E:\work\98581f602ca92dc6\data\win\dirtrally2.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2024-02-20_cd3c4092e73f07b9fd93a67e3c80c3e4_ryuk.exe
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-02-20_cd3c4092e73f07b9fd93a67e3c80c3e4_ryuk.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
2024-02-20_cd3c4092e73f07b9fd93a67e3c80c3e4_ryuk
-
Size
21.1MB
-
MD5
cd3c4092e73f07b9fd93a67e3c80c3e4
-
SHA1
093672f47bf83bee7020802e5ef9fde3bfaac51a
-
SHA256
1e5ec1b18feec7b77e728761d7adf3040eb60e25bb5f99ec6da901aae03aaffc
-
SHA512
8939608b00f2fb16f8168ab2cac0393dc4caf0d5c015c6575582f70d1547cda1337d389a37489e76d35a1206033e49f0c770575df52149024dacf492a7981df1
-
SSDEEP
393216:wgALEdLoYK3ZcAPFb5XyHM3HJX4xvCNimoQXUUZcMWGlsR8:wgAOSFzsq
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-20_cd3c4092e73f07b9fd93a67e3c80c3e4_ryuk
Files
-
2024-02-20_cd3c4092e73f07b9fd93a67e3c80c3e4_ryuk.exe windows:6 windows x64 arch:x64
f4469523348e266aad179a6a86a0b00a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
shlwapi
PathIsSameRootW
PathAppendW
PathIsDirectoryEmptyW
PathRemoveBackslashW
PathRemoveFileSpecW
StrStrIA
gdiplus
GdipDeleteGraphics
GdipGraphicsClear
GdipDrawImageRectI
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipCreateFromHDC
crashrpt1405
ord9
ord8
ord20
ord19
steam_api64
SteamAPI_GetHSteamUser
SteamInternal_ContextInit
SteamInternal_CreateInterface
SteamAPI_RegisterCallback
SteamAPI_UnregisterCallback
SteamAPI_RegisterCallResult
SteamAPI_UnregisterCallResult
SteamAPI_Shutdown
SteamAPI_Init
SteamAPI_RestartAppIfNecessary
SteamAPI_GetHSteamPipe
SteamAPI_RunCallbacks
kernel32
LoadResource
LockResource
SizeofResource
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
FindResourceW
MultiByteToWideChar
WideCharToMultiByte
CreateDirectoryW
GetFileAttributesW
CreateFileW
WriteFile
CloseHandle
ExitProcess
GetLastError
GetCommandLineW
GetFullPathNameW
SetUnhandledExceptionFilter
HeapSetInformation
CreateMutexW
GetCurrentProcess
GetLocalTime
SetProcessAffinityMask
CreateTimerQueueTimer
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
HeapSize
SetStdHandle
FlushFileBuffers
OutputDebugStringW
GetTimeZoneInformation
GetConsoleCP
ReadConsoleW
OutputDebugStringA
Sleep
QueryPerformanceFrequency
QueryPerformanceCounter
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
RegisterWaitForSingleObject
GetModuleHandleW
GetThreadTimes
GetConsoleMode
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetModuleHandleA
VirtualProtect
DuplicateHandle
GetDateFormatW
HeapReAlloc
HeapFree
HeapAlloc
GetACP
InterlockedPopEntrySList
ExitThread
WriteConsoleW
GetModuleFileNameA
QueryDepthSList
UnregisterWaitEx
GetFileType
GetStdHandle
SetCurrentDirectoryA
SetEnvironmentVariableA
GetModuleHandleExW
LoadLibraryExW
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
InterlockedPushEntrySList
GetStringTypeW
GetLocaleInfoW
LCMapStringW
CompareStringW
GetCPInfo
DecodePointer
EncodePointer
GetTickCount
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
TerminateProcess
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
GetStartupInfoW
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
MoveFileExW
GetSystemInfo
SetThreadPriority
UnregisterWait
GetCurrentThread
CopyFileW
GetTempFileNameW
IsWow64Process
GetLogicalProcessorInformation
IsProcessorFeaturePresent
LoadLibraryA
OpenProcess
GetSystemPowerStatus
GetComputerNameExA
GetExitCodeThread
