4f3a04043fe061027a313d44a83d61cf23c67ff6480daa006e4c00dba7d39235

Sharing

Copy URL Twitter E-mail

General

Target
4f3a04043fe061027a313d44a83d61cf23c67ff6480daa006e4c00dba7d39235
Size 7.7MB
Sample261027-ar7bcahv7s
SHA256 4f3a04043fe061027a313d44a83d61cf23c67ff6480daa006e4c00dba7d39235
MD5 d5481d0e1f8d98114ceb8b2a90c22a2e
SHA1 a8d97bfcf82c7c35c52525c4d6385590f323f979
SHA512 a7d0d9be33fa995cb013988247b97ace6341e6c3239c6cdd8340adef851c08bef2d655851290a852035eef6bb5719d37b8c6105e38ec307232821726c0c73736
SSDEEP 196608:DXfUV8Vsnh/lO062ma5Jv2I2mIXr9LMy3ppe45r:wV8Vsnh/I0Fv2hmIXr9LMy3Pt
TLSH
T168868D2172E5C274F5E316B06939BBAA457DBC344F1085CBB3C41A2E8DB06C26975F2B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
4f3a04043fe061027a313d44a83d61cf23c67ff6480daa006e4c00dba7d39235

File Explorer

4f3a04043fe061027a313d44a83d61cf23c67ff6480daa006e4c00dba7d39235

.exe 7.7MB

4f3a04043fe061027a313d44a83d61cf23c67ff6480daa006e4c00dba7d39235

IMPHASH faa669b53c7841c33f9b09faf0eab20e
SHA256 4f3a04043fe061027a313d44a83d61cf23c67ff6480daa006e4c00dba7d39235
MD5 d5481d0e1f8d98114ceb8b2a90c22a2e
SHA1 a8d97bfcf82c7c35c52525c4d6385590f323f979
SHA512 a7d0d9be33fa995cb013988247b97ace6341e6c3239c6cdd8340adef851c08bef2d655851290a852035eef6bb5719d37b8c6105e38ec307232821726c0c73736
SSDEEP 196608:DXfUV8Vsnh/lO062ma5Jv2I2mIXr9LMy3ppe45r:wV8Vsnh/I0Fv2hmIXr9LMy3Pt
TLSH
T168868D2172E5C274F5E316B06939BBAA457DBC344F1085CBB3C41A2E8DB06C26975F2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

3e:57:26:35:f7:79:3a:1b:90:ae:8a:31:17:de:9c:85:17:4f:9f:3b:f7:b3:94:b6:7a:5a:70:1a:f3:d4:ac:e0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Oakmere Studios,O=Oakmere Studios,L=Braga,C=PT,1.2.840.113549.1.9.1=#0c12736f706f727465406f616b6d6572652e6767

Chains

Oct 25, 2026

CN=Oakmere Studios,O=Oakmere Studios,L=Braga,C=PT,1.2.840.113549.1.9.1=#0c12736f706f727465406f616b6d6572652e6767

Subject

CN=Oakmere Studios,O=Oakmere Studios,L=Braga,C=PT,1.2.840.113549.1.9.1=#0c12736f706f727465406f616b6d6572652e6767

Serial Number

1e:84:29:c1:f8:da:78:8c:45:ca:78:b1:d5:c1:2e:c3

Issuer

CN=Oakmere Studios,O=Oakmere Studios,L=Braga,C=PT,1.2.840.113549.1.9.1=#0c12736f706f727465406f616b6d6572652e6767

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 7, 2026 - Oct 7, 2031

Subject

CN=Sectigo Public Time Stamping Signer R37,O=Sectigo Limited,ST=Greater London,C=GB

Serial Number

e7:4e:f2:55:b0:50:4f:fa:db:a6:df:f7:fc:8b:a3:15

Issuer

CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 25, 2026 - Jun 24, 2037

Subject

CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB

Serial Number

90:ac:08:72:20:fd:c5:a7:c4:6b:5c:c7:0d:f7:3d:06

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 25, 2026 - Mar 24, 2041

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Serial Number

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Jan 18, 2038

Minor OS version

Major OS version

Entry point

3786332

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\Mt2Rage\WorkingEnv\client\rage.pdb

