23c24daa923d1f5f3a3a21c8552cac2f665008e7fed5c2f2db56af1f803ef5d4

Sharing

Copy URL Twitter E-mail

General

Target
23c24daa923d1f5f3a3a21c8552cac2f665008e7fed5c2f2db56af1f803ef5d4
Size 5.3MB
Sample260922-lldmmada66
SHA256 23c24daa923d1f5f3a3a21c8552cac2f665008e7fed5c2f2db56af1f803ef5d4
MD5 8b42b3b49166a4005c5c4ff4ebbc0c91
SHA1 4cfe932a8f57a8e115803d989e88239e775aac9a
SHA512 b7ff47a439bcdc2191f330682bdfa41243b6dcbff606bd7bfbd598619d57cd999b7e58bc3dc455d61499884734484ca22231582ba456cd45c781170bd4a936e0
SSDEEP 98304:fXsnVrJ841PrRKdbln/C0nV7YOBWHOM8LOJ2PyM0tj:fXw/841PrwNFiJ3M0
TLSH
T12346AF207502C071EAC211B5997DBFEF46ECA5341BB565D3A3D41E6ECD602C33B32A6A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23c24daa923d1f5f3a3a21c8552cac2f665008e7fed5c2f2db56af1f803ef5d4

File Explorer

23c24daa923d1f5f3a3a21c8552cac2f665008e7fed5c2f2db56af1f803ef5d4

.exe 5.3MB

23c24daa923d1f5f3a3a21c8552cac2f665008e7fed5c2f2db56af1f803ef5d4

IMPHASH 9a03a512771b1c500a53e1f52352d681
SHA256 23c24daa923d1f5f3a3a21c8552cac2f665008e7fed5c2f2db56af1f803ef5d4
MD5 8b42b3b49166a4005c5c4ff4ebbc0c91
SHA1 4cfe932a8f57a8e115803d989e88239e775aac9a
SHA512 b7ff47a439bcdc2191f330682bdfa41243b6dcbff606bd7bfbd598619d57cd999b7e58bc3dc455d61499884734484ca22231582ba456cd45c781170bd4a936e0
SSDEEP 98304:fXsnVrJ841PrRKdbln/C0nV7YOBWHOM8LOJ2PyM0tj:fXw/841PrwNFiJ3M0
TLSH
T12346AF207502C071EAC211B5997DBFEF46ECA5341BB565D3A3D41E6ECD602C33B32A6A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2998327

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\SRV\Thronia2 - Beta Version\Oceanis2.pdb

