C:\buildslave\unity\build\artifacts\WindowsPlayer\Win32_VS2019_nondev_i_r\WindowsPlayer_player_Master_il2cpp_x86.pdb
Overview
overview
5Static
static
3Arcane.and...wn.zip
windows7-x64
1Arcane.and...wn.zip
windows10-2004-x64
1Tyrion.Cut...!!.txt
windows7-x64
1Tyrion.Cut...!!.txt
windows10-2004-x64
1Tyrion.Cut...PC.url
windows7-x64
1Tyrion.Cut...PC.url
windows10-2004-x64
1Tyrion.Cut...ne.exe
windows7-x64
1Tyrion.Cut...ne.exe
windows10-2004-x64
1Tyrion.Cut...ne.dll
windows7-x64
1Tyrion.Cut...ne.dll
windows10-2004-x64
3Tyrion.Cut...ne.dll
windows7-x64
3Tyrion.Cut...ne.dll
windows10-2004-x64
3Tyrion.Cut...ne.dll
windows7-x64
1Tyrion.Cut...ne.dll
windows10-2004-x64
1Tyrion.Cut...Arcane
windows7-x64
3Tyrion.Cut...Arcane
windows10-2004-x64
5Tyrion.Cut...e.json
windows7-x64
3Tyrion.Cut...e.json
windows10-2004-x64
3Tyrion.Cut...e.json
windows7-x64
3Tyrion.Cut...e.json
windows10-2004-x64
3Tyrion.Cut...e.bank
windows7-x64
3Tyrion.Cut...e.bank
windows10-2004-x64
3Tyrion.Cut...e.bank
windows7-x64
3Tyrion.Cut...e.bank
windows10-2004-x64
3Tyrion.Cut...p.info
windows7-x64
3Tyrion.Cut...p.info
windows10-2004-x64
3Tyrion.Cut...config
windows7-x64
3Tyrion.Cut...config
windows10-2004-x64
3Tyrion.Cut...nity3d
windows7-x64
3Tyrion.Cut...nity3d
windows10-2004-x64
3Tyrion.Cut...ne.dat
windows7-x64
3Tyrion.Cut...ne.dat
windows10-2004-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Arcane.and.Unknown.zip
Resource
win7-20240508-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Arcane.and.Unknown.zip
Resource
win10v2004-20240426-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/HOW TO RUN GAME!!.txt
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/HOW TO RUN GAME!!.txt
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/STEAMUNLOCKED » Free Steam Games Pre-installed for PC.url
Resource
win7-20231129-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/STEAMUNLOCKED » Free Steam Games Pre-installed for PC.url
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral9
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane.dll
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral11
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane.dll
Resource
win7-20240419-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral12
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral13
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane.dll
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral14
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral15
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane
Resource
win7-20240221-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral16
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane
Resource
win10v2004-20240226-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral17
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane.json
Resource
win7-20240215-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral18
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane.json
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral19
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane.json
Resource
win7-20240221-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral20
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane.json
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral21
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane.bank
Resource
win7-20240221-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral22
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane.bank
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral23
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane.bank
Resource
win7-20240508-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral24
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane.bank
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral25
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane_Data/app.info
Resource
win7-20240221-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral26
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane_Data/app.info
Resource
win10v2004-20240426-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral27
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane_Data/boot.config
Resource
win7-20240215-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral28
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane_Data/boot.config
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral29
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane_Data/data.unity3d
Resource
win7-20240419-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral30
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane_Data/data.unity3d
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral31
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane.dat
Resource
win7-20240220-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral32
Sample
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane.dat
Resource
win10v2004-20240426-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
Arcane.and.Unknown.zip
-
Size
425.9MB
-
MD5
0e70719b16ed37505081d9efae8c0b5c
-
SHA1
9f495fa0cec30b1b3d9913c607828fb5905a63e8
-
SHA256
e553a710df7970ee3dcafd40e1e4e7b7f996c293c91f19a3875c6e5bec3ebc8d
-
SHA512
b554fc73a0ecd3cce917f88b2327cd87963567392f43451b44aaf237d4008a40768976ac6d1dc1e4f8c605c05dc6cb8bcf9b703173bd1c2b121877b0508959de
-
SSDEEP
12582912:s+loZHER9ScGJcUuGUJAqyrodMJoWenaDNdhGENemhPBs9SEwsseP062oEhm:s+leE/ScatKazgMJBeZENj1XEwsseP0c
Score
3/10
Malware Config
Signatures
-
Unsigned PE 5 IoCs
Checks for missing Authenticode signature.