kernel32

GlobalFree CreateMutexA ReleaseMutex GetCurrentDirectoryA GetCurrentDirectoryW ReadProcessMemory K32EnumProcessModules MoveFileExA GetThreadContext ResumeThread SuspendThread GetProcessTimes GetFileAttributesExA K32GetProcessMemoryInfo GetModuleHandleExA GetModuleFileNameA GetTickCount64 GetTickCount GetLocalTime GetSystemTimeAsFileTime GlobalMemoryStatusEx CreateProcessA GetCurrentThreadId GetCurrentThread TerminateProcess WaitForMultipleObjects TryAcquireSRWLockShared AcquireSRWLockExclusive ReleaseSRWLockShared ReleaseSRWLockExclusive InitializeSRWLock SetEndOfFile WriteConsoleW HeapQueryInformation HeapSize SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetErrorMode RaiseException DeleteFileA K32GetModuleInformation LocalFree GetCommandLineA GetOEMCP GetACP IsValidCodePage SetStdHandle CreateProcessW GetExitCodeProcess LocalAlloc GetModuleHandleA VirtualQuery GetCurrentProcessId GetTimeZoneInformation HeapReAlloc DeleteFileW ReadConsoleW SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW lstrlenA HeapAlloc GetStdHandle FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetFileType GetDriveTypeW SetConsoleCtrlHandler ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount InterlockedFlushSList InterlockedPushEntrySList RtlUnwind GetEnvironmentVariableW LoadLibraryW LoadLibraryExW HeapFree GetProcessHeap OutputDebugStringW GetThreadTimes SetLastError WaitNamedPipeW PeekNamedPipe GetModuleFileNameW GetCurrentProcess DuplicateHandle FindNextFileA FindFirstFileA FindClose SetFileAttributesA SetUnhandledExceptionFilter Module32Next Module32First Process32Next Process32First CreateToolhelp32Snapshot GetSystemInfo OpenProcess DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CreateSemaphoreA SetThreadPriority CreateThread Sleep CreateEventA WaitForSingleObject ReleaseSemaphore ResetEvent SetEvent GetLastError CloseHandle WriteFile ReadFile GetFileInformationByHandle CreateFileW CreateFileA MultiByteToWideChar GetFileAttributesA CreateDirectoryA QueryPerformanceFrequency QueryPerformanceCounter WideCharToMultiByte LoadLibraryA GetProcAddress MoveFileA GetPrivateProfileStringA GetDateFormatW FormatMessageW FreeLibrary

user32

TranslateMessage GetClipboardData BeginPaint GetMessageA CharPrevExA SetWindowLongA DefWindowProcA GetWindowRect EndPaint InvalidateRect GetClientRect SetWindowTextA RegisterClassA FillRect LoadCursorA UpdateWindow SetFocus MoveWindow DispatchMessageA GetKeyboardLayoutNameA GetKeyboardLayout DestroyWindow IsWindow OffsetRect CreateWindowExA RegisterClassExA LoadStringA MessageBoxA ReleaseDC GetDC PeekMessageA GetGuiResources MessageBoxW GetSystemMetrics ChangeDisplaySettingsA ReleaseCapture SetCapture GetCapture ShowWindow GetForegroundWindow FlashWindowEx GetWindowLongA SetRect ClientToScreen SetCursorPos AdjustWindowRectEx GetMenu LoadImageA DestroyCursor SetCursor ShowCursor GetKeyState SystemParametersInfoA LoadIconA FindWindowA ScreenToClient GetCursorPos GetAsyncKeyState SetWindowDisplayAffinity GetWindowDisplayAffinity OpenClipboard SetWindowPos PostQuitMessage CloseClipboard UnregisterClassA

gdi32

GetCharABCWidthsFloatW GetTextExtentPoint32W SelectObject SetBkColor SetTextColor TextOutW CreateCompatibleDC DeleteDC GetStockObject SetDIBitsToDevice CreateDIBSection TextOutA CreateSolidBrush DeleteObject PatBlt StretchBlt GetTextExtentPoint32A SetBkMode EnumFontFamiliesExA CreateFontIndirectA

shell32

SetCurrentProcessExplicitAppUserModelID ShellExecuteA SHGetSpecialFolderPathA SHGetKnownFolderPath

ole32

CoInitialize CoUninitialize CoTaskMemAlloc OleInitialize CoCreateInstance CoSetProxyBlanket OleUninitialize

oleaut32

SetErrorInfo VariantClear GetErrorInfo SysFreeString SysAllocString CreateErrorInfo VariantInit VariantChangeType SysStringLen