kernel32

FindNextFileA FindFirstFileA SetEndOfFile WriteConsoleW OutputDebugStringW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindFirstFileExW HeapQueryInformation HeapSize HeapReAlloc GetExitCodeProcess SetStdHandle SetCurrentDirectoryW SetConsoleCtrlHandler MoveFileExW GetTimeZoneInformation ReadConsoleW GetFileSizeEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers FindClose SetFileAttributesA GetTickCount SetThreadPriority GetCurrentThread WideCharToMultiByte MultiByteToWideChar GetModuleFileNameW CreateProcessW Module32First GetCurrentProcessId CreateMutexA ReleaseMutex GetTempPathW WriteFile GetFileAttributesExW DeleteFileW CreateFileW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect IsThreadAFiber FlsFree FlsSetValue FlsGetValue FlsAlloc GetStdHandle ExitProcess GetFullPathNameW FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetFileType CreateDirectoryW GetDriveTypeW GetModuleHandleExW FreeLibraryAndExitThread ResumeThread ExitThread CreateThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount InterlockedFlushSList InterlockedPushEntrySList RtlUnwind RaiseException SetFilePointerEx OutputDebugStringA WaitNamedPipeW PeekNamedPipe GetStartupInfoW Module32Next InitializeSListHead IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo CompareStringEx CreateSymbolicLinkW GetFileInformationByHandleEx GetModuleHandleW CloseThreadpoolWait SetThreadpoolWait CreateThreadpoolWait CloseThreadpoolTimer WaitForThreadpoolTimerCallbacks SetThreadpoolTimer CreateThreadpoolTimer FreeLibraryWhenCallbackReturns GetSystemTimeAsFileTime GetCurrentProcessorNumber FlushProcessWriteBuffers CreateSemaphoreExW CreateEventExW InitOnceExecuteOnce SetFileInformationByHandle LCMapStringEx DecodePointer EncodePointer GetLocaleInfoEx LocalFree InitializeCriticalSectionEx WakeAllConditionVariable WakeConditionVariable GetTickCount64 SleepConditionVariableSRW TryAcquireSRWLockShared AcquireSRWLockShared ReleaseSRWLockShared TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive GetStringTypeW GetNativeSystemInfo GetExitCodeThread GetCurrentThreadId SwitchToThread WaitForSingleObjectEx FormatMessageA SetProcessWorkingSetSize DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CreateSemaphoreA WaitForSingleObject ReleaseSemaphore GetLocaleInfoA CompareStringA lstrlenW GlobalLock GlobalUnlock GetVersionExA GetSystemDirectoryA GetModuleHandleA SetFilePointer ReadFile GetFileSize CreateFileMappingA UnmapViewOfFile MapViewOfFile GetSystemInfo GetTempFileNameA GetTempPathA RemoveDirectoryA AllocConsole GlobalAlloc GetCurrentDirectoryW QueryPerformanceFrequency QueryPerformanceCounter GetLocalTime CreateFileA ReadProcessMemory GetComputerNameA CreateToolhelp32Snapshot GetFileAttributesA CreateDirectoryA K32GetProcessMemoryInfo GetCurrentProcess Sleep GetLastError GetProcessHeap HeapFree GetModuleFileNameA GetCurrentDirectoryA DeleteFileA FindFirstFileW FindNextFileW SetFileAttributesW GlobalFree lstrlenA GetThreadTimes SetLastError MoveFileA IsDebuggerPresent GetPrivateProfileStringA HeapAlloc LoadLibraryA GetProcAddress FreeLibrary DeviceIoControl CloseHandle GetFileInformationByHandle

user32

CharPrevExA CharNextExA GetWindowRect LoadCursorA GetMessageA TranslateMessage SetWindowLongA UpdateWindow SetFocus MoveWindow DestroyWindow IsWindow CreateWindowExA RegisterClassExA UnregisterClassA DefWindowProcA DestroyCursor LoadImageA GetMenu AdjustWindowRectEx SetCursorPos ClientToScreen SetRect GetWindowLongA ShowWindow GetCapture SetCapture ReleaseCapture ChangeDisplaySettingsA GetSystemMetrics PeekMessageA GetDC ReleaseDC RegisterClassA EndPaint InvalidateRect GetClientRect FillRect OffsetRect LoadStringA MessageBoxA DispatchMessageA GetKeyboardLayoutNameA GetKeyboardLayout OpenClipboard CloseClipboard GetClipboardData CharNextW MonitorFromPoint GetMonitorInfoA LoadImageW LoadIconW RegisterClassExW UnregisterClassW SendMessageW CreateWindowExW DefWindowProcW SetCursor ShowCursor GetKeyState EnumWindows GetWindowTextA SystemParametersInfoA LoadIconA FindWindowA ScreenToClient GetCursorPos GetAsyncKeyState BeginPaint SetWindowPos FlashWindowEx PostQuitMessage SetWindowTextA

gdi32

SetTextColor GetTextExtentPoint32A SetBkMode SelectObject PatBlt DeleteObject CreateSolidBrush CreateFontA EnumFontFamiliesExA GetStockObject CreateCompatibleDC DeleteDC SetBkColor SetDIBitsToDevice CreateDIBSection CreateFontIndirectA GetCharABCWidthsFloatW GetTextExtentPoint32W TextOutW GetDeviceCaps GetPixel TextOutA StretchBlt

advapi32

RegOpenKeyExW RegCreateKeyExW RegCloseKey RegSetValueExW RegQueryValueExW RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegSetValueExA

shell32

ShellExecuteA SHGetSpecialFolderPathA

ole32

CoGetClassObject OleUninitialize OleSetContainedObject CoCreateInstance CoInitialize CoUninitialize CoInitializeEx OleInitialize

