D:\projects\sr35\pc\sr35\sre4_pc_release_final_drm_dx11.pdb
Static task
static1
Behavioral task
behavioral1
Sample
README.url
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
README.url
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
SaintsRowIV.exe
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
SaintsRowIV.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
steam_api.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
steam_api.dll
Resource
win10v2004-20240508-en
General
-
Target
3a748b42ce04e79bcbc6a30437788475_JaffaCakes118
-
Size
7.9MB
-
MD5
3a748b42ce04e79bcbc6a30437788475
-
SHA1
d21081139e09f92eba02d73e9ad7c6539ac8296a
-
SHA256
4d4900d9a9204cd79bad88069be68fde23886d41ae59d817b7c1ad3cd47704c3
-
SHA512
b88414a4199ac16ab9e967efb354d97f39e0b6f5a42f62b6c9e2d81253d6dccca707137ff6fc793aef08211c41c8830d99719ebaa59d692e890e862dc788c4ed
-
SSDEEP
196608:cURSRLqLsL5dWEE0IYqulVxzIPWWaQgeG9AMrr6/K:ce+LqLiWoI8GodH/IK
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/SaintsRowIV.exe unpack001/steam_api.dll
Files
-
3a748b42ce04e79bcbc6a30437788475_JaffaCakes118.rar
-
README.url
-
SaintsRowIV.exe.exe windows:5 windows x86 arch:x86
8067631698d01264f1d9cd19a720a15a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ws2_32
ntohl
gethostbyname
gethostname
inet_addr
inet_ntoa
ntohs
htonl
WSASetLastError
htons
binkw32
_BinkDoFrame@4
_BinkSetVolume@12
_BinkSetSpeakerVolumes@20
_BinkControlBackgroundIO@8
_BinkSetSoundTrack@8
_BinkOpen@8
_BinkSetIOSize@4
_BinkClose@4
_BinkPause@8
_BinkGetRealtime@12
_BinkGoto@12
_BinkGetKeyFrame@12
_BinkDoFrameAsyncWait@8
_BinkSetSoundSystem@8
_BinkGetFrameBuffersInfo@8
_BinkRegisterFrameBuffers@8
_BinkGetSummary@8
_BinkDoFrameAsync@12
_BinkWait@4
_BinkSetWillLoop@8
_BinkShouldSkip@4
_BinkNextFrame@4
_BinkOpenDirectSound@4
steam_api
SteamAPI_RegisterCallResult
SteamAPI_UnregisterCallResult
SteamAPI_UnregisterCallback
SteamAPI_RegisterCallback
SteamFriends
SteamAPI_Shutdown
SteamClient
SteamAPI_Init
SteamAPI_RunCallbacks
SteamUserStats
SteamRemoteStorage
SteamUtils
SteamAPI_SetMiniDumpComment
SteamAPI_WriteMiniDump
SteamMatchmaking
SteamAPI_RestartAppIfNecessary
SteamNetworking
SteamUser
SteamApps
iphlpapi
GetAdaptersAddresses
kernel32
GetDriveTypeA
CreateMutexW
SetThreadExecutionState
WaitForMultipleObjectsEx
SetThreadAffinityMask
CreateEventW
SetEnvironmentVariableA
CompareStringW
SetThreadPriority
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
CreateFileW
SetEndOfFile
SetStdHandle
PeekNamedPipe
GetFileInformationByHandle
FlushFileBuffers
GetDriveTypeW
GetTickCount
TlsGetValue
InterlockedCompareExchange
FileTimeToSystemTime
CloseHandle
lstrlenW
GetFullPathNameW
lstrcmpiW
VirtualQuery
CreateEventA
CreateFileMappingA
GetTimeZoneInformation
GetProcAddress
ExitProcess
InterlockedExchange
GetSystemTimeAsFileTime
WriteFile
GetCurrentThreadId
GetModuleHandleA
GetComputerNameA
VirtualProtect
