef_create_url cef_format_url_for_security_display

iphlpapi

GetAdaptersInfo GetPerAdapterInfo

imm32

ImmGetOpenStatus ImmSetConversionStatus ImmGetConversionStatus ImmGetCandidateListW ImmSetCompositionStringW ImmGetCompositionStringW ImmAssociateContext ImmReleaseContext ImmGetContext ImmIsIME ImmGetIMEFileNameA ImmNotifyIME

devil

ilInit ilTexImage ilSetPixels ilSave ilShutDown ilOriginFunc ilEnable ilCopyPixels ilConvertImage ilLoad ilGetInteger ilGenImages ilDeleteImages ilBindImage

wintrust

WinVerifyTrust

crypt32

CryptStringToBinaryA CertEnumCertificatesInStore CertOpenStore CertAddCertificateContextToStore CertFindExtension CertGetNameStringA CertCreateCertificateChainEngine CertFreeCertificateChainEngine CryptMsgClose CryptDecodeObjectEx CryptMsgGetParam CertCloseStore CertFindCertificateInStore CertFreeCertificateContext CertGetNameStringW CryptQueryObject CertFreeCertificateChain PFXImportCertStore CertGetCertificateChain

wininet

InternetReadFile InternetOpenUrlA InternetOpenA InternetCloseHandle

version

GetFileVersionInfoSizeA VerQueryValueA GetFileVersionInfoA

granny2

_GrannyGetSourceSkeleton@4 _GrannySetModelClock@8 _GrannyFreeCompletedModelControls@4 _GrannySampleModelAnimationsAccelerated@20 _GrannyUpdateModelMatrix@20 _GrannyNewLocalPose@4 _GrannyFreeLocalPose@4 _GrannyGetWorldPoseComposite4x4Array@4 _GrannyInstantiateModel@4 _GrannyFreeModelInstance@4 _GrannyNewMeshBinding@12 _GrannyFreeMeshBinding@4 _GrannyGetMeshBindingToBoneIndices@4 _GrannyFindBoneByName@12 _GrannyNewWorldPose@4 _GrannyFreeWorldPose@4 _GrannyGetWorldPose4x4@8 _GrannyGetWorldPoseComposite4x4@8 _GrannyGetTotalTypeSize@4 _GrannyGetMeshVertexCount@4 _GrannyMeshIsRigid@4 _GrannyGetFileInfo@4 _GrannyFreeFile@4 _GrannyFreeFileSection@8 _GrannyReadEntireFileFromMemory@8 _GrannyGetMeshIndexCount@4 _GrannyFreeControl@4 _GrannyConvertSingleObject@20 _GrannyFreeControlOnceUnused@4 _GrannyCompleteControlAt@8 _GrannyControlIsComplete@4 GrannyPNT332VertexType _GrannyDeformVertices@24 _GrannyFreeMeshDeformer@4 _GrannyNewMeshDeformer@16 _GrannyCopyMeshIndices@12 _GrannyGetMeshVertices@4 _GrannyCopyMeshVertices@12 _GrannyGetMeshVertexType@4 _GrannyGetMeshTriangleGroups@4 _GrannyGetMeshTriangleGroupCount@4 _GrannyPlayControlledAnimation@12 _GrannySetControlRawLocalClock@8 _GrannyGetControlRawLocalClock@4 _GrannySetControlEaseOutCurve@28 _GrannySetControlEaseOut@8 _GrannySetControlEaseInCurve@28 _GrannySetControlEaseIn@8 _GrannyGetControlLocalDuration@4 _GrannySetControlSpeed@8 _GrannyGetControlSpeed@4 _GrannySetControlLoopCount@8 _GrannyGetControlLoopCount@4 _GrannyFindMatchingMember@16 _GrannyFreeControlIfComplete@4 _GrannyGetMaterialTextureByType@8