InitializeCriticalSectionAndSpinCount
DebugBreak
GetDiskFreeSpaceA
GetCurrentDirectoryA
SetThreadExecutionState
GetLocaleInfoEx
GetLocaleInfoA
FormatMessageA
SetThreadIdealProcessor
SetThreadAffinityMask
GetProcessAffinityMask
LocalFree
GetProcAddress
GetLargePageMinimum
VirtualQuery
VirtualFree
VirtualAlloc
GetVersionExW
GlobalMemoryStatusEx
ResumeThread
SuspendThread
GetThreadPriority
GetCurrentThreadId
CreateThread
CreateSemaphoreExW
ReleaseMutex
ReleaseSemaphore
TryAcquireSRWLockShared
TryAcquireSRWLockExclusive
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockShared
ReleaseSRWLockExclusive
InitializeSRWLock
GetVersionExA
VerSetConditionMask
GetModuleHandleExA
VerifyVersionInfoW
SleepEx
CreateFileA
GetTickCount64
DeviceIoControl
TerminateThread
RaiseException
WaitForMultipleObjects
CreateEventW
WaitForSingleObject
ResetEvent
SetEvent
SetFilePointer
SetFileAttributesW
FreeLibraryAndExitThread
GetCurrentDirectoryW
GetFileInformationByHandleEx
LoadLibraryW
FormatMessageW
FindNextFileW
GetModuleFileNameW
DeleteFileW
FindClose
FindFirstFileW
GetDiskFreeSpaceExW
GetFileAttributesExW
GetFileSizeEx
ReadFile
ReadFileEx
RemoveDirectoryW
SetEndOfFile
SetFilePointerEx
WriteFileEx
GetTempPathW
GetOverlappedResult
CancelIoEx
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
WaitForSingleObjectEx
WaitForMultipleObjectsEx
FreeLibrary
user32
SetFocus
ClipCursor
SetCursor
AdjustWindowRect
GetWindowRect
GetClientRect
ReleaseCapture
GetFocus
IsIconic
SetWindowPos
PostMessageW
MessageBoxA
SetRect
SetRectEmpty
GetWindowLongPtrW
SetWindowLongPtrW
EnumDisplaySettingsW
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
SystemParametersInfoW
ToUnicode
MapVirtualKeyW
GetCursorPos
ScreenToClient
GetRawInputData
GetRawInputDeviceInfoW
RegisterRawInputDevices
GetRawInputDeviceList
wsprintfW
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
DefWindowProcW
PostQuitMessage
UnregisterClassW
RegisterClassExW
CreateWindowExW
DestroyWindow
ShowWindow
UpdateLayeredWindow
SendInput
GetSystemMetrics
GetDC
ReleaseDC
MessageBoxW
LoadCursorW
LoadIconW
GetAsyncKeyState
RegisterDeviceNotificationW
UnregisterDeviceNotification
CallWindowProcW
GetForegroundWindow
GetCursor
gdi32
CreateCompatibleBitmap
GetDIBits
GetObjectW
CreateDCA
ExtEscape
GetStockObject
CreateCompatibleDC
SelectObject
DeleteObject
DeleteDC
advapi32
RegCreateKeyExW
GetUserNameA
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
shell32
CommandLineToArgvW
SHGetFolderPathA
SHGetKnownFolderPath
ShellExecuteW
SHGetFolderPathW
ole32
CoTaskMemAlloc
CoInitializeEx
CoInitialize
CoCreateInstance
CoUninitialize
CoCreateGuid
CoTaskMemFree
PropVariantClear
CreateStreamOnHGlobal
d3dcompiler_47
D3DCompile
D3DReflect
xinput9_1_0
XInputGetState
XInputSetState
XInputGetCapabilities
dinput8
DirectInput8Create
d3d11
D3D11CreateDevice
wtsapi32
WTSRegisterSessionNotification
WTSUnRegisterSessionNotification
ws2_32
WSAStartup
WSACleanup
accept
sendto
recvfrom
ntohs
bind
closesocket
connect
htons
listen
recv
select
send
setsockopt
inet_addr
socket
WSAGetLastError
__WSAFDIsSet
ioctlsocket
iphlpapi
NotifyAddrChange
GetAdaptersAddresses
CancelIPChangeNotify
winhttp
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpAddRequestHeaders
WinHttpOpenRequest
WinHttpOpen
WinHttpCloseHandle
WinHttpSetTimeouts
WinHttpSetOption
WinHttpConnect
WinHttpQueryDataAvailable
WinHttpWriteData
WinHttpReadData