GetStartupInfoW
GetCurrentProcessId
ReleaseSemaphore
GetSystemInfo
DeleteCriticalSection
UnmapViewOfFile
SetLastError
GetConsoleWindow
SizeofResource
GetSystemTime
GetCurrentDirectoryW
GetFullPathNameA
HeapAlloc
LoadResource
MapViewOfFile
SetEvent
GetModuleFileNameA
FindResourceW
GetLastError
GetProcessHeap
InitializeCriticalSection
InterlockedPushEntrySList
GetCommandLineW
LockResource
CreateSemaphoreA
HeapDestroy
AddVectoredExceptionHandler
CreateFileA
InterlockedPopEntrySList
HeapFree
GetModuleHandleExA
VirtualAlloc
SetConsoleCtrlHandler
WaitForSingleObject
InterlockedIncrement
InterlockedDecrement
SetCurrentDirectoryW
GetModuleFileNameW
GetCommandLineA
TerminateProcess
GetCurrentProcess
SetErrorMode
IsDebuggerPresent
RaiseException
InterlockedExchangeAdd
GetLocaleInfoW
GetUserDefaultLCID
InterlockedFlushSList
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
LoadLibraryW
InitializeCriticalSectionAndSpinCount
FormatMessageA
GetVersion
GetFileType
GetStdHandle
LoadLibraryA
SleepEx
FindNextFileA
FindFirstFileA
FindClose
Sleep
ExpandEnvironmentStringsA
QueryPerformanceCounter
GlobalMemoryStatus
GetVersionExA
GetWindowsDirectoryA
FlushConsoleInputBuffer
QueryPerformanceFrequency
GetSystemDirectoryW
OpenFileMappingA
GetWindowsDirectoryW
DebugBreak
OpenEventA
HeapSize
TlsAlloc
TlsFree
TlsSetValue
OutputDebugStringA
CreateThread
GetExitCodeThread
GetFileAttributesA
VirtualFree
ReleaseMutex
CreateMutexA
FileTimeToLocalFileTime
FindFirstFileExA
WriteConsoleW
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetACP
GetOEMCP
IsValidCodePage
GetCPInfo
ResetEvent
GetLocalTime
RtlUnwind
GetDiskFreeSpaceA
GetFileAttributesExA
SetFilePointerEx
GetOverlappedResult
ReadFile
SetFilePointer
HeapReAlloc
GetModuleHandleW
DecodePointer
HeapSetInformation
HeapCreate
GetEnvironmentStringsW
GlobalMemoryStatusEx
EncodePointer
GetStringTypeW
GetFileInformationByHandleEx
RemoveVectoredExceptionHandler
OpenFileById
GetConsoleCP
FreeEnvironmentStringsW
SetHandleCount
WideCharToMultiByte
user32
GetMonitorInfoW
GetDesktopWindow
GetProcessWindowStation
GetUserObjectInformationW
CharToOemW
wsprintfW
GetWindowLongW
SetWindowLongW
SetWindowPos
GetWindowInfo
AdjustWindowRect
GetSystemMetrics
IsWindowVisible
ShowWindow
GetKeyNameTextW
ClipCursor
GetClientRect
MessageBoxA
SystemParametersInfoA
ShowCursor
DefWindowProcW
CreateCursor
DestroyCursor
SetCursor
SetWindowLongA
GetWindowLongA
SetActiveWindow
GetMonitorInfoA
RegisterClassExW
LoadIconA
IsIconic
TranslateMessage
DispatchMessageA
PeekMessageA
FindWindowW
RegisterRawInputDevices
ClientToScreen
GetRawInputData
SetCursorPos
PtInRect
ScreenToClient
GetCursorPos
SetCapture
ReleaseCapture
GetForegroundWindow
CallWindowProcW
UnregisterDeviceNotification
RegisterDeviceNotificationW
SetForegroundWindow
MoveWindow
CreateWindowExW
gdi32
ExtEscape
CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
GetObjectA
BitBlt