mss32

_AIL_3D_sample_status@4 _AIL_3D_sample_volume@4 _AIL_file_read@8 _AIL_update_3D_position@8 _AIL_set_file_callbacks@16 _AIL_auto_update_3D_position@8 _AIL_WAV_info@8 _AIL_set_3D_sample_loop_count@8 _AIL_decompress_ASI@24 _AIL_decompress_ADPCM@12 _AIL_file_type@8 _AIL_open_digital_driver@16 _AIL_open_stream@12 _AIL_close_digital_driver@4 _AIL_enumerate_3D_providers@12 _AIL_open_3D_provider@4 _AIL_close_3D_provider@4 _AIL_open_3D_listener@4 _AIL_close_3D_listener@4 _AIL_set_3D_position@16 _AIL_set_3D_velocity@20 _AIL_set_3D_orientation@28 _AIL_startup@0 _AIL_shutdown@0 _AIL_set_redist_directory@4 _AIL_close_stream@4 _AIL_start_stream@4 _AIL_pause_stream@8 _AIL_set_stream_volume_levels@12 _AIL_stream_volume_levels@12 _AIL_set_stream_loop_count@8 _AIL_stream_status@4 _AIL_last_error@0 _AIL_allocate_sample_handle@4 _AIL_release_sample_handle@4 _AIL_init_sample@4 _AIL_set_sample_file@12 _AIL_start_sample@4 _AIL_stop_sample@4 _AIL_resume_sample@4 _AIL_end_sample@4 _AIL_set_sample_volume_pan@12 _AIL_set_sample_loop_count@8 _AIL_sample_status@4 _AIL_sample_volume_pan@12 _AIL_allocate_3D_sample_handle@4 _AIL_release_3D_sample_handle@4 _AIL_start_3D_sample@4 _AIL_stop_3D_sample@4 _AIL_resume_3D_sample@4 _AIL_end_3D_sample@4 _AIL_set_3D_sample_file@8 _AIL_set_3D_sample_volume@8 _AIL_mem_free_lock@4

speedtreert

?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ ?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z ?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z ?SetLodLevel@CSpeedTreeRT@@QAEXM@Z ?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ ?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z ?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z ?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z ?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z ?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z ?GetCurrentError@CSpeedTreeRT@@SAPBDXZ ?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z ?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z ?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z ?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ ?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z ?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z ?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z ?DeleteTransientData@CSpeedTreeRT@@QAEXXZ ?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ ?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z ??3CSpeedTreeRT@@SAXPAX@Z ??2CSpeedTreeRT@@SAPAXI@Z ??1CSpeedTreeRT@@QAE@XZ ??0CSpeedTreeRT@@QAE@XZ ??1STextures@CSpeedTreeRT@@QAE@XZ ??0STextures@CSpeedTreeRT@@QAE@XZ ??1SGeometry@CSpeedTreeRT@@QAE@XZ ??0SGeometry@CSpeedTreeRT@@QAE@XZ ?SetCamera@CSpeedTreeRT@@SAXPBM0@Z ?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z ?SetLightState@CSpeedTreeRT@@SAXI_N@Z ?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z ?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z ?SetTime@CSpeedTreeRT@@SAXM@Z ?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ ?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z ?GetLeafLightingAdjustment@CSpeedTreeRT@@QBEMXZ ?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z

dinput8

DirectInput8Create

ws2_32

gethostname gethostbyname ntohs ntohl inet_addr htons htonl WSACleanup WSAStartup sendto recvfrom WSAEventSelect WSAEnumNetworkEvents WSACreateEvent WSACloseEvent freeaddrinfo getaddrinfo listen accept WSAIoctl WSAGetLastError socket send select recv getsockopt ioctlsocket connect closesocket __WSAFDIsSet inet_ntoa WSASetLastError setsockopt getsockname getpeername bind

ddraw

DirectDrawCreate

bcrypt

BCryptGenRandom BCryptCloseAlgorithmProvider BCryptOpenAlgorithmProvider

oleaut32

SysFreeString VariantClear

wldap32

ord50 ord60 ord22 ord46 ord143 ord41 ord45 ord211 ord217 ord26 ord301 ord200 ord30 ord79 ord35 ord33 ord32 ord27