winmm

timeGetTime timeGetDevCaps timeBeginPeriod timeEndPeriod

d3d9

Direct3DCreate9Ex

d3dx9_43

D3DXPlaneNormalize D3DXLoadSurfaceFromFileInMemory D3DXVec3Transform D3DXAssembleShader D3DXCreateTextureFromFileInMemory D3DXMatrixMultiplyTranspose D3DXMatrixRotationY D3DXCreateTextureFromFileInMemoryEx D3DXGetImageInfoFromFileInMemory D3DXGetFVFVertexSize D3DXVec3Project D3DXCreateCylinder D3DXCreateMatrixStack D3DXMatrixOrthoOffCenterRH D3DXMatrixOrthoRH D3DXMatrixDeterminant D3DXVec2Normalize D3DXCreateEffectFromFileA D3DXQuaternionRotationYawPitchRoll D3DXCreateSphere D3DXVec3Normalize D3DXVec3TransformCoord D3DXMatrixRotationZ D3DXMatrixMultiply D3DXMatrixTranslation D3DXCompileShader D3DXMatrixRotationYawPitchRoll D3DXMatrixRotationQuaternion D3DXQuaternionRotationAxis D3DXQuaternionMultiply D3DXVec3TransformNormal D3DXMatrixScaling D3DXMatrixInverse D3DXMatrixRotationX D3DXMatrixRotationAxis D3DXVec4Transform D3DXMatrixTransformation D3DXMatrixTranspose D3DXVec3Unproject D3DXMatrixLookAtRH D3DXMatrixPerspectiveFovRH D3DXPlaneTransform

python27

PyString_FromString PyEval_SetTrace PyString_AsString PyTuple_New Py_CompileStringFlags PyRun_StringFlags Py_BuildValue Py_InitModule4 PyTuple_Size Py_Finalize PyModule_AddIntConstant PyLong_AsLong PyTuple_GetItem PyDict_GetItemString PyObject_GetAttrString PyObject_HasAttrString Py_IncRef PyInt_FromLong PyInt_FromSize_t PyInt_AsLong PyList_Size PyList_GetItem PyList_Append PyDict_New PyDict_SetItemString PyImport_ImportModule _Py_NoneStruct PyLong_FromLong PyList_SetItem PyImport_AddModule PyTuple_SetItem PyDict_SetItem PyDict_Next PyDict_Size PyErr_SetString PyExc_RuntimeError PyFloat_FromDouble PyArg_ParseTuple PyTuple_Pack PyModule_AddStringConstant PyString_InternFromString PyObject_GetAttr PyCallable_Check PyLong_AsLongLong PyFloat_AsDouble PyErr_Clear PyErr_BadArgument PyErr_Print PyObject_CallObject PyNumber_Check PyModule_GetDict PyErr_Fetch Py_SetProgramName Py_Initialize PyBool_FromLong PyExc_ValueError PyExc_EOFError PyExc_StopIteration _Py_EllipsisObject _PyLong_New PyMarshal_ReadObjectFromString PyCode_New PyEval_GetRestricted PyErr_NoMemory PyErr_Occurred PyString_FromStringAndSize PyComplex_FromCComplex _PyLong_FromByteArray PyUnicodeUCS2_DecodeUTF8 PyCode_Type Py_OptimizeFlag PyEval_EvalCode PyCode_Addr2Line PyObject_AsCharBuffer PyImport_GetMagicNumber Py_FlushLine PyLong_FromLongLong PyList_New

imm32

ImmGetIMEFileNameA ImmReleaseContext ImmAssociateContext ImmGetCompositionStringW ImmGetCandidateListW ImmGetConversionStatus ImmSetConversionStatus ImmGetOpenStatus ImmGetContext ImmSetCompositionStringW ImmIsIME ImmNotifyIME

xmllite

CreateXmlReader

shlwapi

ord12

dbghelp

StackWalk64 SymGetModuleBase64 SymInitialize MiniDumpWriteDump SymFunctionTableAccess64

iphlpapi

GetAdaptersInfo

bcrypt

BCryptHashData BCryptFinishHash BCryptCreateHash BCryptOpenAlgorithmProvider BCryptGetProperty BCryptCloseAlgorithmProvider BCryptDestroyHash

