# third-party/ — upstream sources for shipped support DLLs

Source trees matched to the Support DLLs listed in `decomp/INVENTORY.md`.
Used as reference when decompiling (symbol recovery, struct layouts, FLIRT-style
matching). **Not** build inputs for anything in this repo.

"Matched" here means the upstream version equals the version embedded in the
DLL (VERSIONINFO + in-binary version strings). Compiled DLLs cannot be
byte-matched to source without the original toolchain/flags; the archives
themselves were verified against upstream checksums where available.

| DLL(s) | Embedded version (observed) | Directory | Upstream / integrity | Match |
|---|---|---|---|---|
| `libeay32.dll`, `ssleay32.dll` | FileVersion `1.0.0d`; strings `OpenSSL 1.0.0d 8 Feb 2011`; PDB `...\OpenLibrary\openssl-1.0.0d\out32dll\` | `openssl-1.0.0d/` | `openssl.org/source/old/1.0.0/openssl-1.0.0d.tar.gz`, SHA-1 `32ca934f380a547061ddab7221b1a34e4e07e8d5` (matches official `.sha1`); SHA-256 `92511d1f…6320db` | Exact release |
| `libcurl_x64.dll`, `libcurl_Win32.dll`, `libcurld_x64.dll`, `libcurld_Win32.dll` | FileVersion `7.21.4`; strings `libcurl/7.21.4` | `curl-7.21.4/` | git tag `curl-7_21_4` (commit `827f0a31…`) via GitHub archive, SHA-256 `1dd41d4b…eb3240`. Official release tarball no longer downloadable (404). | Exact tag; see note |
| `BugTrapU-x64.dll` | FileVersion `1.3.3466.24114`; PDB `...\OpenLibrary\BugTrap\Win32\Bin\BugTrap.pdb` | `BugTrap-1.3-57bd515/` | `github.com/bchavez/BugTrap` commit `57bd515` (earliest public import, `1.3.3718.38316`) | **Closest available, NOT exact** |
| `dbghelp.dll` | Microsoft, Debugging Tools for Windows `6.12.0002.633` | `mingw-w64-dbghelp-63ebe6c/` | `github.com/mingw-w64/mingw-w64` commit `63ebe6cd…` (master HEAD, retrieved 2026-10-14): `include/dbghelp.h`, `lib-common/dbghelp.def` (x64), `lib32/dbghelp.def`, licence files | **Header + export list only, not an implementation** |

Notes:
- **curl**: the git tag differs from a release tarball only by generated files
  (configure, Makefiles) and `maketgz` version stamping. I applied the version
  stamp only (`LIBCURL_VERSION` → `"7.21.4"` in `include/curl/curlver.h`,
  `CURL_VERSION` in `src/version.h`); `LIBCURL_TIMESTAMP` left as `"DEV"`
  because the real release timestamp is unknown.
- **BugTrap**: no public source for build 3466 found. Export comparison: the
  shipped DLL's 83 `BT_*` exports (82 shared) equal `source/BugTrap.h` of 57bd515 except the
  DLL exports `BT_GetErrorString` (not in header) and the header declares
  `BT_SetTerminate` (not exported). Treat API/structs as approximate.
- The `debug` (`libcurld_*`) and Win32 variants share the same source version.
- **dbghelp (mingw-w64)**: clean-room, public-domain/ZPL headers, not
  Microsoft's. All 205 named exports of the shipped `dbghelp.dll` appear in
  `lib-common/dbghelp.def`. Header is a modern superset of the 6.12 API, so
  struct versions/sizes may differ from 2010-era definitions. mingw-w64 has no
  dbghelp implementation; an open implementation exists in Wine
  (`dlls/dbghelp/`, LGPL-2.1).