GetBitmapBits
DeleteObject
GetDeviceCaps
DeleteDC
GetStockObject
advapi32
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
RegOpenKeyExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCloseKey
RegQueryValueExW
ole32
CoInitializeEx
CoInitialize
CoCreateInstance
CoSetProxyBlanket
CoUninitialize
StringFromGUID2
wsock32
listen
accept
WSAAsyncSelect
recvfrom
inet_ntoa
select
__WSAFDIsSet
socket
connect
setsockopt
getsockopt
bind
getsockname
send
recv
WSAGetLastError
shutdown
closesocket
WSAStartup
WSACleanup
WSACancelBlockingCall
sendto
xinput1_3
ord2
ord3
dinput8
DirectInput8Create
crypt32
CryptBinaryToStringW
d3d11
D3D11CreateDevice
dxgi
CreateDXGIFactory
oleaut32
SysAllocString
SysFreeString
Exports
Exports
??1CAkRegisteredObj@@QAE@XZ
?AddBehavioralExtension@SoundEngine@AK@@YA?AW4AKRESULT@@P6AX_N@Z@Z
?AddLanguageChangeObserver@StreamMgr@AK@@YA?AW4AKRESULT@@P6AXQB_WPAX@Z1@Z
?AddPlayerMotionDevice@MotionEngine@AK@@YA?AW4AKRESULT@@EKKPAX@Z
?Break@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z
?CancelBankCallbackCookie@SoundEngine@AK@@YAXPAX@Z
?CancelEventCallback@SoundEngine@AK@@YAXK@Z
?CancelEventCallbackCookie@SoundEngine@AK@@YAXPAX@Z
?CheckPoolId@MemoryMgr@AK@@YA?AW4AKRESULT@@J@Z
?ClearBanks@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?ClearPreparedEvents@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?Close@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z
?Create@StreamMgr@AK@@YAPAVIAkStreamMgr@2@ABUAkStreamMgrSettings@@@Z
?CreateAudioInputSource@@YAPAVIAkPlugin@AK@@PAVIAkPluginMemAlloc@2@@Z
?CreateAudioInputSourceParams@@YAPAVIAkPluginParam@AK@@PAVIAkPluginMemAlloc@2@@Z
?CreateDevice@StreamMgr@AK@@YAKABUAkDeviceSettings@@PAVIAkLowLevelIOHook@12@@Z
?CreatePool@MemoryMgr@AK@@YAJPAXKKKK@Z
?DestroyDevice@StreamMgr@AK@@YA?AW4AKRESULT@@K@Z
?DestroyPool@MemoryMgr@AK@@YA?AW4AKRESULT@@J@Z
?ExecuteActionOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@KW4AkActionOnEventType@12@IJW4AkCurveInterpolation@@K@Z
?ExecuteActionOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PBDW4AkActionOnEventType@12@IJW4AkCurveInterpolation@@K@Z
?ExecuteActionOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WW4AkActionOnEventType@12@IJW4AkCurveInterpolation@@K@Z
?Falign@MemoryMgr@AK@@YA?AW4AKRESULT@@JPAX@Z
?Free@MemoryMgr@AK@@YA?AW4AKRESULT@@JPAX@Z
?GetBlock@MemoryMgr@AK@@YAPAXJ@Z
?GetBlockSize@MemoryMgr@AK@@YAKJ@Z
?GetCurrentLanguage@StreamMgr@AK@@YAPB_WXZ
?GetDefaultDeviceSettings@StreamMgr@AK@@YAXAAUAkDeviceSettings@@@Z
?GetDefaultInitSettings@MusicEngine@AK@@YAXAAUAkMusicSettings@@@Z
?GetDefaultInitSettings@SoundEngine@AK@@YAXAAUAkInitSettings@@@Z
?GetDefaultPlatformInitSettings@SoundEngine@AK@@YAXAAUAkPlatformInitSettings@@@Z
?GetDefaultSettings@StreamMgr@AK@@YAXAAUAkStreamMgrSettings@@@Z
?GetFileLocationResolver@StreamMgr@AK@@YAPAVIAkFileLocationResolver@12@XZ
?GetIDFromString@SoundEngine@AK@@YAKPBD@Z