api-ms-win-core-file-l1-1-0

FindFirstFileW FindFirstFileExW FindNextFileW GetDiskFreeSpaceExW GetFileSize GetFileAttributesW GetFileAttributesExW GetFinalPathNameByHandleW RemoveDirectoryA SetFileAttributesW SetFileInformationByHandle CreateDirectoryW SetFileTime GetFullPathNameW SetFilePointer

api-ms-win-core-com-l1-1-0

CoTaskMemFree CoInitializeEx

api-ms-win-core-console-l1-1-0

AllocConsole

api-ms-win-core-file-l1-2-2

GetTempPathA GetTempFileNameA AreFileApisANSI

api-ms-win-core-heap-l2-1-0

GlobalAlloc

api-ms-win-core-debug-l1-1-0

OutputDebugStringA IsDebuggerPresent

api-ms-win-core-memory-l1-1-0

MapViewOfFile UnmapViewOfFile

api-ms-win-core-kernel32-legacy-l1-1-0

CopyFileA CreateFileMappingA

api-ms-win-core-sysinfo-l1-1-0

GetVersionExA GetSystemDirectoryA

ws2_32

WSAStartup WSACleanup __WSAFDIsSet htons inet_addr closesocket ntohl connect ntohs ioctlsocket gethostbyname gethostname htonl recv select send socket WSAGetLastError

api-ms-win-core-stringansi-l1-1-0

CharNextExA

api-ms-win-core-heap-obsolete-l1-1-0

GlobalLock GlobalUnlock

api-ms-win-core-string-obsolete-l1-1-0

lstrlenW

api-ms-win-core-string-l2-1-0

CharNextW

api-ms-win-core-localization-obsolete-l1-2-0

CompareStringA

api-ms-win-core-localization-l1-2-0

GetCPInfo GetLocaleInfoA LCMapStringEx FormatMessageA GetLocaleInfoEx

api-ms-win-core-versionansi-l1-1-1

GetFileVersionInfoA

api-ms-win-core-versionansi-l1-1-0

VerQueryValueA

api-ms-win-core-registry-l1-1-0

RegCloseKey RegQueryValueExA RegOpenKeyExA

api-ms-win-core-synch-l1-1-0

AcquireSRWLockShared TryAcquireSRWLockExclusive CreateSemaphoreExW InitializeCriticalSectionEx CreateEventExW WaitForSingleObjectEx

api-ms-win-core-processthreads-l1-1-0

SwitchToThread GetExitCodeThread GetStartupInfoW FlushProcessWriteBuffers

api-ms-win-core-sysinfo-l1-2-0

GetNativeSystemInfo

api-ms-win-core-synch-l1-2-0

SleepConditionVariableSRW WakeAllConditionVariable WakeConditionVariable InitOnceExecuteOnce

api-ms-win-core-processenvironment-l1-1-0

SetCurrentDirectoryW

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-core-io-l1-1-0

DeviceIoControl

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW

api-ms-win-core-file-l2-1-0

CreateHardLinkW MoveFileExW CreateDirectoryExW GetFileInformationByHandleEx CreateSymbolicLinkW

api-ms-win-core-file-l2-1-2

CopyFileW

api-ms-win-core-string-l1-1-0

CompareStringEx GetStringTypeW

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent GetCurrentProcessorNumber

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolWait CloseThreadpoolWait CloseThreadpoolTimer FreeLibraryWhenCallbackReturns SetThreadpoolTimer WaitForThreadpoolTimerCallbacks SetThreadpoolWait CreateThreadpoolTimer

api-ms-win-core-util-l1-1-0

EncodePointer DecodePointer

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

version

GetFileVersionInfoSizeA

devil

ilTexImage ilInit ilDeleteImages ilGenImages ilSetPixels ilSave ilShutDown ilOriginFunc ilGetInteger ilLoad ilConvertImage ilCopyPixels ilEnable ilBindImage