normaliz

IdnToAscii IdnToUnicode

??0Config@libconfig@@QAE@XZ ??0ConfigException@libconfig@@QAE@$$QAV01@@Z ??0ConfigException@libconfig@@QAE@ABV01@@Z ??0ConfigException@libconfig@@QAE@XZ ??0FileIOException@libconfig@@QAE@$$QAV01@@Z ??0FileIOException@libconfig@@QAE@ABV01@@Z ??0FileIOException@libconfig@@QAE@XZ ??0ParseException@libconfig@@AAE@PBDH0@Z ??0ParseException@libconfig@@QAE@ABV01@@Z ??0Setting@libconfig@@AAE@PAUconfig_setting_t@@@Z ??0SettingException@libconfig@@IAE@ABVSetting@1@@Z ??0SettingException@libconfig@@IAE@ABVSetting@1@H@Z ??0SettingException@libconfig@@IAE@ABVSetting@1@PBD@Z ??0SettingException@libconfig@@IAE@PBD@Z ??0SettingException@libconfig@@QAE@ABV01@@Z ??0SettingNameException@libconfig@@AAE@ABVSetting@1@PBD@Z ??0SettingNameException@libconfig@@QAE@$$QAV01@@Z ??0SettingNameException@libconfig@@QAE@ABV01@@Z ??0SettingNotFoundException@libconfig@@AAE@ABVSetting@1@H@Z ??0SettingNotFoundException@libconfig@@AAE@ABVSetting@1@PBD@Z ??0SettingNotFoundException@libconfig@@AAE@PBD@Z ??0SettingNotFoundException@libconfig@@QAE@$$QAV01@@Z ??0SettingNotFoundException@libconfig@@QAE@ABV01@@Z ??0SettingTypeException@libconfig@@AAE@ABVSetting@1@@Z ??0SettingTypeException@libconfig@@AAE@ABVSetting@1@H@Z ??0SettingTypeException@libconfig@@AAE@ABVSetting@1@PBD@Z ??0SettingTypeException@libconfig@@QAE@$$QAV01@@Z ??0SettingTypeException@libconfig@@QAE@ABV01@@Z ??1Config@libconfig@@UAE@XZ ??1ConfigException@libconfig@@UAE@XZ ??1FileIOException@libconfig@@UAE@XZ ??1ParseException@libconfig@@UAE@XZ ??1Setting@libconfig@@UAE@XZ ??1SettingException@libconfig@@UAE@XZ ??1SettingNameException@libconfig@@UAE@XZ ??1SettingNotFoundException@libconfig@@UAE@XZ ??1SettingTypeException@libconfig@@UAE@XZ ??4ConfigException@libconfig@@QAEAAV01@$$QAV01@@Z ??4ConfigException@libconfig@@QAEAAV01@ABV01@@Z ??4FileIOException@libconfig@@QAEAAV01@$$QAV01@@Z ??4FileIOException@libconfig@@QAEAAV01@ABV01@@Z ??4ParseException@libconfig@@QAEAAV01@ABV01@@Z ??4Setting@libconfig@@QAEAAV01@ABN@Z ??4Setting@libconfig@@QAEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??4Setting@libconfig@@QAEAAV01@AB_J@Z ??4Setting@libconfig@@QAEAAV01@H@Z ??4Setting@libconfig@@QAEAAV01@J@Z ??4Setting@libconfig@@QAEAAV01@M@Z ??4Setting@libconfig@@QAEAAV01@PBD@Z ??4Setting@libconfig@@QAEAAV01@_N@Z ??4SettingException@libconfig@@QAEAAV01@ABV01@@Z ??4SettingNameException@libconfig@@QAEAAV01@$$QAV01@@Z ??4SettingNameException@libconfig@@QAEAAV01@ABV01@@Z ??4SettingNotFoundException@libconfig@@QAEAAV01@$$QAV01@@Z ??4SettingNotFoundException@libconfig@@QAEAAV01@ABV01@@Z ??4SettingTypeException@libconfig@@QAEAAV01@$$QAV01@@Z ??4SettingTypeException@libconfig@@QAEAAV01@ABV01@@Z ??ASetting@libconfig@@QBEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??ASetting@libconfig@@QBEAAV01@H@Z ??ASetting@libconfig@@QBEAAV01@PBD@Z ??BSetting@libconfig@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ??BSetting@libconfig@@QBEHXZ ??BSetting@libconfig@@QBEIXZ ??BSetting@libconfig@@QBEJXZ ??BSetting@libconfig@@QBEKXZ ??BSetting@libconfig@@QBEMXZ ??BSetting@libconfig@@QBENXZ ??BSetting@libconfig@@QBEPBDXZ ??BSetting@libconfig@@QBE_JXZ ??BSetting@libconfig@@QBE_KXZ ??BSetting@libconfig@@QBE_NXZ ??_7Config@libconfig@@6B@ ??_7ConfigException@libconfig@@6B@ ??_7FileIOException@libconfig@@6B@ ??_7ParseException@libconfig@@6B@ ??_7Setting@libconfig@@6B@ ??_7SettingException@libconfig@@6B@ ??_7SettingNameException@libconfig@@6B@ ??_7SettingNotFoundException@libconfig@@6B@ ??_7SettingTypeException@libconfig@@6B@ ?ConfigDestructor@Config@libconfig@@CAXPAX@Z ?add@Setting@libconfig@@QAEAAV12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4Type@12@@Z ?add@Setting@libconfig@@QAEAAV12@PBDW4Type@12@@Z ?add@Setting@libconfig@@QAEAAV12@W4Type@12@@Z ?assertType@Setting@libconfig@@ABEXW4Type@12@@Z ?c_str@Setting@libconfig@@QBEPBDXZ ?exists@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?exists@Config@libconfig@@QBE_NPBD@Z ?exists@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?exists@Setting@libconfig@@QBE_NPBD@Z ?getAutoConvert@Config@libconfig@@QBE_NXZ ?getDefaultFormat@Config@libconfig@@QBE?AW4Format@Setting@2@XZ ?getError@ParseException@libconfig@@QBEPBDXZ ?getFile@ParseException@libconfig@@QBEPBDXZ ?getFormat@Setting@libconfig@@QBE?AW4Format@12@XZ ?getIncludeDir@Config@libconfig@@QBEPBDXZ ?getIndex@Setting@libconfig@@QBEHXZ ?getLength@Setting@libconfig@@QBEHXZ ?getLine@ParseException@libconfig@@QBEHXZ ?getName@Setting@libconfig@@QBEPBDXZ ?getParent@Setting@libconfig@@QAEAAV12@XZ ?getParent@Setting@libconfig@@QBEABV12@XZ ?getPath@Setting@libconfig@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?getPath@SettingException@libconfig@@QBEPBDXZ ?getRoot@Config@libconfig@@QBEAAVSetting@2@XZ ?getSourceFile@Setting@libconfig@@QBEPBDXZ ?getSourceLine@Setting@libconfig@@QBEIXZ ?getTabWidth@Config@libconfig@@QBEGXZ ?getType@Setting@libconfig@@QBE?AW4Type@12@XZ ?handleError@Config@libconfig@@ABEXXZ ?isAggregate@Setting@libconfig@@QBE_NXZ ?isArray@Setting@libconfig@@QBE_NXZ ?isGroup@Setting@libconfig@@QBE_NXZ ?isList@Setting@libconfig@@QBE_NXZ ?isNumber@Setting@libconfig@@QBE_NXZ ?isRoot@Setting@libconfig@@QBE_NXZ ?isScalar@Setting@libconfig@@QBE_NXZ ?lookup@Config@libconfig@@QBEAAVSetting@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?lookup@Config@libconfig@@QBEAAVSetting@2@PBD@Z ?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAH@Z ?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAI@Z ?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAM@Z ?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAN@Z ?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAPBD@Z ?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV34@@Z ?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_J@Z ?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_K@Z ?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_N@Z ?lookupValue@Config@libconfig@@QBE_NPBDAAH@Z ?lookupValue@Config@libconfig@@QBE_NPBDAAI@Z ?lookupValue@Config@libconfig@@QBE_NPBDAAM@Z ?lookupValue@Config@libconfig@@QBE_NPBDAAN@Z ?lookupValue@Config@libconfig@@QBE_NPBDAAPBD@Z ?lookupValue@Config@libconfig@@QBE_NPBDAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?lookupValue@Config@libconfig@@QBE_NPBDAA_J@Z ?lookupValue@Config@libconfig@@QBE_NPBDAA_K@Z ?lookupValue@Config@libconfig@@QBE_NPBDAA_N@Z ?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAH@Z ?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAI@Z ?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAM@Z ?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAN@Z ?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAPBD@Z ?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV34@@Z ?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_J@Z ?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_K@Z ?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_N@Z ?lookupValue@Setting@libconfig@@QBE_NPBDAAH@Z ?lookupValue@Setting@libconfig@@QBE_NPBDAAI@Z ?lookupValue@Setting@libconfig@@QBE_NPBDAAM@Z ?lookupValue@Setting@libconfig@@QBE_NPBDAAN@Z ?lookupValue@Setting@libconfig@@QBE_NPBDAAPBD@Z ?lookupValue@Setting@libconfig@@QBE_NPBDAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?lookupValue@Setting@libconfig@@QBE_NPBDAA_J@Z ?lookupValue@Setting@libconfig@@QBE_NPBDAA_K@Z ?lookupValue@Setting@libconfig@@QBE_NPBDAA_N@Z ?read@Config@libconfig@@QAEXPAU_iobuf@@@Z ?readFile@Config@libconfig@@QAEXPBD@Z ?readString@Config@libconfig@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?readString@Config@libconfig@@QAEXPBD@Z ?remove@Setting@libconfig@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?remove@Setting@libconfig@@QAEXI@Z ?remove@Setting@libconfig@@QAEXPBD@Z ?setAutoConvert@Config@libconfig@@QAEX_N@Z ?setDefaultFormat@Config@libconfig@@QAEXW4Format@Setting@2@@Z ?setFormat@Setting@libconfig@@QAEXW4Format@12@@Z ?setIncludeDir@Config@libconfig@@QAEXPBD@Z ?setTabWidth@Config@libconfig@@QAEXG@Z ?what@FileIOException@libconfig@@UBEPBDXZ ?what@ParseException@libconfig@@UBEPBDXZ ?what@SettingException@libconfig@@UBEPBDXZ ?what@SettingNameException@libconfig@@UBEPBDXZ ?what@SettingNotFoundException@libconfig@@UBEPBDXZ ?what@SettingTypeException@libconfig@@UBEPBDXZ ?wrapSetting@Setting@libconfig@@CAAAV12@PAUconfig_setting_t@@@Z ?write@Config@libconfig@@QBEXPAU_iobuf@@@Z ?writeFile@Config@libconfig@@QAEXPBD@Z AmdPowerXpressRequestHighPerformance NvOptimusEnablement