winmm

timeGetDevCaps timeBeginPeriod timeEndPeriod timeGetTime

d3d9

Direct3DCreate9Ex

d3dx9_43

D3DXQuaternionMultiply D3DXMatrixInverse D3DXMatrixRotationYawPitchRoll D3DXMatrixRotationX D3DXVec3TransformNormal D3DXMatrixRotationAxis D3DXVec4Transform D3DXVec3Project D3DXVec3Unproject D3DXMatrixScaling D3DXMatrixTranspose D3DXPlaneTransform D3DXMatrixTranslation D3DXMatrixDeterminant D3DXMatrixLookAtRH D3DXMatrixPerspectiveFovRH D3DXQuaternionRotationAxis D3DXMatrixOrthoOffCenterRH D3DXCreateMatrixStack D3DXCreateCylinder D3DXCreateSphere D3DXGetFVFVertexSize D3DXLoadSurfaceFromSurface D3DXCreateTexture D3DXCreateTextureFromFileInMemoryEx D3DXMatrixRotationY D3DXPlaneNormalize D3DXQuaternionRotationYawPitchRoll D3DXVec3Transform D3DXAssembleShader D3DXMatrixMultiply D3DXMatrixRotationZ D3DXVec3TransformCoord D3DXVec3Normalize D3DXMatrixOrthoRH D3DXMatrixRotationQuaternion D3DXVec2Normalize

python27

PyLong_AsLong PyTuple_GetItem PyDict_GetItemString PyArg_ParseTuple PyString_AsString PyThreadState_Get PyTuple_SetItem PyLong_FromLongLong PyList_New PyList_Append Py_IncRef PyObject_GetAttrString PyCallable_Check PyImport_ImportModule PyObject_CallObject PyInt_AsLong PyDict_Next PyDict_Size PyErr_SetString PyExc_RuntimeError PyString_FromString PyInt_FromLong PyModule_AddStringConstant PyString_InternFromString PyObject_GetAttr PyLong_AsLongLong PyFloat_AsDouble PyErr_Clear PyErr_BadArgument PyErr_Print Py_InitModule4 _Py_NoneStruct PyDict_SetItemString PyModule_GetDict PyErr_Fetch Py_SetProgramName Py_Initialize Py_Finalize PyRun_StringFlags Py_CompileStringFlags PyEval_SetTrace Py_FlushLine PyImport_GetMagicNumber PyImport_AddModule PyObject_AsCharBuffer PyCode_Addr2Line PyEval_EvalCode Py_OptimizeFlag PyCode_Type PyUnicodeUCS2_DecodeUTF8 _PyLong_FromByteArray PyFloat_FromDouble PyComplex_FromCComplex PyString_FromStringAndSize PyList_SetItem PyDict_New PyDict_SetItem PyErr_Occurred PyErr_NoMemory PyEval_GetRestricted PyCode_New PyMarshal_ReadObjectFromString _PyLong_New PyExc_EOFError PyExc_StopIteration _Py_EllipsisObject Py_BuildValue PyModule_AddIntConstant PyExc_ValueError PyNumber_Check PyTuple_Size PyTuple_New

iphlpapi

GetAdaptersInfo GetPerAdapterInfo

wininet

InternetCloseHandle InternetOpenA HttpAddRequestHeadersA HttpSendRequestA HttpQueryInfoA InternetConnectA HttpOpenRequestA

imm32

ImmGetOpenStatus ImmSetConversionStatus ImmGetConversionStatus ImmGetCandidateListW ImmSetCompositionStringW ImmGetCompositionStringW ImmAssociateContext ImmReleaseContext ImmGetContext ImmIsIME ImmGetIMEFileNameA ImmNotifyIME

devil

ilTexImage ilConvertImage ilSetPixels ilSave ilCopyPixels ilShutDown ilInit ilOriginFunc ilEnable ilBindImage ilDeleteImages ilGenImages ilGetInteger ilLoad

winhttp

WinHttpOpenRequest WinHttpQueryHeaders WinHttpReceiveResponse WinHttpOpen WinHttpCloseHandle WinHttpConnect WinHttpSendRequest WinHttpQueryDataAvailable WinHttpSetTimeouts WinHttpReadData