?GetIDFromString@SoundEngine@AK@@YAKPB_W@Z
?GetMaxPools@MemoryMgr@AK@@YAJXZ
?GetNumPools@MemoryMgr@AK@@YAJXZ
?GetObjAndAddref@CAkRegistryMgr@@QAEPAVCAkRegisteredObj@@I@Z
?GetPanningRule@SoundEngine@AK@@YA?AW4AkPanningRule@@XZ
?GetPlayingSegmentInfo@MusicEngine@AK@@YA?AW4AKRESULT@@KAAUAkSegmentInfo@@_N@Z
?GetPoolAttributes@MemoryMgr@AK@@YA?AW4AkMemPoolAttributes@@J@Z
?GetPoolID@StreamMgr@AK@@YAJXZ
?GetPoolMemoryUsed@MemoryMgr@AK@@YAXJAAUPoolMemInfo@12@@Z
?GetPoolName@MemoryMgr@AK@@YAPA_WJ@Z
?GetPoolStats@MemoryMgr@AK@@YA?AW4AKRESULT@@JAAUPoolStats@12@@Z
?GetSourcePlayPosition@SoundEngine@AK@@YA?AW4AKRESULT@@KPAJ_N@Z
?GetSpeakerConfiguration@SoundEngine@AK@@YAKXZ
?GetTimeStamp@Monitor@AK@@YAJXZ
?Init@MusicEngine@AK@@YA?AW4AKRESULT@@PAUAkMusicSettings@@@Z
?Init@SoundEngine@AK@@YA?AW4AKRESULT@@PAUAkInitSettings@@PAUAkPlatformInitSettings@@@Z
?IsInitialized@MemoryMgr@AK@@YA_NXZ
?IsInitialized@SoundEngine@AK@@YA_NXZ
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@KJ@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@KP6AXKW43@JPAX@Z1J@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBDJAAK@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBDP6AXKW43@JPAX@Z2JAAK@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBXKAAK@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBXKP6AXKW43@JPAX@Z2AAK@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WJAAK@Z
?LoadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WP6AXKW43@JPAX@Z2JAAK@Z
?LockPlaylist@DynamicSequence@SoundEngine@AK@@YAPAVPlaylist@123@K@Z
?Malign@MemoryMgr@AK@@YAPAXJIK@Z
?Malloc@MemoryMgr@AK@@YAPAXJI@Z
?Open@DynamicSequence@SoundEngine@AK@@YAKIKP6AXW4AkCallbackType@@PAUAkCallbackInfo@@@ZPAXW4DynamicSequenceType@123@@Z
?Pause@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@KJW4AkCurveInterpolation@@@Z
?Play@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@KJW4AkCurveInterpolation@@@Z
?PlaySourcePlugin@SoundEngine@AK@@YAKKKI@Z
?PostCode@Monitor@AK@@YA?AW4AKRESULT@@W4ErrorCode@12@W4ErrorLevel@12@@Z
?PostEvent@SoundEngine@AK@@YAKKIKP6AXW4AkCallbackType@@PAUAkCallbackInfo@@@ZPAXKPAUAkExternalSourceInfo@@K@Z
?PostEvent@SoundEngine@AK@@YAKPBDIKP6AXW4AkCallbackType@@PAUAkCallbackInfo@@@ZPAXKPAUAkExternalSourceInfo@@K@Z
?PostEvent@SoundEngine@AK@@YAKPB_WIKP6AXW4AkCallbackType@@PAUAkCallbackInfo@@@ZPAXKPAUAkExternalSourceInfo@@K@Z
?PostString@Monitor@AK@@YA?AW4AKRESULT@@PBDW4ErrorLevel@12@@Z
?PostString@Monitor@AK@@YA?AW4AKRESULT@@PB_WW4ErrorLevel@12@@Z
?PostTrigger@SoundEngine@AK@@YA?AW4AKRESULT@@KI@Z
?PostTrigger@SoundEngine@AK@@YA?AW4AKRESULT@@PBDI@Z
?PostTrigger@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WI@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@KP6AXKW43@JPAX@Z2W4AkBankContent@12@@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@KW4AkBankContent@12@@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PBDP6AXKW43@JPAX@Z3W4AkBankContent@12@@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PBDW4AkBankContent@12@@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PB_WP6AXKW43@JPAX@Z3W4AkBankContent@12@@Z