resource unpack001/Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane.exe unpack001/Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane_Data/Plugins/x86/fmodstudio.dll unpack001/Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane_Data/Plugins/x86/lib_burst_generated.dll unpack001/Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane_Data/Plugins/x86/resonanceaudio.dll unpack001/Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/GameAssembly.dll
Files
-
Arcane.and.Unknown.zip.zip
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/HOW TO RUN GAME!!.txt
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/STEAMUNLOCKED » Free Steam Games Pre-installed for PC.url
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane.exe.exe windows:6 windows x86 arch:x86
e31e227f9c58f4b15ebf5b93d8c3c2a0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
unityplayer
UnityMain
kernel32
HeapAlloc
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
CloseHandle
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
DecodePointer
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CreateFileW
Exports
Exports
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 552KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane_Data/Plugins/x86/fmodstudio.dll.dll windows:6 windows x86 arch:x86
2e0e850d4e421078a9d95c687eca8920
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
c:\jk\workspace\Build__2.2__UnityLibs_Win\studio_api\platforms\win\vs2019\_builds\studio_api\Release Monolithic\Win32\fmodstudio.pdb
Imports
ws2_32
htonl
listen
htons
getsockopt
ioctlsocket
connect
closesocket
bind
freeaddrinfo
recv
accept
getaddrinfo
WSAIoctl
WSAGetLastError
WSACleanup
WSAStartup
socket
shutdown
setsockopt
send
select
msacm32
acmStreamOpen
acmStreamSize
acmStreamConvert
acmStreamPrepareHeader
acmStreamUnprepareHeader
acmFormatSuggest
winmm
timeGetTime
kernel32
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
OutputDebugStringW
HeapReAlloc
SetStdHandle
LCMapStringW
CompareStringW
GetFullPathNameW
GetCurrentDirectoryW
CloseHandle
WaitForSingleObject
SetEnvironmentVariableW
WideCharToMultiByte
GetProcAddress
LoadLibraryA
CreateFileW
FlushFileBuffers
GetFileSizeEx
ReadFile
SetFilePointer
WriteFile
GetLastError
QueryPerformanceCounter
QueryPerformanceFrequency
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ReleaseSemaphore
Sleep
GetCurrentThreadId
SetThreadPriority
FreeLibrary
LoadLibraryW
SetThreadAffinityMask
CreateSemaphoreA
MultiByteToWideChar
GetProcessHeap
GetStringTypeW
GetTimeZoneInformation
HeapSize
CreateEventA
ResetEvent
ReadConsoleW
DecodePointer
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapFree
HeapAlloc
ExitProcess
InitializeCriticalSectionAndSpinCount
SetEvent
SetEndOfFile
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
InterlockedFlushSList
RtlUnwind
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
EncodePointer
RaiseException
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetStdHandle
GetModuleFileNameW
WriteConsoleW
advapi32
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegQueryValueExA
ole32
CoInitializeEx
CoCreateInstance
CoCreateGuid
PropVariantClear
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CLSIDFromString
Exports
Exports
?addDSP@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@HPAVDSP@2@@Z
?addFadePoint@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@_KM@Z
?addGroup@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAV12@_NPAPAVDSPConnection@2@@Z
?addInput@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAV12@PAPAVDSPConnection@2@W4FMOD_DSPCONNECTION_TYPE@@@Z
?addPolygon@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@MM_NHPBUFMOD_VECTOR@@PAH@Z
?addSyncPoint@Sound@FMOD@@QAG?AW4FMOD_RESULT@@IIPBDPAPAUFMOD_SYNCPOINT@@@Z
?attachChannelGroupToPort@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_PORT_TYPE@@_KPAVChannelGroup@2@_N@Z
?attachFileSystem@System@FMOD@@QAG?AW4FMOD_RESULT@@P6G?AW43@PBDPAIPAPAXPAX@ZP6G?AW43@33@ZP6G?AW43@33I13@ZP6G?AW43@3I3@Z@Z
?close@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?create@System@Studio@FMOD@@SG?AW4FMOD_RESULT@@PAPAV123@I@Z
?createChannelGroup@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAPAVChannelGroup@2@@Z
?createClientProfile@SystemI@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?createDSP@System@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_DSP_DESCRIPTION@@PAPAVDSP@2@@Z
?createDSPByPlugin@System@FMOD@@QAG?AW4FMOD_RESULT@@IPAPAVDSP@2@@Z
?createDSPByType@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_DSP_TYPE@@PAPAVDSP@2@@Z
?createDiskFile@SystemI@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAUFMOD_CREATESOUNDEXINFO@@PAPAVFile@2@PA_N@Z
?createGeometry@System@FMOD@@QAG?AW4FMOD_RESULT@@HHPAPAVGeometry@2@@Z
?createInstance@EventDescription@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAPAVEventInstance@23@@Z
?createMemoryFile@SystemI@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVFile@2@@Z
?createReverb3D@System@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVReverb3D@2@@Z
?createSound@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDIPAUFMOD_CREATESOUNDEXINFO@@PAPAVSound@2@@Z
?createSoundGroup@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAPAVSoundGroup@2@@Z
?createStream@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDIPAUFMOD_CREATESOUNDEXINFO@@PAPAVSound@2@@Z
?deleteSyncPoint@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_SYNCPOINT@@@Z
?detachChannelGroupFromPort@System@FMOD@@QAG?AW4FMOD_RESULT@@PAVChannelGroup@2@@Z
?disconnectAll@DSP@FMOD@@QAG?AW4FMOD_RESULT@@_N0@Z
?disconnectFrom@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAV12@PAVDSPConnection@2@@Z
?flushCommands@System@Studio@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?flushSampleLoading@System@Studio@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?get3DAttributes@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_VECTOR@@0@Z
?get3DAttributes@EventInstance@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAUFMOD_3D_ATTRIBUTES@@@Z
?get3DAttributes@Reverb3D@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_VECTOR@@PAM1@Z
?get3DConeOrientation@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_VECTOR@@@Z
?get3DConeSettings@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAM00@Z
?get3DConeSettings@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAM00@Z
?get3DCustomRolloff@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAPAUFMOD_VECTOR@@PAH@Z
?get3DCustomRolloff@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAPAUFMOD_VECTOR@@PAH@Z
?get3DDistanceFilter@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PA_NPAM1@Z
?get3DDopplerLevel@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?get3DLevel@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?get3DListenerAttributes@System@FMOD@@QAG?AW4FMOD_RESULT@@HPAUFMOD_VECTOR@@000@Z
?get3DMinMaxDistance@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAM0@Z
?get3DMinMaxDistance@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAM0@Z
?get3DNumListeners@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?get3DOcclusion@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAM0@Z
?get3DSettings@System@FMOD@@QAG?AW4FMOD_RESULT@@PAM00@Z
?get3DSpread@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?getActive@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?getActive@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?getActive@Reverb3D@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?getAdvancedSettings@System@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_ADVANCEDSETTINGS@@@Z
?getAdvancedSettings@System@Studio@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_STUDIO_ADVANCEDSETTINGS@@@Z
?getAudibility@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?getBank@System@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PBDPAPAVBank@23@@Z
?getBankByID@System@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PBUFMOD_GUID@@PAPAVBank@23@@Z
?getBankCount@System@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAH@Z
?getBankList@System@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAPAVBank@23@HPAH@Z
?getBufferUsage@System@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAUFMOD_STUDIO_BUFFER_USAGE@@@Z
?getBus@System@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PBDPAPAVBus@23@@Z
?getBusByID@System@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PBUFMOD_GUID@@PAPAVBus@23@@Z
?getBusCount@Bank@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAH@Z
?getBusList@Bank@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAPAVBus@23@HPAH@Z
?getBypass@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?getCPUUsage@Bus@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAI0@Z
?getCPUUsage@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAI0@Z
?getCPUUsage@EventInstance@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAI0@Z
?getCPUUsage@System@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_CPU_USAGE@@@Z
?getCPUUsage@System@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAUFMOD_STUDIO_CPU_USAGE@@PAUFMOD_CPU_USAGE@@@Z
?getChannel@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAVChannel@2@@Z
?getChannel@System@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAVChannel@2@@Z
?getChannelFormat@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAIPAHPAW4FMOD_SPEAKERMODE@@@Z
?getChannelGroup@Bus@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAPAVChannelGroup@3@@Z
?getChannelGroup@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVChannelGroup@2@@Z