WinHttpCrackUrl
bcrypt
BCryptCreateHash
BCryptDestroyHash
BCryptGenRandom
BCryptHashData
BCryptFinishHash
BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider
bink2w64
BinkRequestStopAsyncThread
BinkDoFrameAsyncMulti
BinkStartAsyncThread
BinkSetWillLoop
BinkSetMemory
BinkSetFileOffset
BinkSetSoundTrack
BinkWaitStopAsyncThread
BinkOpenTrack
BinkGetTrackData
BinkGetTrackID
BinkGetRealtime
BinkDoFrameAsyncWait
BinkOpen
BinkGetFrameBuffersInfo
BinkRegisterFrameBuffers
BinkNextFrame
BinkWait
BinkClose
BinkPause
BinkFreeGlobals
BinkSetVolume
BinkSetSpeakerVolumes
BinkShouldSkip
crypt32
CertOpenStore
CertCloseStore
CryptVerifyMessageSignature
CertGetNameStringA
CertAddEncodedCertificateToStore
CertFreeCertificateContext
wintrust
WinVerifyTrust
imagehlp
ImageEnumerateCertificates
ImageGetCertificateData
ImageGetCertificateHeader
setupapi
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
CM_Get_Device_ID_Size
CM_Get_Device_IDW
SetupDiEnumDeviceInfo
SetupDiEnumDeviceInterfaces
hid
HidD_GetHidGuid
oleaut32
VariantClear
VariantInit
Exports
Exports
??0ReadBytesMem@AK@@QEAA@PEBXJ@Z
??0ReadBytesMem@AK@@QEAA@XZ
??0WriteBytesMem@AK@@QEAA@XZ
??1CAkEmitter@@UEAA@XZ
??1CAkGameObject@@UEAA@XZ
??1CAkRegisteredObj@@UEAA@XZ
??1ReadBytesMem@AK@@UEAA@XZ
??1WriteBytesMem@AK@@UEAA@XZ
?AddLanguageChangeObserver@StreamMgr@AK@@YA?AW4AKRESULT@@P6AXQEB_WPEAX@Z1@Z
?AddOutputCaptureMarker@SoundEngine@AK@@YA?AW4AKRESULT@@PEBD@Z
?AddPlayerMotionDevice@MotionEngine@AK@@YA?AW4AKRESULT@@EKKPEAXK@Z
?AddSecondaryOutput@SoundEngine@AK@@YA?AW4AKRESULT@@KW4AkAudioOutputType@@PEB_KKKK@Z
?Attach@ReadBytesMem@AK@@QEAAXPEBXJ@Z
?Break@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z
?Bytes@WriteBytesMem@AK@@UEBAPEAEXZ
?CancelBankCallbackCookie@SoundEngine@AK@@YAXPEAX@Z
?CancelEventCallback@SoundEngine@AK@@YAXK@Z
?CancelEventCallbackCookie@SoundEngine@AK@@YAXPEAX@Z
?CancelEventCallbackGameObject@SoundEngine@AK@@YAX_K@Z
?Clear@WriteBytesMem@AK@@UEAAXXZ
?ClearBanks@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?ClearPreparedEvents@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?Close@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z
?Count@WriteBytesMem@AK@@UEBAJXZ
?Create@StreamMgr@AK@@YAPEAVIAkStreamMgr@2@AEBUAkStreamMgrSettings@@@Z
?CreateDevice@StreamMgr@AK@@YAKAEBUAkDeviceSettings@@PEAVIAkLowLevelIOHook@12@@Z
?DecodeBank@SoundEngine@AK@@YA?AW4AKRESULT@@PEBXKJAEAPEAXAEAK@Z
?DestroyDevice@StreamMgr@AK@@YA?AW4AKRESULT@@K@Z
?Detach@WriteBytesMem@AK@@UEAAPEAEXZ
?ExecuteActionOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@KW4AkActionOnEventType@12@_KJW4AkCurveInterpolation@@K@Z
?ExecuteActionOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PEBDW4AkActionOnEventType@12@_KJW4AkCurveInterpolation@@K@Z
?ExecuteActionOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PEB_WW4AkActionOnEventType@12@_KJW4AkCurveInterpolation@@K@Z
?FlushAllCaches@StreamMgr@AK@@YAXXZ
?GetActiveGameObjects@Query@SoundEngine@AK@@YA?AW4AKRESULT@@AEAV?$AkArray@_K_KU?$AkArrayAllocatorNoAlign@U_ArrayPoolDefault@@@@$0CA@U?$AkAssignmentMovePolicy@_K@@@@@Z
?GetAudioSettings@SoundEngine@AK@@YA?AW4AKRESULT@@AEAUAkAudioSettings@@@Z
?GetBackgroundMusicMute@SoundEngine@AK@@YA_NXZ
?GetBufferStatusForPinnedEvent@SoundEngine@AK@@YA?AW4AKRESULT@@KAEAMAEA_N@Z
?GetBufferStatusForPinnedEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PEBDAEAMAEA_N@Z
?GetBufferStatusForPinnedEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PEB_WAEAMAEA_N@Z
?GetBufferTick@SoundEngine@AK@@YAKXZ
?GetContainerHistory@SoundEngine@AK@@YA?AW4AKRESULT@@PEAVIWriteBytes@2@@Z
?GetCurrentLanguage@StreamMgr@AK@@YAPEB_WXZ
?GetCustomPropertyValue@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KKAEAJ@Z
?GetCustomPropertyValue@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KKAEAM@Z
?GetDefaultDeviceSettings@StreamMgr@AK@@YAXAEAUAkDeviceSettings@@@Z
?GetDefaultInitSettings@MusicEngine@AK@@YAXAEAUAkMusicSettings@@@Z
?GetDefaultInitSettings@SoundEngine@AK@@YAXAEAUAkInitSettings@@@Z
?GetDefaultPlatformInitSettings@SoundEngine@AK@@YAXAEAUAkPlatformInitSettings@@@Z
?GetDefaultSettings@StreamMgr@AK@@YAXAEAUAkStreamMgrSettings@@@Z
?GetDeviceID@AK@@YAKPEAUIMMDevice@@@Z
?GetDeviceIDFromName@AK@@YAKPEA_W@Z
?GetDialogueEventCustomPropertyValue@DynamicDialogue@SoundEngine@AK@@YA?AW4AKRESULT@@KKAEAJ@Z
?GetDialogueEventCustomPropertyValue@DynamicDialogue@SoundEngine@AK@@YA?AW4AKRESULT@@KKAEAM@Z
?GetDirectSoundInstance@AK@@YAPEAUIDirectSound8@@XZ
?GetEventIDFromPlayingID@Query@SoundEngine@AK@@YAKK@Z
?GetFileLocationResolver@StreamMgr@AK@@YAPEAVIAkFileLocationResolver@12@XZ
?GetGameObjectAuxSendValues@Query@SoundEngine@AK@@YA?AW4AKRESULT@@_KPEAUAkAuxSendValue@@AEAK@Z
?GetGameObjectDryLevelValue@Query@SoundEngine@AK@@YA?AW4AKRESULT@@_K0AEAM@Z
?GetGameObjectFromPlayingID@Query@SoundEngine@AK@@YA_KK@Z
?GetGlobalPluginContext@SoundEngine@AK@@YAPEAVIAkGlobalPluginContext@2@XZ
?GetIDFromString@SoundEngine@AK@@YAKPEBD@Z
?GetIDFromString@SoundEngine@AK@@YAKPEB_W@Z
?GetIsGameObjectActive@Query@SoundEngine@AK@@YA_N_K@Z
?GetListenerPosition@Query@SoundEngine@AK@@YA?AW4AKRESULT@@_KAEAVAkTransform@@@Z
?GetListenerSpatialization@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KAEA_NAEAPEAMAEAUAkChannelConfig@@@Z
?GetListeners@Query@SoundEngine@AK@@YA?AW4AKRESULT@@_KPEA_KAEAK@Z
?GetMaxRadius@Query@SoundEngine@AK@@YA?AW4AKRESULT@@AEAV?$AkArray@UGameObjDst@Query@SoundEngine@AK@@AEBU1234@U?$AkArrayAllocatorNoAlign@U_ArrayPoolDefault@@@@$0CA@U?$AkAssignmentMovePolicy@UGameObjDst@Query@SoundEngine@AK@@@@@@@Z
?GetMaxRadius@Query@SoundEngine@AK@@YAM_K@Z
?GetObjAndAddref@CAkRegistryMgr@@QEAAPEAVCAkRegisteredObj@@_K@Z
?GetObjectObstructionAndOcclusion@Query@SoundEngine@AK@@YA?AW4AKRESULT@@_K0AEAM1@Z
?GetPanningRule@SoundEngine@AK@@YA?AW4AKRESULT@@AEAW4AkPanningRule@@W4AkAudioOutputType@@K@Z
?GetPauseTimes@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@KAEAK0@Z
?GetPlayingIDsFromGameObject@Query@SoundEngine@AK@@YA?AW4AKRESULT@@_KAEAKPEAK@Z
?GetPlayingItem@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@KAEAKAEAPEAX@Z
?GetPlayingSegmentInfo@MusicEngine@AK@@YA?AW4AKRESULT@@KAEAUAkSegmentInfo@@_N@Z
?GetPoolID@StreamMgr@AK@@YAJXZ
?GetPosition@Query@SoundEngine@AK@@YA?AW4AKRESULT@@_KAEAVAkTransform@@@Z
?GetPositioningInfo@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KAEAUAkPositioningInfo@@@Z
?GetRTPCValue@Query@SoundEngine@AK@@YA?AW4AKRESULT@@K_KKAEAMAEAW4RTPCValue_type@123@@Z
?GetRTPCValue@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PEBD_KKAEAMAEAW4RTPCValue_type@123@@Z
?GetRTPCValue@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PEB_W_KKAEAMAEAW4RTPCValue_type@123@@Z
?GetSourcePlayPosition@SoundEngine@AK@@YA?AW4AKRESULT@@KPEAJ_N@Z
?GetSourcePlayPositions@SoundEngine@AK@@YA?AW4AKRESULT@@KPEAUAkSourcePosition@@PEAK_N@Z