bcrypt

BCryptGenRandom BCryptDestroyHash BCryptGetProperty BCryptOpenAlgorithmProvider BCryptCloseAlgorithmProvider BCryptCreateHash BCryptHashData BCryptFinishHash

avformat-61

av_find_best_stream av_read_frame avformat_close_input avformat_find_stream_info avformat_network_init avformat_open_input avio_closep avio_open2 avio_read

avcodec-61

av_packet_alloc av_packet_clone av_packet_free av_packet_unref avcodec_alloc_context3 avcodec_find_decoder avcodec_free_context avcodec_open2 avcodec_parameters_to_context avcodec_receive_frame avcodec_send_packet

avutil-59

av_dict_free av_dict_set av_frame_alloc av_frame_free av_frame_unref av_log_set_level av_strerror

swscale-8

sws_freeContext sws_getContext sws_scale swscale_version

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

granny2

_GrannyCompleteControlAt@8 _GrannyFreeControlOnceUnused@4 _GrannyFreeControl@4 _GrannyFindTrackGroupForModel@12 _GrannyFreeControlIfComplete@4 _GrannyGetControlLoopCount@4 _GrannyGetSourceModel@4 _GrannyGetMeshIndexCount@4 GrannyPNT332VertexType _GrannyDeformVertices@24 _GrannyFreeMeshDeformer@4 _GrannyNewMeshDeformer@16 _GrannyCopyMeshIndices@12 _GrannyGetMeshVertices@4 _GrannyCopyMeshVertices@12 _GrannyGetMeshVertexType@4 _GrannyGetMeshTriangleGroups@4 _GrannyGetMeshTriangleGroupCount@4 _GrannySetTrackGroupLOD@16 _GrannySetTrackGroupTarget@12 _GrannyEndControlledAnimation@4 _GrannyBeginControlledAnimation@8 _GrannyPlayControlledAnimation@12 _GrannySetControlRawLocalClock@8 _GrannyGetControlRawLocalClock@4 _GrannySetControlLoopCount@8 _GrannyGetControlSpeed@4 _GrannySetControlSpeed@8 _GrannySetControlEaseIn@8 _GrannyControlIsComplete@4 _GrannySetControlEaseOutCurve@28 _GrannySetControlEaseOut@8 _GrannyGetControlLocalDuration@4 _GrannyMeshIsRigid@4 _GrannyGetMeshVertexCount@4 _GrannyGetTotalTypeSize@4 _GrannyGetWorldPoseComposite4x4@8 _GrannyGetWorldPose4x4@8 _GrannyFreeWorldPose@4 _GrannyNewWorldPose@4 _GrannyFindBoneByName@12 _GrannyGetMeshBindingToBoneIndices@4 _GrannyFreeMeshBinding@4 _GrannyNewMeshBinding@12 _GrannyFreeModelInstance@4 _GrannyInstantiateModel@4 _GrannyGetWorldPoseComposite4x4Array@4 _GrannyFreeLocalPose@4 _GrannyNewLocalPose@4 _GrannyUpdateModelMatrix@20 _GrannySampleModelAnimationsAccelerated@20 _GrannyFreeCompletedModelControls@4 _GrannySetControlEaseInCurve@28 _GrannySetModelClock@8 _GrannyGetSourceSkeleton@4 _GrannyGetMaterialTextureByType@8 _GrannyGetFileInfo@4 _GrannyFreeFile@4 _GrannyFreeFileSection@8 _GrannyReadEntireFileFromMemory@8