## No public source (not included)

| DLL | Observed identity | Reason |
|---|---|---|
| `dbghelp.dll` | Microsoft, Debugging Tools for Windows `6.12.0002.633` | Proprietary implementation; clean-room header included (see table above). |
| `hasp_windows_x64_95595.dll` | SafeNet Sentinel LDK RuntimelessAPI `6.3.1.28566` | Proprietary; `hasp_api.h` ships only in the vendor-licensed Sentinel LDK SDK. Bundles trio and hamsterdb internally (observed strings). |
| `XTrap4Server.dll` / `20100731_521_XTrap4Server.dll` | no VERSIONINFO | Proprietary anti-cheat (WiseLogic XTrap); no public SDK. |
| `ApexProxy.dll`, `ApexProxyMain.dll` | no VERSIONINFO | Proprietary (Apex anti-cheat); no public SDK. |
| `XLSLogin.dll` | no VERSIONINFO | Unknown origin; no public source identified. |

## Statically linked: ProudNet (Nettention) — local-only headers

ProudNet is not a separate DLL; it is linked into the server EXEs.

- **Identity (observed):** in `Agent_Release_x64.exe`, RTTI and assert
  strings name `Proud::CNetServerImpl`, `Proud::CNetClientImpl`, RMI stubs
  and proxies, and `GET /PNReport/ReportError.php`. There is no version string
  in the binary. VS2010 build, so likely an early-2010s ProudNet (inference).
  Other EXEs not yet checked.
- **Public material:** `github.com/Nettention/ProudNet` contains prebuilt libs
  and headers only. There is no public implementation source.
- **Licence:** proprietary EULA. It forbids redistribution and
  reverse-engineering (§1.2b), treats the software as confidential (§3), and
  is governed by Korean law (§7–8). **Do not commit any ProudNet files.**
- **Local copy (gitignored):** `_local/proudnet-1.8.00001/`. It holds
  `ProudNet/include/` (187 headers) plus `ProudNet-License-En.txt`, from tag
  `ProudNetLibSetup-1.8.00001` (commit `c70f23f9…`, May 2023). Fetched at the
  user's direction for local naming reference only.
- **Match:** not version-matched; 1.8 is about a decade newer than the build.
  Only 18 of 63 `Proud::` RTTI classes in the Agent appear in these headers;
  the rest are internal `*Impl` types. Verify any struct layout against the
  decompiled code before relying on it.
- To re-fetch:
  `git archive ProudNetLibSetup-1.8.00001 ProudNet/include ProudNet-License-En.txt`
  from that repo into `_local/proudnet-1.8.00001/`.

Vendor attributions for XTrap (WiseLogic) and Apex are inferred from DLL
names, not corroborated by decompilation.

## Acquisition routes for the remaining libraries

| DLL | Route | Notes |
|---|---|---|
| `dbghelp.dll` | Windows SDK / WDK 7.1 "Debugging Tools for Windows" (official `dbghelp.h` + `.lib`); Microsoft public symbol server `msdl.microsoft.com/download/symbols` for the PDB | Public PDB gives Ghidra near-complete function names. Wine `dlls/dbghelp/` (LGPL-2.1) is an open reimplementation if implementation code is wanted. |
| `hasp_windows_x64_95595.dll` | Thales Sentinel LDK SDK (free evaluation after registration) for `hasp_api.h` | `95595` is the vendor ID; the runtimeless DLL is generated per vendor, so this exact build is obtainable only from the publisher. Modern `hasp_*` C API is largely backward-compatible with 6.3. |
| `XTrap4Server.dll` | Publisher-licensed SDK under NDA only; vendor appears inactive | Practical path: recover interface from the 22 KB DLL's exports + server call sites (REA/Ghidra). |
| `ApexProxy.dll`, `ApexProxyMain.dll` | Publisher-licensed SDK only | Same as XTrap; `ApexProxyMain` has a `Ver: %s Build: %s` string as a starting point. |
| `XLSLogin.dll` | Unknown | Identify first: exports/imports/PDB path/signer via `rea_inspect_with_objdump`. |

Policy: commit only redistributable material (upstream OSS, mingw-w64
headers). Vendor SDKs obtained under licence must stay out of git. Interfaces
reconstructed from binaries go in `decomp/<dll>/` with an `evidence.md`
ledger; they describe static interface only, not runtime behavior.