?GetSourceStreamBuffering@SoundEngine@AK@@YA?AW4AKRESULT@@KAEAJAEA_N@Z
?GetSpeakerAngles@SoundEngine@AK@@YA?AW4AKRESULT@@PEAMAEAKAEAMW4AkAudioOutputType@@K@Z
?GetSpeakerConfiguration@SoundEngine@AK@@YA?AUAkChannelConfig@@W4AkAudioOutputType@@K@Z
?GetState@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KAEAK@Z
?GetState@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PEBDAEAK@Z
?GetState@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PEB_WAEAK@Z
?GetSwitch@Query@SoundEngine@AK@@YA?AW4AKRESULT@@K_KAEAK@Z
?GetSwitch@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PEBD_KAEAK@Z
?GetSwitch@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PEB_W_KAEAK@Z
?GetTimeStamp@Monitor@AK@@YAJXZ
?GetWindowsDeviceName@AK@@YAPEB_WJAEAKW4AkAudioDeviceState@@@Z
?GetWwiseXAudio2Interface@AK@@YAPEAUIUnknown@@XZ
?Init@MusicEngine@AK@@YA?AW4AKRESULT@@PEAUAkMusicSettings@@@Z
?Init@SoundEngine@AK@@YA?AW4AKRESULT@@PEAUAkInitSettings@@PEAUAkPlatformInitSettings@@@Z
?IsInitialized@SoundEngine@AK@@YA_NXZ
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@KJ@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@KP6AXKPEBXW43@JPEAX@Z2J@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PEBDJAEAK@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PEBDP6AXKPEBXW43@JPEAX@Z3JAEAK@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PEBXKAEAK@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PEBXKJAEAK@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PEBXKP6AXK0W43@JPEAX@Z2AEAK@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PEBXKP6AXK0W43@JPEAX@Z2JAEAK@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PEB_WJAEAK@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PEB_WP6AXKPEBXW43@JPEAX@Z3JAEAK@Z
?LockPlaylist@DynamicSequence@SoundEngine@AK@@YAPEAVPlaylist@123@K@Z
?MixNinNChannels@CAkMixer@@SAXPEAVAkAudioBuffer@@0AEAUAkRamp@@PEBM2MG@Z
?MixOneInNChannels@CAkMixer@@SAXPEIAMPEAVAkAudioBuffer@@UAkChannelConfig@@AEAUAkRamp@@PEBM4MG@Z
?MuteBackgroundMusic@SoundEngine@AK@@YAX_N@Z
?Open@DynamicSequence@SoundEngine@AK@@YAK_KKP6AXW4AkCallbackType@@PEAUAkCallbackInfo@@@ZPEAXW4DynamicSequenceType@123@@Z
?Pause@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@KJW4AkCurveInterpolation@@@Z
?PinEventInStreamCache@SoundEngine@AK@@YA?AW4AKRESULT@@KDD@Z
?PinEventInStreamCache@SoundEngine@AK@@YA?AW4AKRESULT@@PEBDDD@Z
?PinEventInStreamCache@SoundEngine@AK@@YA?AW4AKRESULT@@PEB_WDD@Z
?Play@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@KJW4AkCurveInterpolation@@@Z
?PlaySourcePlugin@SoundEngine@AK@@YAKKK_K@Z
?PostCode@Monitor@AK@@YA?AW4AKRESULT@@W4ErrorCode@12@W4ErrorLevel@12@K_KK_N@Z
?PostEvent@SoundEngine@AK@@YAKK_KKP6AXW4AkCallbackType@@PEAUAkCallbackInfo@@@ZPEAXKPEAUAkExternalSourceInfo@@K@Z
?PostEvent@SoundEngine@AK@@YAKPEBD_KKP6AXW4AkCallbackType@@PEAUAkCallbackInfo@@@ZPEAXKPEAUAkExternalSourceInfo@@K@Z
?PostEvent@SoundEngine@AK@@YAKPEB_W_KKP6AXW4AkCallbackType@@PEAUAkCallbackInfo@@@ZPEAXKPEAUAkExternalSourceInfo@@K@Z
?PostMIDIOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@K_KPEAUAkMIDIPost@@G@Z
?PostString@Monitor@AK@@YA?AW4AKRESULT@@PEBDW4ErrorLevel@12@K_KK_N@Z
?PostString@Monitor@AK@@YA?AW4AKRESULT@@PEB_WW4ErrorLevel@12@K_KK_N@Z
?PostTrigger@SoundEngine@AK@@YA?AW4AKRESULT@@K_K@Z
?PostTrigger@SoundEngine@AK@@YA?AW4AKRESULT@@PEBD_K@Z