granny2

_GrannyInstantiateModel@4 _GrannyFreeModelInstance@4 _GrannyNewMeshBinding@12 _GrannyFreeMeshBinding@4 _GrannyGetMeshBindingToBoneIndices@4 _GrannyFindBoneByName@12 _GrannyNewWorldPose@4 _GrannyGetControlRawLocalClock@4 _GrannySetControlEaseOutCurve@28 _GrannySetControlEaseOut@8 _GrannySetControlEaseInCurve@28 _GrannySetControlEaseIn@8 _GrannyGetControlLocalDuration@4 _GrannySetControlSpeed@8 _GrannyGetControlSpeed@4 _GrannySetControlLoopCount@8 _GrannyGetControlLoopCount@4 _GrannyFreeControlIfComplete@4 _GrannyControlIsComplete@4 _GrannyCompleteControlAt@8 _GrannyFreeControlOnceUnused@4 _GrannyFreeControl@4 _GrannyFindTrackGroupForModel@12 _GrannyGetSourceModel@4 _GrannyGetFileInfo@4 _GrannySetTrackGroupTarget@12 _GrannyFreeFileSection@8 _GrannyReadEntireFileFromMemory@8 _GrannyConvertSingleObject@20 _GrannyFindMatchingMember@16 _GrannyGetMaterialTextureByType@8 _GrannyGetWorldPoseComposite4x4Array@4 _GrannyFreeLocalPose@4 _GrannyNewLocalPose@4 _GrannyUpdateModelMatrix@20 _GrannySampleModelAnimationsAccelerated@20 _GrannyFreeCompletedModelControls@4 _GrannySetModelClock@8 _GrannyGetSourceSkeleton@4 _GrannySetLogCallback@4 _GrannyFreeWorldPose@4 _GrannyGetWorldPose4x4@8 _GrannyGetWorldPoseComposite4x4@8 _GrannyGetMeshTriangleGroupCount@4 _GrannyGetMeshTriangleGroups@4 GrannyPWNT3432VertexType _GrannyConvertVertexLayouts@20 _GrannyGetMeshIndexCount@4 _GrannyGetTotalTypeSize@4 GrannyPNT332VertexType _GrannyDeformVertices@24 _GrannyFreeMeshDeformer@4 _GrannySetTrackGroupLOD@16 _GrannyEndControlledAnimation@4 _GrannyBeginControlledAnimation@8 _GrannyPlayControlledAnimation@12 _GrannyFreeFile@4 _GrannySetControlRawLocalClock@8 _GrannyNewMeshDeformer@16 _GrannyCopyMeshIndices@12 _GrannyMeshIsRigid@4 _GrannyGetMeshVertices@4 _GrannyCopyMeshVertices@12 _GrannyGetMeshVertexCount@4 _GrannyGetMeshVertexType@4

mss32

_AIL_startup@0 _AIL_set_3D_orientation@28 _AIL_close_digital_driver@4 _AIL_mem_free_lock@4 _AIL_file_read@8 _AIL_set_file_callbacks@16 _AIL_WAV_info@8 _AIL_decompress_ASI@24 _AIL_decompress_ADPCM@12 _AIL_file_type@8 _AIL_open_digital_driver@16 _AIL_open_stream@12 _AIL_enumerate_3D_providers@12 _AIL_shutdown@0 _AIL_set_redist_directory@4 _AIL_close_stream@4 _AIL_start_stream@4 _AIL_open_3D_provider@4 _AIL_close_3D_provider@4 _AIL_open_3D_listener@4 _AIL_close_3D_listener@4 _AIL_set_3D_position@16 _AIL_pause_stream@8 _AIL_auto_update_3D_position@8 _AIL_update_3D_position@8 _AIL_3D_sample_volume@4 _AIL_3D_sample_status@4 _AIL_set_3D_sample_loop_count@8 _AIL_set_3D_sample_volume@8 _AIL_set_3D_sample_file@8 _AIL_end_3D_sample@4 _AIL_resume_3D_sample@4 _AIL_stop_3D_sample@4 _AIL_start_3D_sample@4 _AIL_release_3D_sample_handle@4 _AIL_allocate_3D_sample_handle@4 _AIL_sample_volume_pan@12 _AIL_sample_status@4 _AIL_set_sample_loop_count@8 _AIL_set_sample_volume_pan@12 _AIL_end_sample@4 _AIL_resume_sample@4 _AIL_stop_sample@4 _AIL_start_sample@4 _AIL_set_sample_file@12 _AIL_init_sample@4 _AIL_release_sample_handle@4 _AIL_allocate_sample_handle@4 _AIL_last_error@0 _AIL_stream_status@4 _AIL_set_stream_loop_count@8 _AIL_stream_volume_levels@12 _AIL_set_stream_volume_levels@12 _AIL_set_3D_velocity@20