?PrepareBank@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PB_WW4AkBankContent@12@@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAKK@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAKKP6AXKW43@JPAX@Z3@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAPBDK@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAPBDKP6AXKW43@JPAX@Z3@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAPB_WK@Z
?PrepareEvent@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@PAPB_WKP6AXKW43@JPAX@Z3@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@KPAKK@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@KPAKKP6AXKW43@JPAX@Z4@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@PBDPAPBDK@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@PBDPAPBDKP6AXKW43@JPAX@Z5@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@PB_WPAPB_WK@Z
?PrepareGameSyncs@SoundEngine@AK@@YA?AW4AKRESULT@@W4PreparationType@12@W4AkGroupType@@PB_WPAPB_WKP6AXKW43@JPAX@Z5@Z
?RegisterCodec@SoundEngine@AK@@YA?AW4AKRESULT@@KKP6APAVIAkSoftwareCodec@@PAX@Z1@Z
?RegisterGameObj@SoundEngine@AK@@YA?AW4AKRESULT@@I@Z
?RegisterGameObj@SoundEngine@AK@@YA?AW4AKRESULT@@IPBD@Z
?RegisterGlobalCallback@SoundEngine@AK@@YA?AW4AKRESULT@@P6AX_N@Z@Z
?RegisterMotionDevice@MotionEngine@AK@@YAXKKP6APAVIAkPlugin@2@PAVIAkPluginMemAlloc@2@@Z@Z
?RegisterPlugin@SoundEngine@AK@@YA?AW4AKRESULT@@W4AkPluginType@@KKP6APAVIAkPlugin@2@PAVIAkPluginMemAlloc@2@@ZP6APAVIAkPluginParam@2@1@Z@Z
?ReleaseBlock@MemoryMgr@AK@@YA?AW4AKRESULT@@JPAX@Z
?RemoveBehavioralExtension@SoundEngine@AK@@YA?AW4AKRESULT@@P6AX_N@Z@Z
?RemoveLanguageChangeObserver@StreamMgr@AK@@YAXPAX@Z
?RemovePlayerMotionDevice@MotionEngine@AK@@YAXEKK@Z
?RenderAudio@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?ResetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@KIJW4AkCurveInterpolation@@@Z
?ResetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@PBDIJW4AkCurveInterpolation@@@Z
?ResetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WIJW4AkCurveInterpolation@@@Z
?ResolveDialogueEvent@DynamicDialogue@SoundEngine@AK@@YAKKPAKKK@Z
?ResolveDialogueEvent@DynamicDialogue@SoundEngine@AK@@YAKPBDPAPBDKK@Z
?ResolveDialogueEvent@DynamicDialogue@SoundEngine@AK@@YAKPB_WPAPB_WKK@Z
?Resume@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@KJW4AkCurveInterpolation@@@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@KIJ_N@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@KIM_N@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PBDIJ_N@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PBDIM_N@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WIJ_N@Z
?SeekOnEvent@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WIM_N@Z