?PostTrigger@SoundEngine@AK@@YA?AW4AKRESULT@@PEB_W_K@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@KP6AXKPEBXW43@JPEAX@Z3W4AkBankContent@12@@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@KW4AkBankContent@12@@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PEBDP6AXKPEBXW43@JPEAX@Z4W4AkBankContent@12@@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PEBDW4AkBankContent@12@@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PEB_WP6AXKPEBXW43@JPEAX@Z4W4AkBankContent@12@@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PEB_WW4AkBankContent@12@@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PEAKK@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PEAKKP6AXKPEBXW43@JPEAX@Z4@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PEAPEBDK@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PEAPEBDKP6AXKPEBXW43@JPEAX@Z4@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PEAPEB_WK@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PEAPEB_WKP6AXKPEBXW43@JPEAX@Z4@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@KPEAKK@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@KPEAKKP6AXKPEBXW43@JPEAX@Z5@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@PEBDPEAPEBDK@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@PEBDPEAPEBDKP6AXKPEBXW43@JPEAX@Z6@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@PEB_WPEAPEB_WK@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@PEB_WPEAPEB_WKP6AXKPEBXW43@JPEAX@Z6@Z
?QueryAudioObjectIDs@Query@SoundEngine@AK@@YA?AW4AKRESULT@@KAEAKPEAUAkObjectInfo@@@Z
?QueryAudioObjectIDs@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PEBDAEAKPEAUAkObjectInfo@@@Z
?QueryAudioObjectIDs@Query@SoundEngine@AK@@YA?AW4AKRESULT@@PEB_WAEAKPEAUAkObjectInfo@@@Z
?ReadBytes@ReadBytesMem@AK@@UEAA_NPEAXJAEAJ@Z
?RegisterBusMeteringCallback@SoundEngine@AK@@YA?AW4AKRESULT@@KP6AXPEAVIAkMetering@2@UAkChannelConfig@@W4AkMeteringFlags@@@Z2@Z
?RegisterBusVolumeCallback@SoundEngine@AK@@YA?AW4AKRESULT@@KP6AXPEAUAkSpeakerVolumeMatrixCallbackInfo@@@Z@Z
?RegisterCodec@SoundEngine@AK@@YA?AW4AKRESULT@@KKP6APEAVIAkSoftwareCodec@@PEAX@Z1@Z
?RegisterGameObj@SoundEngine@AK@@YA?AW4AKRESULT@@_K@Z
?RegisterGameObj@SoundEngine@AK@@YA?AW4AKRESULT@@_KPEBD@Z
?RegisterGlobalCallback@SoundEngine@AK@@YA?AW4AKRESULT@@P6AXPEAVIAkGlobalPluginContext@2@W4AkGlobalCallbackLocation@@PEAX@ZK2@Z
?RegisterPlugin@SoundEngine@AK@@YA?AW4AKRESULT@@W4AkPluginType@@KKP6APEAVIAkPlugin@2@PEAVIAkPluginMemAlloc@2@@ZP6APEAVIAkPluginParam@2@1@Z@Z
?RegisterPluginDLL@SoundEngine@AK@@YA?AW4AKRESULT@@PEB_W@Z
?RemoveLanguageChangeObserver@StreamMgr@AK@@YAXPEAX@Z
?RemovePlayerMotionDevice@MotionEngine@AK@@YAXEKK@Z
?RemoveSecondaryOutput@SoundEngine@AK@@YA?AW4AKRESULT@@KW4AkAudioOutputType@@@Z
?RenderAudio@SoundEngine@AK@@YA?AW4AKRESULT@@_N@Z
?Reserve@WriteBytesMem@AK@@UEAA_NJ@Z
?ResetListenersToDefault@SoundEngine@AK@@YA?AW4AKRESULT@@_K@Z
?ResetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@K_KJW4AkCurveInterpolation@@_N@Z
?ResetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@PEBD_KJW4AkCurveInterpolation@@_N@Z
?ResetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@PEB_W_KJW4AkCurveInterpolation@@_N@Z
?ResolveDialogueEvent@DynamicDialogue@SoundEngine@AK@@YAKKPEAKKKP6A_NKKPEAX@Z1@Z
?ResolveDialogueEvent@DynamicDialogue@SoundEngine@AK@@YAKPEBDPEAPEBDKKP6A_NKKPEAX@Z2@Z
?ResolveDialogueEvent@DynamicDialogue@SoundEngine@AK@@YAKPEB_WPEAPEB_WKKP6A_NKKPEAX@Z2@Z