?getChannelGroup@EventInstance@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAPAVChannelGroup@3@@Z
?getChannelsPlaying@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH0@Z
?getCommandAtTime@CommandReplay@Studio@FMOD@@QBG?AW4FMOD_RESULT@@MPAH@Z
?getCommandCount@CommandReplay@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAH@Z
?getCommandInfo@CommandReplay@Studio@FMOD@@QBG?AW4FMOD_RESULT@@HPAUFMOD_STUDIO_COMMAND_INFO@@@Z
?getCommandString@CommandReplay@Studio@FMOD@@QBG?AW4FMOD_RESULT@@HPADH@Z
?getCoreSystem@System@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAPAV13@@Z
?getCurrentCommand@CommandReplay@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAHPAM@Z
?getCurrentSound@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVSound@2@@Z
?getDSP@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAVDSP@2@@Z
?getDSPBufferSize@System@FMOD@@QAG?AW4FMOD_RESULT@@PAIPAH@Z
?getDSPClock@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PA_K0@Z
?getDSPIndex@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAVDSP@2@PAH@Z
?getDSPInfoByPlugin@System@FMOD@@QAG?AW4FMOD_RESULT@@IPAPBUFMOD_DSP_DESCRIPTION@@@Z
?getDSPInfoByType@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_DSP_TYPE@@PAPBUFMOD_DSP_DESCRIPTION@@@Z
?getDataParameterIndex@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HPAH@Z
?getDefaultMixMatrix@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_SPEAKERMODE@@0PAMH@Z
?getDefaults@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAMPAH@Z
?getDelay@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PA_K0PA_N@Z
?getDescription@EventInstance@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAPAVEventDescription@23@@Z
?getDriver@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getDriverInfo@System@FMOD@@QAG?AW4FMOD_RESULT@@HPADHPAUFMOD_GUID@@PAHPAW4FMOD_SPEAKERMODE@@2@Z
?getEvent@System@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PBDPAPAVEventDescription@23@@Z
?getEventByID@System@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PBUFMOD_GUID@@PAPAVEventDescription@23@@Z
?getEventCount@Bank@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAH@Z
?getEventList@Bank@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAPAVEventDescription@23@HPAH@Z
?getFadePoints@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAIPA_KPAM@Z
?getFileUsage@System@FMOD@@QAG?AW4FMOD_RESULT@@PA_J00@Z
?getFormat@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAW4FMOD_SOUND_TYPE@@PAW4FMOD_SOUND_FORMAT@@PAH2@Z
?getFrequency@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?getGeometryOcclusion@System@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_VECTOR@@0PAM1@Z
?getGeometrySettings@System@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?getGlobals@FMOD@@YGXPAPAVGlobal@1@@Z
?getGroup@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAV12@@Z
?getID@Bank@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAUFMOD_GUID@@@Z
?getID@Bus@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAUFMOD_GUID@@@Z
?getID@EventDescription@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAUFMOD_GUID@@@Z
?getID@VCA@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAUFMOD_GUID@@@Z
?getIdle@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?getIndex@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getInfo@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PADPAIPAH22@Z
?getInput@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAV12@PAPAVDSPConnection@2@@Z
?getInput@DSPConnection@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVDSP@2@@Z
?getInstanceCount@EventDescription@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAH@Z
?getInstanceList@EventDescription@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAPAVEventInstance@23@HPAH@Z
?getLength@CommandReplay@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAM@Z
?getLength@EventDescription@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAH@Z
?getLength@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAII@Z
?getListenerAttributes@System@Studio@FMOD@@QBG?AW4FMOD_RESULT@@HPAUFMOD_3D_ATTRIBUTES@@PAUFMOD_VECTOR@@@Z
?getListenerMask@EventInstance@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAI@Z
?getListenerWeight@System@Studio@FMOD@@QAG?AW4FMOD_RESULT@@HPAM@Z
?getLoadingState@Bank@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAW4FMOD_STUDIO_LOADING_STATE@@@Z
?getLoopCount@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getLoopCount@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getLoopPoints@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAII0I@Z
?getLoopPoints@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAII0I@Z
?getLowPassGain@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?getMasterChannelGroup@System@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVChannelGroup@2@@Z
?getMasterSoundGroup@System@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVSoundGroup@2@@Z
?getMaxAudible@SoundGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getMaxAudibleBehavior@SoundGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAW4FMOD_SOUNDGROUP_BEHAVIOR@@@Z
?getMaxPolygons@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PAH0@Z
?getMemoryUsage@Bus@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAUFMOD_STUDIO_MEMORY_USAGE@@@Z
?getMemoryUsage@EventInstance@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAUFMOD_STUDIO_MEMORY_USAGE@@@Z
?getMemoryUsage@System@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAUFMOD_STUDIO_MEMORY_USAGE@@@Z
?getMeteringEnabled@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PA_N0@Z
?getMeteringInfo@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_DSP_METERING_INFO@@0@Z
?getMinMaxDistance@EventDescription@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAM0@Z
?getMinMaxDistance@EventInstance@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAM0@Z
?getMix@DSPConnection@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?getMixMatrix@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAMPAH1H@Z
?getMixMatrix@DSPConnection@FMOD@@QAG?AW4FMOD_RESULT@@PAMPAH1H@Z
?getMode@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z
?getMode@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z
?getMusicChannelVolume@Sound@FMOD@@QAG?AW4FMOD_RESULT@@HPAM@Z
?getMusicNumChannels@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getMusicSpeed@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?getMute@Bus@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PA_N@Z
?getMute@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?getMuteFadeSpeed@SoundGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?getName@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PADH@Z
?getName@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PADH@Z
?getName@SoundGroup@FMOD@@QAG?AW4FMOD_RESULT@@PADH@Z
?getNestedPlugin@System@FMOD@@QAG?AW4FMOD_RESULT@@IHPAI@Z
?getNetworkProxy@System@FMOD@@QAG?AW4FMOD_RESULT@@PADH@Z
?getNetworkTimeout@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getNumChannels@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getNumDSPs@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getNumDrivers@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getNumGroups@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getNumInputs@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getNumListeners@System@Studio@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getNumNestedPlugins@System@FMOD@@QAG?AW4FMOD_RESULT@@IPAH@Z
?getNumOutputs@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getNumParameters@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getNumPlaying@SoundGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getNumPlugins@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_PLUGINTYPE@@PAH@Z
?getNumPolygons@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getNumSounds@SoundGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getNumSubSounds@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getNumSyncPoints@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getNumTags@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAH0@Z
?getOpenState@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAW4FMOD_OPENSTATE@@PAIPA_N2@Z
?getOutput@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAV12@PAPAVDSPConnection@2@@Z
?getOutput@DSPConnection@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVDSP@2@@Z
?getOutput@System@FMOD@@QAG?AW4FMOD_RESULT@@PAW4FMOD_OUTPUTTYPE@@@Z
?getOutputByPlugin@System@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z
?getOutputChannelFormat@DSP@FMOD@@QAG?AW4FMOD_RESULT@@IHW4FMOD_SPEAKERMODE@@PAIPAHPAW44@@Z
?getOutputHandle@System@FMOD@@QAG?AW4FMOD_RESULT@@PAPAX@Z
?getParameterBool@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HPA_NPADH@Z
?getParameterByID@EventInstance@Studio@FMOD@@QBG?AW4FMOD_RESULT@@UFMOD_STUDIO_PARAMETER_ID@@PAM1@Z
?getParameterByID@System@Studio@FMOD@@QBG?AW4FMOD_RESULT@@UFMOD_STUDIO_PARAMETER_ID@@PAM1@Z
?getParameterByName@EventInstance@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PBDPAM1@Z
?getParameterByName@System@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PBDPAM1@Z
?getParameterData@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAXPAIPADH@Z
?getParameterDescriptionByID@EventDescription@Studio@FMOD@@QBG?AW4FMOD_RESULT@@UFMOD_STUDIO_PARAMETER_ID@@PAUFMOD_STUDIO_PARAMETER_DESCRIPTION@@@Z
?getParameterDescriptionByID@System@Studio@FMOD@@QBG?AW4FMOD_RESULT@@UFMOD_STUDIO_PARAMETER_ID@@PAUFMOD_STUDIO_PARAMETER_DESCRIPTION@@@Z