mss32

_AIL_close_digital_driver@4 _AIL_auto_update_3D_position@8 _AIL_mem_free_lock@4 _AIL_file_read@8 _AIL_set_file_callbacks@16 _AIL_WAV_info@8 _AIL_decompress_ASI@24 _AIL_open_digital_driver@16 _AIL_file_type@8 _AIL_open_stream@12 _AIL_enumerate_3D_providers@12 _AIL_open_3D_provider@4 _AIL_close_3D_provider@4 _AIL_open_3D_listener@4 _AIL_close_3D_listener@4 _AIL_set_3D_position@16 _AIL_set_3D_velocity@20 _AIL_set_3D_orientation@28 _AIL_startup@0 _AIL_shutdown@0 _AIL_set_redist_directory@4 _AIL_last_error@0 _AIL_allocate_sample_handle@4 _AIL_release_sample_handle@4 _AIL_init_sample@4 _AIL_set_sample_file@12 _AIL_start_sample@4 _AIL_stop_sample@4 _AIL_resume_sample@4 _AIL_end_sample@4 _AIL_set_sample_volume_pan@12 _AIL_set_sample_loop_count@8 _AIL_sample_status@4 _AIL_sample_volume_pan@12 _AIL_close_stream@4 _AIL_start_stream@4 _AIL_pause_stream@8 _AIL_set_stream_volume_levels@12 _AIL_stream_volume_levels@12 _AIL_set_stream_loop_count@8 _AIL_stream_status@4 _AIL_allocate_3D_sample_handle@4 _AIL_release_3D_sample_handle@4 _AIL_start_3D_sample@4 _AIL_stop_3D_sample@4 _AIL_resume_3D_sample@4 _AIL_end_3D_sample@4 _AIL_set_3D_sample_file@8 _AIL_set_3D_sample_volume@8 _AIL_set_3D_sample_loop_count@8 _AIL_3D_sample_status@4 _AIL_3D_sample_volume@4 _AIL_update_3D_position@8 _AIL_decompress_ADPCM@12

speedtreert

??2CSpeedTreeRT@@SAPAXI@Z ??3CSpeedTreeRT@@SAXPAX@Z ?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z ?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ ?DeleteTransientData@CSpeedTreeRT@@QAEXXZ ?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z ?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z ??0CSpeedTreeRT@@QAE@XZ ??1STextures@CSpeedTreeRT@@QAE@XZ ??0STextures@CSpeedTreeRT@@QAE@XZ ??1SGeometry@CSpeedTreeRT@@QAE@XZ ??0SGeometry@CSpeedTreeRT@@QAE@XZ ?SetCamera@CSpeedTreeRT@@SAXPBM0@Z ?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z ?SetLightState@CSpeedTreeRT@@SAXI_N@Z ?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z ?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z ?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z ?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ ?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z ?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z ?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z ?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z ?GetLeafLodSizeAdjustments@CSpeedTreeRT@@QAEPBMXZ ?GetLeafBillboardTable@CSpeedTreeRT@@QBEPBMAAI@Z ?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ ?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z ?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z ?SetLodLevel@CSpeedTreeRT@@QAEXM@Z ?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ ?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z ?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z ?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z ?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetLeafLightingAdjustment@CSpeedTreeRT@@QBEMXZ ?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ??1CSpeedTreeRT@@QAE@XZ ?SetTime@CSpeedTreeRT@@SAXM@Z ?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z ?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ ?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z ?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z ?GetCurrentError@CSpeedTreeRT@@SAPBDXZ

dinput8

DirectInput8Create

ws2_32

gethostname gethostbyname ntohs ntohl inet_addr htons htonl WSACleanup WSAStartup WSAGetLastError socket setsockopt send select recv ioctlsocket connect closesocket __WSAFDIsSet

ddraw

DirectDrawCreate

voice_chat_core_release_win32

?getSampleRate@VoiceChat@amun@@QBEIXZ ?isReady@VoiceChat@amun@@QBE_NXZ ?stopRecording@VoiceChat@amun@@QAEXXZ ?setPlaybackDelay@VoiceChat@amun@@QAEXI@Z ?setVolume@VoiceChat@amun@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@M@Z ?addSamples@VoiceChat@amun@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBFI@Z ?getChannelCount@VoiceChat@amun@@QBEEXZ ?destroy@VoiceChat@amun@@QAEXXZ ?init@VoiceChat@amun@@QAE_NIE@Z ??1VoiceChat@amun@@UAE@XZ ??0VoiceChat@amun@@QAE@XZ ?calculateSoundPressureLevel@VoiceChat@amun@@QBEMPBFI@Z ?normalizeAmplitude@VoiceChat@amun@@QAEXPAFIMM@Z ?decode@VoiceChat@amun@@QAEABV?$vector@FV?$allocator@F@std@@@std@@PBDI@Z ?startRecording@VoiceChat@amun@@QAE_NXZ

oleaut32

SysFreeString VariantClear SysAllocString SafeArrayCreate SafeArrayDestroy SafeArrayAccessData VariantInit