?Resume@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@KJW4AkCurveInterpolation@@@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@K_KJ_NK@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@K_KM_NK@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PEBD_KJ_NK@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PEBD_KM_NK@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PEB_W_KJ_NK@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PEB_W_KM_NK@Z
?SendPluginCustomGameData@SoundEngine@AK@@YA?AW4AKRESULT@@K_KW4AkPluginType@@KKPEBXK@Z
?SetActorMixerEffect@SoundEngine@AK@@YA?AW4AKRESULT@@KKK@Z
?SetBankLoadIOSettings@SoundEngine@AK@@YA?AW4AKRESULT@@MD@Z
?SetBusConfig@SoundEngine@AK@@YA?AW4AKRESULT@@KUAkChannelConfig@@@Z
?SetBusConfig@SoundEngine@AK@@YA?AW4AKRESULT@@PEBDUAkChannelConfig@@@Z
?SetBusConfig@SoundEngine@AK@@YA?AW4AKRESULT@@PEB_WUAkChannelConfig@@@Z
?SetBusEffect@SoundEngine@AK@@YA?AW4AKRESULT@@KKK@Z
?SetBusEffect@SoundEngine@AK@@YA?AW4AKRESULT@@PEBDKK@Z
?SetBusEffect@SoundEngine@AK@@YA?AW4AKRESULT@@PEB_WKK@Z
?SetContainerHistory@SoundEngine@AK@@YA?AW4AKRESULT@@PEAVIReadBytes@2@@Z
?SetCount@WriteBytesMem@AK@@UEAAXJ@Z
?SetCurrentLanguage@StreamMgr@AK@@YA?AW4AKRESULT@@PEB_W@Z
?SetDefaultListeners@SoundEngine@AK@@YA?AW4AKRESULT@@PEB_KK@Z
?SetFileLocationResolver@StreamMgr@AK@@YAXPEAVIAkFileLocationResolver@12@@Z
?SetGameObjectAuxSendValues@SoundEngine@AK@@YA?AW4AKRESULT@@_KPEAUAkAuxSendValue@@K@Z
?SetGameObjectOutputBusVolume@SoundEngine@AK@@YA?AW4AKRESULT@@_K0M@Z
?SetListenerPipeline@SoundEngine@AK@@YA?AW4AKRESULT@@_K_N1@Z
?SetListenerSpatialization@SoundEngine@AK@@YA?AW4AKRESULT@@_K_NUAkChannelConfig@@PEAM@Z
?SetListeners@SoundEngine@AK@@YA?AW4AKRESULT@@_KPEB_KK@Z
?SetLocalOutput@Monitor@AK@@YA?AW4AKRESULT@@KP6AXW4ErrorCode@12@PEB_WW4ErrorLevel@12@K_K@Z@Z
?SetMaxNumVoicesLimit@SoundEngine@AK@@YA?AW4AKRESULT@@G@Z
?SetMedia@SoundEngine@AK@@YA?AW4AKRESULT@@PEAUAkSourceSettings@@K@Z
?SetMemPool@WriteBytesMem@AK@@QEAAXJ@Z
?SetMixer@SoundEngine@AK@@YA?AW4AKRESULT@@KK@Z
?SetMixer@SoundEngine@AK@@YA?AW4AKRESULT@@PEBDK@Z
?SetMixer@SoundEngine@AK@@YA?AW4AKRESULT@@PEB_WK@Z
?SetMultipleObstructionAndOcclusion@SoundEngine@AK@@YA?AW4AKRESULT@@_K0PEAUAkObstructionOcclusionValues@@K@Z
?SetMultiplePositions@SoundEngine@AK@@YA?AW4AKRESULT@@_KPEBUAkChannelEmitter@@GW4MultiPositionType@12@@Z
?SetMultiplePositions@SoundEngine@AK@@YA?AW4AKRESULT@@_KPEBVAkTransform@@GW4MultiPositionType@12@@Z
?SetObjectObstructionAndOcclusion@SoundEngine@AK@@YA?AW4AKRESULT@@_K0MM@Z
?SetPanningRule@SoundEngine@AK@@YA?AW4AKRESULT@@W4AkPanningRule@@W4AkAudioOutputType@@K@Z
?SetPlayerListener@MotionEngine@AK@@YAXE_K@Z
?SetPlayerVolume@MotionEngine@AK@@YAXEM@Z
?SetPosition@SoundEngine@AK@@YA?AW4AKRESULT@@_KAEBVAkTransform@@@Z
?SetPositionInternal@SoundEngine@AK@@YA?AW4AKRESULT@@_KAEBVAkTransform@@@Z
?SetRTPCInternal@CAkRTPCMgr@@QEAA?AW4AKRESULT@@KMAEBVAkRTPCKey@@AEAUTransParamsBase@@W4AkValueMeaning@@_N@Z
?SetRTPCInternal@CAkRTPCMgr@@QEAA?AW4AKRESULT@@KMPEAVCAkRegisteredObj@@KAEAUTransParamsBase@@W4AkValueMeaning@@@Z
?SetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@KM_KJW4AkCurveInterpolation@@_N@Z
?SetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@PEBDM_KJW4AkCurveInterpolation@@_N@Z
?SetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@PEB_WM_KJW4AkCurveInterpolation@@_N@Z
?SetRTPCValueByPlayingID@SoundEngine@AK@@YA?AW4AKRESULT@@KMKJW4AkCurveInterpolation@@_N@Z