?SetActiveListeners@SoundEngine@AK@@YA?AW4AKRESULT@@IK@Z
?SetActorMixerEffect@SoundEngine@AK@@YA?AW4AKRESULT@@KKK@Z
?SetAttenuationScalingFactor@SoundEngine@AK@@YA?AW4AKRESULT@@IM@Z
?SetAudioInputCallbacks@@YAXP6AXKPAVAkAudioBuffer@@@ZP6AXKAAUAkAudioFormat@@@ZP6AMK@Z@Z
?SetAuxBusVolumes@SoundEngine@AK@@YA?AW4AKRESULT@@KABUAkSpeakerVolumes@@@Z
?SetBankLoadIOSettings@SoundEngine@AK@@YA?AW4AKRESULT@@MD@Z
?SetBusEffect@SoundEngine@AK@@YA?AW4AKRESULT@@KKK@Z
?SetBusEffect@SoundEngine@AK@@YA?AW4AKRESULT@@PBDKK@Z
?SetBusEffect@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WKK@Z
?SetCurrentLanguage@StreamMgr@AK@@YA?AW4AKRESULT@@PB_W@Z
?SetFileLocationResolver@StreamMgr@AK@@YAXPAVIAkFileLocationResolver@12@@Z
?SetGameObjectAuxSendValues@SoundEngine@AK@@YA?AW4AKRESULT@@IPAUAkAuxSendValue@@K@Z
?SetGameObjectOutputBusVolume@SoundEngine@AK@@YA?AW4AKRESULT@@IM@Z
?SetListenerPipeline@SoundEngine@AK@@YA?AW4AKRESULT@@K_N0@Z
?SetListenerPosition@SoundEngine@AK@@YA?AW4AKRESULT@@ABUAkListenerPosition@@K@Z
?SetListenerScalingFactor@SoundEngine@AK@@YA?AW4AKRESULT@@KM@Z
?SetListenerSpatialization@SoundEngine@AK@@YA?AW4AKRESULT@@K_NPAUAkSpeakerVolumes@@@Z
?SetLocalOutput@Monitor@AK@@YA?AW4AKRESULT@@KP6AXW4ErrorCode@12@PB_WW4ErrorLevel@12@KI@Z@Z
?SetMaxNumVoicesLimit@SoundEngine@AK@@YA?AW4AKRESULT@@G@Z
?SetMonitoring@MemoryMgr@AK@@YA?AW4AKRESULT@@J_N@Z
?SetMultiplePositions@SoundEngine@AK@@YA?AW4AKRESULT@@IPBUAkSoundPosition@@GW4MultiPositionType@12@@Z
?SetObjectObstructionAndOcclusion@SoundEngine@AK@@YA?AW4AKRESULT@@IKMM@Z
?SetPanningRule@SoundEngine@AK@@YA?AW4AKRESULT@@W4AkPanningRule@@@Z
?SetPlayerListener@MotionEngine@AK@@YAXEE@Z
?SetPlayerVolume@MotionEngine@AK@@YAXEM@Z
?SetPoolName@MemoryMgr@AK@@YA?AW4AKRESULT@@JPBD@Z
?SetPoolName@MemoryMgr@AK@@YA?AW4AKRESULT@@JPB_W@Z
?SetPosition@SoundEngine@AK@@YA?AW4AKRESULT@@IABUAkSoundPosition@@K@Z
?SetPositionInternal@SoundEngine@AK@@YA?AW4AKRESULT@@IABUAkSoundPosition@@K@Z
?SetRTPCInternal@CAkRTPCMgr@@QAE?AW4AKRESULT@@KMPAVCAkRegisteredObj@@AAUTransParams@@W4AkValueMeaning@@@Z
?SetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@KMIJW4AkCurveInterpolation@@@Z
?SetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@PBDMIJW4AkCurveInterpolation@@@Z
?SetRTPCValue@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WMIJW4AkCurveInterpolation@@@Z
?SetState@SoundEngine@AK@@YA?AW4AKRESULT@@KK@Z
?SetState@SoundEngine@AK@@YA?AW4AKRESULT@@PBD0@Z
?SetState@SoundEngine@AK@@YA?AW4AKRESULT@@PB_W0@Z
?SetSwitch@SoundEngine@AK@@YA?AW4AKRESULT@@KKI@Z
?SetSwitch@SoundEngine@AK@@YA?AW4AKRESULT@@PBD0I@Z
?SetSwitch@SoundEngine@AK@@YA?AW4AKRESULT@@PB_W0I@Z
?SetVolumeThreshold@SoundEngine@AK@@YA?AW4AKRESULT@@M@Z
?StartOutputCapture@SoundEngine@AK@@YA?AW4AKRESULT@@PB_W@Z
?StartProfilerCapture@SoundEngine@AK@@YA?AW4AKRESULT@@PB_W@Z
?Stop@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@KJW4AkCurveInterpolation@@@Z