Name

.text

Size

5.3MB

Virtual Size

5.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

844KB

Virtual Size

844KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

189KB

Virtual Size

718KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

330KB

Virtual Size

329KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

220KB

Virtual Size

219KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=43, id=260, version=30706,

count=56, id=259, version=33145,

count=228, id=261, version=33145,

count=4, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=111, id=260, productName=VS2019 v16.4.3 build 28315, version=28315,

count=1, id=262, version=33145,

count=58, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,

count=1, id=48, version=9044,

count=35, id=261, productName=VS2019 v16.9.2 build 29913, version=29913,

count=6, id=265, version=35221,

count=2, id=257, productName=VS2015 [14.0] build 23026, version=23026,

count=117, id=261, productName=VS2019 v16.4.4 build 28316, version=28316,

count=9, id=253, version=35207,

count=29, id=259, version=35207,

count=20, id=260, version=35207,

count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=3, id=28, version=9178,

count=76, id=29, version=9178,

count=1, id=18, version=8444,

count=10, productName=Unmarked objects (old),

count=4, id=25, version=9210,

count=98, id=261, version=35207,

count=38, id=260, version=33145,

count=39, id=257, version=33145,

count=780, id=1, productName=Unmarked objects,

count=318, id=261, version=35221,

count=1, id=256, version=35221,

count=1, id=255, version=35221,

count=1, id=151,

count=1, id=258, version=35221,