?SetRTPCValueByPlayingID@SoundEngine@AK@@YA?AW4AKRESULT@@PEBDMKJW4AkCurveInterpolation@@_N@Z
?SetRTPCValueByPlayingID@SoundEngine@AK@@YA?AW4AKRESULT@@PEB_WMKJW4AkCurveInterpolation@@_N@Z
?SetRandomSeed@SoundEngine@AK@@YAXK@Z
?SetScalingFactor@SoundEngine@AK@@YA?AW4AKRESULT@@_KM@Z
?SetSecondaryOutputVolume@SoundEngine@AK@@YA?AW4AKRESULT@@KW4AkAudioOutputType@@M@Z
?SetSpeakerAngles@SoundEngine@AK@@YA?AW4AKRESULT@@PEAMKMW4AkAudioOutputType@@K@Z
?SetState@SoundEngine@AK@@YA?AW4AKRESULT@@KK@Z
?SetState@SoundEngine@AK@@YA?AW4AKRESULT@@PEBD0@Z
?SetState@SoundEngine@AK@@YA?AW4AKRESULT@@PEB_W0@Z
?SetSwitch@SoundEngine@AK@@YA?AW4AKRESULT@@KK_K@Z
?SetSwitch@SoundEngine@AK@@YA?AW4AKRESULT@@PEBD0_K@Z
?SetSwitch@SoundEngine@AK@@YA?AW4AKRESULT@@PEB_W0_K@Z
?SetVolumeThreshold@SoundEngine@AK@@YA?AW4AKRESULT@@M@Z
?StartOutputCapture@SoundEngine@AK@@YA?AW4AKRESULT@@PEB_W@Z
?StartProfilerCapture@SoundEngine@AK@@YA?AW4AKRESULT@@PEB_W@Z
?Stop@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@KJW4AkCurveInterpolation@@@Z
?StopAll@SoundEngine@AK@@YAX_K@Z
?StopMIDIOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@K_K@Z
?StopOutputCapture@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?StopPlayingID@SoundEngine@AK@@YAXKJW4AkCurveInterpolation@@@Z
?StopProfilerCapture@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?StopSourcePlugin@SoundEngine@AK@@YA?AW4AKRESULT@@KKK@Z
?Suspend@SoundEngine@AK@@YA?AW4AKRESULT@@_N@Z
?Term@MusicEngine@AK@@YAXXZ
?Term@SoundEngine@AK@@YAXXZ
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@KPEBXP6AXK0W43@JPEAX@Z2@Z
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@KPEBXPEAJ@Z
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PEBDPEBXP6AXK1W43@JPEAX@Z3@Z
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PEBDPEBXPEAJ@Z
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PEB_WPEBXP6AXK1W43@JPEAX@Z3@Z
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PEB_WPEBXPEAJ@Z
?UnlockPlaylist@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z
?UnpinEventInStreamCache@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z
?UnpinEventInStreamCache@SoundEngine@AK@@YA?AW4AKRESULT@@PEBD@Z
?UnpinEventInStreamCache@SoundEngine@AK@@YA?AW4AKRESULT@@PEB_W@Z
?UnregisterAllGameObj@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?UnregisterGameObj@SoundEngine@AK@@YA?AW4AKRESULT@@_K@Z
?UnregisterGlobalCallback@SoundEngine@AK@@YA?AW4AKRESULT@@P6AXPEAVIAkGlobalPluginContext@2@W4AkGlobalCallbackLocation@@PEAX@ZK@Z
?UnsetMedia@SoundEngine@AK@@YA?AW4AKRESULT@@PEAUAkSourceSettings@@K@Z
?WakeupFromSuspend@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?WriteBytes@WriteBytesMem@AK@@UEAA_NPEBXJAEAJ@Z
?g_DefaultPoolId@@3JA
?g_LEngineDefaultPoolId@@3JA
?g_PlayingID@SoundEngine@AK@@3KA
?g_pAssertHook@@3P6AXPEBD0H@ZEA
?g_pRTPCMgr@@3PEAVCAkRTPCMgr@@EA
?g_pRegistryMgr@@3PEAVCAkRegistryMgr@@EA
?g_pSwitchMgr@@3PEAVCAkSwitchMgr@@EA
?m_pStreamMgr@IAkStreamMgr@AK@@1PEAV12@EA
g_pAKPluginList
Sections
.text Size: 15.6MB - Virtual size: 15.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 373KB - Virtual size: 11.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 959KB - Virtual size: 959KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 317B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 495KB - Virtual size: 495KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