?StopAll@SoundEngine@AK@@YAXI@Z
?StopOutputCapture@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?StopPlayingID@SoundEngine@AK@@YAXKJW4AkCurveInterpolation@@@Z
?StopProfilerCapture@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?StopSourcePlugin@SoundEngine@AK@@YA?AW4AKRESULT@@KKK@Z
?Term@MemoryMgr@AK@@YAXXZ
?Term@MusicEngine@AK@@YAXXZ
?Term@SoundEngine@AK@@YAXXZ
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@KP6AXKW43@JPAX@Z1@Z
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@KPAJ@Z
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBDP6AXKW43@JPAX@Z2@Z
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PBDPAJ@Z
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WP6AXKW43@JPAX@Z2@Z
?UnloadBank@SoundEngine@AK@@YA?AW4AKRESULT@@PB_WPAJ@Z
?UnlockPlaylist@DynamicSequence@SoundEngine@AK@@YA?AW4AKRESULT@@K@Z
?UnregisterAllGameObj@SoundEngine@AK@@YA?AW4AKRESULT@@XZ
?UnregisterGameObj@SoundEngine@AK@@YA?AW4AKRESULT@@I@Z
?UnregisterGlobalCallback@SoundEngine@AK@@YA?AW4AKRESULT@@P6AX_N@Z@Z
?g_DefaultPoolId@@3JA
?g_LEngineDefaultPoolId@@3JA
?g_pAssertHook@@3P6AXPBD0H@ZA
?g_pRTPCMgr@@3PAVCAkRTPCMgr@@A
?g_pRegistryMgr@@3PAVCAkRegistryMgr@@A
?m_pStreamMgr@IAkStreamMgr@AK@@1PAV12@A
GDS_value_copy
GDS_value_decode_i32
GDS_value_decode_value
GDS_value_decode_values
GDS_value_done
GDS_value_encode_values
GDS_value_encoded_byte_count
GDS_value_get_bool
GDS_value_get_crc16
GDS_value_get_crc32
GDS_value_get_data
GDS_value_get_float32
GDS_value_get_float64
GDS_value_get_int32
GDS_value_get_int64
GDS_value_get_isnull
GDS_value_get_text
GDS_value_get_type
GDS_value_init
GDS_value_set_bool
GDS_value_set_crc16
GDS_value_set_crc32
GDS_value_set_data
GDS_value_set_float32
GDS_value_set_float64
GDS_value_set_int32
GDS_value_set_int64
GDS_value_set_isnull
GDS_value_set_text
GDS_value_set_type
GDS_value_setref
ares_cancel
ares_destroy
ares_destroy_options
ares_dup
ares_expand_name
ares_free_hostent
ares_free_string
ares_gethostbyname
ares_gethostbyname_file
ares_getsock
ares_init
ares_init_options
ares_library_cleanup
ares_library_init
ares_mkquery
ares_parse_a_reply
ares_parse_aaaa_reply
ares_process
ares_process_fd
ares_query
ares_save_options
ares_search
ares_send
ares_set_socket_callback
ares_strerror
ares_timeout
Sections
.text Size: 14.0MB - Virtual size: 14.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xcute Size: - Virtual size: 64.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 554KB - Virtual size: 45.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.version Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
steam_api.dll.dll windows:6 windows x86 arch:x86
655b6ddbeca1230e91c68cecb346b5d1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
LoadLibraryA
CopyFileA
GetProcessTimes
GetCurrentProcess
GetSystemTimeAsFileTime
GetTickCount
GetSystemPowerStatus
FindClose
GetLastError
FindNextFileA
GetDiskFreeSpaceExA