??0Config@libconfig@@QAE@XZ ??0ConfigException@libconfig@@QAE@$$QAV01@@Z ??0ConfigException@libconfig@@QAE@ABV01@@Z ??0ConfigException@libconfig@@QAE@XZ ??0FileIOException@libconfig@@QAE@$$QAV01@@Z ??0FileIOException@libconfig@@QAE@ABV01@@Z ??0FileIOException@libconfig@@QAE@XZ ??0ParseException@libconfig@@AAE@PBDH0@Z ??0ParseException@libconfig@@QAE@ABV01@@Z ??0Setting@libconfig@@AAE@PAUconfig_setting_t@@@Z ??0SettingException@libconfig@@IAE@ABVSetting@1@@Z ??0SettingException@libconfig@@IAE@ABVSetting@1@H@Z ??0SettingException@libconfig@@IAE@ABVSetting@1@PBD@Z ??0SettingException@libconfig@@IAE@PBD@Z ??0SettingException@libconfig@@QAE@ABV01@@Z ??0SettingNameException@libconfig@@AAE@ABVSetting@1@PBD@Z ??0SettingNameException@libconfig@@QAE@$$QAV01@@Z ??0SettingNameException@libconfig@@QAE@ABV01@@Z ??0SettingNotFoundException@libconfig@@AAE@ABVSetting@1@H@Z ??0SettingNotFoundException@libconfig@@AAE@ABVSetting@1@PBD@Z ??0SettingNotFoundException@libconfig@@AAE@PBD@Z ??0SettingNotFoundException@libconfig@@QAE@$$QAV01@@Z ??0SettingNotFoundException@libconfig@@QAE@ABV01@@Z ??0SettingTypeException@libconfig@@AAE@ABVSetting@1@@Z ??0SettingTypeException@libconfig@@AAE@ABVSetting@1@H@Z ??0SettingTypeException@libconfig@@AAE@ABVSetting@1@PBD@Z ??0SettingTypeException@libconfig@@QAE@$$QAV01@@Z ??0SettingTypeException@libconfig@@QAE@ABV01@@Z ??1Config@libconfig@@UAE@XZ ??1ConfigException@libconfig@@UAE@XZ ??1FileIOException@libconfig@@UAE@XZ ??1ParseException@libconfig@@UAE@XZ ??1Setting@libconfig@@UAE@XZ ??1SettingException@libconfig@@UAE@XZ ??1SettingNameException@libconfig@@UAE@XZ ??1SettingNotFoundException@libconfig@@UAE@XZ ??1SettingTypeException@libconfig@@UAE@XZ ??4ConfigException@libconfig@@QAEAAV01@$$QAV01@@Z ??4ConfigException@libconfig@@QAEAAV01@ABV01@@Z ??4FileIOException@libconfig@@QAEAAV01@$$QAV01@@Z ??4FileIOException@libconfig@@QAEAAV01@ABV01@@Z ??4ParseException@libconfig@@QAEAAV01@ABV01@@Z ??4Setting@libconfig@@QAEAAV01@ABN@Z ??4Setting@libconfig@@QAEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??4Setting@libconfig@@QAEAAV01@AB_J@Z ??4Setting@libconfig@@QAEAAV01@H@Z ??4Setting@libconfig@@QAEAAV01@J@Z ??4Setting@libconfig@@QAEAAV01@M@Z ??4Setting@libconfig@@QAEAAV01@PBD@Z ??4Setting@libconfig@@QAEAAV01@_N@Z ??4SettingException@libconfig@@QAEAAV01@ABV01@@Z ??4SettingNameException@libconfig@@QAEAAV01@$$QAV01@@Z ??4SettingNameException@libconfig@@QAEAAV01@ABV01@@Z ??4SettingNotFoundException@libconfig@@QAEAAV01@$$QAV01@@Z ??4SettingNotFoundException@libconfig@@QAEAAV01@ABV01@@Z ??4SettingTypeException@libconfig@@QAEAAV01@$$QAV01@@Z ??4SettingTypeException@libconfig@@QAEAAV01@ABV01@@Z ??ASetting@libconfig@@QBEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??ASetting@libconfig@@QBEAAV01@H@Z ??ASetting@libconfig@@QBEAAV01@PBD@Z ??BSetting@libconfig@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ??BSetting@libconfig@@QBEHXZ ??BSetting@libconfig@@QBEIXZ ??BSetting@libconfig@@QBEJXZ ??BSetting@libconfig@@QBEKXZ ??BSetting@libconfig@@QBEMXZ ??BSetting@libconfig@@QBENXZ ??BSetting@libconfig@@QBEPBDXZ ??BSetting@libconfig@@QBE_JXZ ??BSetting@libconfig@@QBE_KXZ ??BSetting@libconfig@@QBE_NXZ ??_7Config@libconfig@@6B@ ??_7ConfigException@libconfig@@6B@ ??_7FileIOException@libconfig@@6B@ ??_7ParseException@libconfig@@6B@ ??_7Setting@libconfig@@6B@ ??_7SettingException@libconfig@@6B@ ??_7SettingNameException@libconfig@@6B@ ??_7SettingNotFoundException@libconfig@@6B@ ??_7SettingTypeException@libconfig@@6B@ ?ConfigDestructor@Config@libconfig@@CAXPAX@Z ?add@Setting@libconfig@@QAEAAV12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4Type@12@@Z ?add@Setting@libconfig@@QAEAAV12@PBDW4Type@12@@Z ?add@Setting@libconfig@@QAEAAV12@W4Type@12@@Z ?assertType@Setting@libconfig@@ABEXW4Type@12@@Z ?c_str@Setting@libconfig@@QBEPBDXZ ?exists@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?exists@Config@libconfig@@QBE_NPBD@Z ?exists@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?exists@Setting@libconfig@@QBE_NPBD@Z ?getAutoConvert@Config@libconfig@@QBE_NXZ ?getDefaultFormat@Config@libconfig@@QBE?AW4Format@Setting@2@XZ ?getError@ParseException@libconfig@@QBEPBDXZ ?getFile@ParseException@libconfig@@QBEPBDXZ ?getFormat@Setting@libconfig@@QBE?AW4Format@12@XZ ?getIncludeDir@Config@libconfig@@QBEPBDXZ ?getIndex@Setting@libconfig@@QBEHXZ ?getLength@Setting@libconfig@@QBEHXZ ?getLine@ParseException@libconfig@@QBEHXZ ?getName@Setting@libconfig@@QBEPBDXZ ?getParent@Setting@libconfig@@QAEAAV12@XZ ?getParent@Setting@libconfig@@QBEABV12@XZ ?getPath@Setting@libconfig@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?getPath@SettingException@libconfig@@QBEPBDXZ ?getRoot@Config@libconfig@@QBEAAVSetting@2@XZ ?getSourceFile@Setting@libconfig@@QBEPBDXZ ?getSourceLine@Setting@libconfig@@QBEIXZ ?getTabWidth@Config@libconfig@@QBEGXZ ?getType@Setting@libconfig@@QBE?AW4Type@12@XZ ?handleError@Config@libconfig@@ABEXXZ ?isAggregate@Setting@libconfig@@QBE_NXZ ?isArray@Setting@libconfig@@QBE_NXZ ?isGroup@Setting@libconfig@@QBE_NXZ ?isList@Setting@libconfig@@QBE_NXZ ?isNumber@Setting@libconfig@@QBE_NXZ ?isRoot@Setting@libconfig@@QBE_NXZ ?isScalar@Setting@libconfig@@QBE_NXZ ?lookup@Config@libconfig@@QBEAAVSetting@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?lookup@Config@libconfig@@QBEAAVSetting@2@PBD@Z ?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAH@Z ?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAI@Z ?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAM@Z ?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAN@Z ?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAPBD@Z ?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV34@@Z ?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_J@Z ?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_K@Z ?lookupValue@Config@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_N@Z ?lookupValue@Config@libconfig@@QBE_NPBDAAH@Z ?lookupValue@Config@libconfig@@QBE_NPBDAAI@Z ?lookupValue@Config@libconfig@@QBE_NPBDAAM@Z ?lookupValue@Config@libconfig@@QBE_NPBDAAN@Z ?lookupValue@Config@libconfig@@QBE_NPBDAAPBD@Z ?lookupValue@Config@libconfig@@QBE_NPBDAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?lookupValue@Config@libconfig@@QBE_NPBDAA_J@Z ?lookupValue@Config@libconfig@@QBE_NPBDAA_K@Z ?lookupValue@Config@libconfig@@QBE_NPBDAA_N@Z ?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAH@Z ?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAI@Z ?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAM@Z ?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAN@Z ?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAPBD@Z ?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV34@@Z ?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_J@Z ?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_K@Z ?lookupValue@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_N@Z ?lookupValue@Setting@libconfig@@QBE_NPBDAAH@Z ?lookupValue@Setting@libconfig@@QBE_NPBDAAI@Z ?lookupValue@Setting@libconfig@@QBE_NPBDAAM@Z ?lookupValue@Setting@libconfig@@QBE_NPBDAAN@Z ?lookupValue@Setting@libconfig@@QBE_NPBDAAPBD@Z ?lookupValue@Setting@libconfig@@QBE_NPBDAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?lookupValue@Setting@libconfig@@QBE_NPBDAA_J@Z ?lookupValue@Setting@libconfig@@QBE_NPBDAA_K@Z ?lookupValue@Setting@libconfig@@QBE_NPBDAA_N@Z ?read@Config@libconfig@@QAEXPAU_iobuf@@@Z ?readFile@Config@libconfig@@QAEXPBD@Z ?readString@Config@libconfig@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?readString@Config@libconfig@@QAEXPBD@Z ?remove@Setting@libconfig@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?remove@Setting@libconfig@@QAEXI@Z ?remove@Setting@libconfig@@QAEXPBD@Z ?setAutoConvert@Config@libconfig@@QAEX_N@Z ?setDefaultFormat@Config@libconfig@@QAEXW4Format@Setting@2@@Z ?setFormat@Setting@libconfig@@QAEXW4Format@12@@Z ?setIncludeDir@Config@libconfig@@QAEXPBD@Z ?setTabWidth@Config@libconfig@@QAEXG@Z ?what@FileIOException@libconfig@@UBEPBDXZ ?what@ParseException@libconfig@@UBEPBDXZ ?what@SettingException@libconfig@@UBEPBDXZ ?what@SettingNameException@libconfig@@UBEPBDXZ ?what@SettingNotFoundException@libconfig@@UBEPBDXZ ?what@SettingTypeException@libconfig@@UBEPBDXZ ?wrapSetting@Setting@libconfig@@CAAAV12@PAUconfig_setting_t@@@Z ?write@Config@libconfig@@QBEXPAU_iobuf@@@Z ?writeFile@Config@libconfig@@QAEXPBD@Z