speedtreert

??3CSpeedTreeRT@@SAXPAX@Z ??2CSpeedTreeRT@@SAPAXI@Z ??1CSpeedTreeRT@@QAE@XZ ??0CSpeedTreeRT@@QAE@XZ ??1STextures@CSpeedTreeRT@@QAE@XZ ??0STextures@CSpeedTreeRT@@QAE@XZ ??1SGeometry@CSpeedTreeRT@@QAE@XZ ??0SGeometry@CSpeedTreeRT@@QAE@XZ ?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z ?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z ?SetTime@CSpeedTreeRT@@SAXM@Z ?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ ?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z ?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z ?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z ?SetLodLevel@CSpeedTreeRT@@QAEXM@Z ?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z ?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ ?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ ?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z ?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetLeafLightingAdjustment@CSpeedTreeRT@@QBEMXZ ?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z ?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ ?DeleteTransientData@CSpeedTreeRT@@QAEXXZ ?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z ?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z ?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ ?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z ?SetCamera@CSpeedTreeRT@@SAXPBM0@Z ?GetCamera@CSpeedTreeRT@@SAXPAM0@Z ?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z ?SetLightState@CSpeedTreeRT@@SAXI_N@Z ?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z ?GetLeafBillboardTable@CSpeedTreeRT@@QBEPBMAAI@Z ?GetLeafLodSizeAdjustments@CSpeedTreeRT@@QAEPBMXZ ?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ ?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z ?GetCurrentError@CSpeedTreeRT@@SAPBDXZ ?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z ?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z ?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z ?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z

dinput8

DirectInput8Create

ddraw

DirectDrawCreate

tbb

?terminate@task_scheduler_init@tbb@@QAEXXZ ?default_num_threads@task_scheduler_init@tbb@@SAHXZ ?initialize@task_scheduler_init@tbb@@QAEXHI@Z

cshield

?CheckAttackspeed@@YA_NMM_N0@Z ?CheckMovespeed@@YA_NM@Z ?CheckValues@@YA_NXZ ?InitializeCShield@@YA?AU_CShieldData@@V?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@K@Z ?cshieldReport@@3V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@A ?cshieldLanguage@@3V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@A ?cshieldWin@@3EA ?CheckMove@@YA_N_N0MM@Z ?DecryptPointer@PointerCrypto@@YAPAXK@Z ?ValidatePointer@PointerCrypto@@YA_NPBX@Z ?CalculateChecksum@PointerCrypto@@YAKK@Z ?EncryptPointer@PointerCrypto@@YAKPBX@Z ?cshieldCharName@@3V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@A ?cshieldClientCode@@3KA ?GetCShieldLoginKey@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD@Z ?GetH@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?GenKey@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_NK@Z ?GenData@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ

advapi32

EventRegister RegGetValueW GetSidSubAuthority GetSidSubAuthorityCount GetTokenInformation CryptGenRandom CryptReleaseContext CryptAcquireContextA RegSetValueExW RegQueryValueExW RegOpenKeyExW RegCreateKeyExW EventSetInformation EventWriteTransfer EventUnregister OpenProcessToken

generic

count=43, id=264, version=34808,

count=52, id=259, version=30795,

count=225, id=261, version=30795,

count=4, id=170, productName=VS2010 build 30319, version=30319,

count=7, productName=Unmarked objects (old),

count=2, id=257, version=34808,

count=62, id=261, version=33523,

count=2, id=221, productName=VS2013 build 21005, version=21005,

count=2, id=25, version=9210,

count=1, id=29, version=9178,

count=58, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,

count=1, id=48, version=9044,

count=2, id=203, productName=VS2012 UPD3 build 60610, version=60610,

count=2, id=257, productName=VS2015 [14.0] build 23026, version=23026,

count=5, id=261, productName=VS2019 v16.11.1 build 30133, version=30133,

count=146, id=260, version=34808,

count=1, id=253, version=34321,

count=29, id=259, version=34321,

count=19, id=260, version=34321,

count=72, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=2, id=156, version=21202,

count=2, id=123, productName=VS2005 build 50727, version=50727,

count=108, id=261, version=34321,

count=42, id=260, version=30795,

count=3, id=262, version=30795,

count=33, id=257, version=30795,

count=680, id=1, productName=Unmarked objects,

count=342, id=261, version=34808,

count=1, id=255, version=34808,

count=1, id=151,

count=1, id=258, version=34808,