GetFileTime
ReadFile
CloseHandle
IsBadReadPtr
WriteConsoleW
SetStdHandle
SetFileAttributesA
DeleteFileA
GetFileAttributesA
CreateDirectoryA
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
InitializeCriticalSection
GetModuleFileNameA
FindFirstFileA
VirtualFree
GetConsoleMode
GetConsoleCP
CreateFileA
SetEndOfFile
SetFilePointerEx
WriteFile
GetFileSizeEx
VirtualAlloc
HeapAlloc
HeapFree
GetProcessHeap
HeapDestroy
HeapCreate
RaiseException
WideCharToMultiByte
MultiByteToWideChar
QueryPerformanceCounter
WritePrivateProfileStructA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileStructA
EncodePointer
DecodePointer
RtlUnwind
GetCommandLineA
GetStdHandle
GetModuleFileNameW
IsProcessorFeaturePresent
InterlockedDecrement
ExitProcess
GetModuleHandleExW
GetProcAddress
HeapSize
Sleep
IsDebuggerPresent
SetLastError
InterlockedIncrement
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
OutputDebugStringW
LoadLibraryExW
LoadLibraryW
LCMapStringW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
GetStringTypeW
FlushFileBuffers
CreateFileW
user32
LoadBitmapA
gdi32
DeleteObject
GetBitmapBits
advapi32
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptImportKey
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextA
CryptVerifySignatureA
shell32
SHGetSpecialFolderPathA
Exports
Exports
GetHSteamPipe
GetHSteamUser
SteamAPI_GetHSteamPipe
SteamAPI_GetHSteamUser
SteamAPI_GetSteamInstallPath
SteamAPI_Init
SteamAPI_InitSafe
SteamAPI_IsSteamRunning
SteamAPI_RegisterCallResult
SteamAPI_RegisterCallback
SteamAPI_RestartAppIfNecessary
SteamAPI_RunCallbacks
SteamAPI_SetBreakpadAppID
SteamAPI_SetMiniDumpComment
SteamAPI_SetTryCatchCallbacks
SteamAPI_Shutdown
SteamAPI_UnregisterCallResult
SteamAPI_UnregisterCallback
SteamAPI_UseBreakpadCrashHandler
SteamAPI_WriteMiniDump
SteamApps
SteamClient
SteamContentServer
SteamContentServerUtils
SteamContentServer_Init
SteamContentServer_RunCallbacks
SteamContentServer_Shutdown
SteamController
SteamFriends
SteamGameServer
SteamGameServerApps
SteamGameServerHTTP
SteamGameServerNetworking
SteamGameServerStats
SteamGameServerUtils
SteamGameServer_BSecure
SteamGameServer_GetHSteamPipe
SteamGameServer_GetHSteamUser
SteamGameServer_GetIPCCallCount
SteamGameServer_GetSteamID
SteamGameServer_Init
SteamGameServer_InitSafe
SteamGameServer_RunCallbacks
SteamGameServer_Shutdown
SteamHTTP
SteamMasterServerUpdater
SteamMatchmaking
SteamMatchmakingServers
SteamNetworking
SteamRemoteStorage
SteamScreenshots
SteamUGC
SteamUnifiedMessages
SteamUser
SteamUserStats
SteamUtils
Steam_GetHSteamUserCurrent
Steam_RegisterInterfaceFuncs
Steam_RunCallbacks
g_pSteamClientGameServer
Sections
.text Size: 181KB - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RLD0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLD1 Size: 385KB - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
steam_api.ini
-
videos/logo_volition.bik