Name

.text

Size

4.0MB

Virtual Size

4.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

702KB

Virtual Size

702KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

165KB

Virtual Size

692KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

221KB

Virtual Size

220KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

196KB

Virtual Size

195KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=43, id=260, version=30706,

count=48, id=259, version=33145,

count=224, id=261, version=33145,

count=4, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=3, id=265, version=35220,

count=2, id=28, version=9178,

count=2, id=257, version=35225,

count=2, id=25, version=9210,

count=1, id=29, version=9178,

count=1, id=262, version=33145,

count=58, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,

count=1, id=48, version=9044,

count=2, id=203, productName=VS2012 UPD3 build 60610, version=60610,

count=5, id=261, productName=VS2019 v16.9.2 build 29913, version=29913,

count=39, productName=Unmarked objects (old),

count=1, id=261, version=30709,

count=7, id=260, version=30709,

count=2, id=257, productName=VS2015 [14.0] build 23026, version=23026,

count=4, id=253, version=35207,

count=26, id=259, version=35207,

count=18, id=260, version=35207,

count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=2, id=156, version=21202,

count=99, id=261, version=35207,

count=2, id=260, version=35220,

count=43, id=260, version=33145,

count=35, id=257, version=33145,

count=641, id=1, productName=Unmarked objects,

count=51, id=261, version=32825,

count=322, id=261, version=35220,

count=1, id=256, version=35220,

count=1, id=255, version=35220,

count=1, id=151,

count=1, id=258, version=35220,