?getParameterDescriptionByIndex@EventDescription@Studio@FMOD@@QBG?AW4FMOD_RESULT@@HPAUFMOD_STUDIO_PARAMETER_DESCRIPTION@@@Z
?getParameterDescriptionByName@EventDescription@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PBDPAUFMOD_STUDIO_PARAMETER_DESCRIPTION@@@Z
?getParameterDescriptionByName@System@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PBDPAUFMOD_STUDIO_PARAMETER_DESCRIPTION@@@Z
?getParameterDescriptionCount@EventDescription@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAH@Z
?getParameterDescriptionCount@System@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAH@Z
?getParameterDescriptionList@System@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAUFMOD_STUDIO_PARAMETER_DESCRIPTION@@HPAH@Z
?getParameterFloat@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HPAMPADH@Z
?getParameterInfo@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAUFMOD_DSP_PARAMETER_DESC@@@Z
?getParameterInt@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HPAHPADH@Z
?getParameterLabelByID@EventDescription@Studio@FMOD@@QBG?AW4FMOD_RESULT@@UFMOD_STUDIO_PARAMETER_ID@@HPADHPAH@Z
?getParameterLabelByID@System@Studio@FMOD@@QBG?AW4FMOD_RESULT@@UFMOD_STUDIO_PARAMETER_ID@@HPADHPAH@Z
?getParameterLabelByIndex@EventDescription@Studio@FMOD@@QBG?AW4FMOD_RESULT@@HHPADHPAH@Z
?getParameterLabelByName@EventDescription@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PBDHPADHPAH@Z
?getParameterLabelByName@System@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PBDHPADHPAH@Z
?getParentGroup@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAPAV12@@Z
?getPath@Bank@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PADHPAH@Z
?getPath@Bus@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PADHPAH@Z
?getPath@EventDescription@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PADHPAH@Z
?getPath@VCA@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PADHPAH@Z
?getPaused@Bus@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PA_N@Z
?getPaused@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?getPaused@CommandReplay@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PA_N@Z
?getPaused@EventInstance@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PA_N@Z
?getPitch@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?getPitch@EventInstance@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAM0@Z
?getPlaybackState@CommandReplay@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAW4FMOD_STUDIO_PLAYBACK_STATE@@@Z
?getPlaybackState@EventInstance@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAW4FMOD_STUDIO_PLAYBACK_STATE@@@Z
?getPluginHandle@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_PLUGINTYPE@@HPAI@Z
?getPluginInfo@System@FMOD@@QAG?AW4FMOD_RESULT@@IPAW4FMOD_PLUGINTYPE@@PADHPAI@Z
?getPolygonAttributes@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@HPAM0PA_N@Z
?getPolygonNumVertices@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@HPAH@Z
?getPolygonVertex@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@HHPAUFMOD_VECTOR@@@Z
?getPortIndex@Bus@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PA_K@Z
?getPosition@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAII@Z
?getPosition@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_VECTOR@@@Z
?getPriority@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getProperties@Reverb3D@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_REVERB_PROPERTIES@@@Z
?getProperty@EventInstance@Studio@FMOD@@QBG?AW4FMOD_RESULT@@W4FMOD_STUDIO_EVENT_PROPERTY@@PAM@Z
?getRecordDriverInfo@System@FMOD@@QAG?AW4FMOD_RESULT@@HPADHPAUFMOD_GUID@@PAHPAW4FMOD_SPEAKERMODE@@2PAI@Z
?getRecordNumDrivers@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH0@Z
?getRecordPosition@System@FMOD@@QAG?AW4FMOD_RESULT@@HPAI@Z
?getReverbLevel@EventInstance@Studio@FMOD@@QBG?AW4FMOD_RESULT@@HPAM@Z
?getReverbProperties@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@HPAM@Z
?getReverbProperties@System@FMOD@@QAG?AW4FMOD_RESULT@@HPAUFMOD_REVERB_PROPERTIES@@@Z
?getRotation@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_VECTOR@@0@Z
?getSampleLoadingState@Bank@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAW4FMOD_STUDIO_LOADING_STATE@@@Z
?getSampleLoadingState@EventDescription@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAW4FMOD_STUDIO_LOADING_STATE@@@Z
?getScale@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_VECTOR@@@Z
?getSoftwareChannels@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getSoftwareFormat@System@FMOD@@QAG?AW4FMOD_RESULT@@PAHPAW4FMOD_SPEAKERMODE@@0@Z
?getSound@SoundGroup@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAVSound@2@@Z
?getSoundGroup@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVSoundGroup@2@@Z
?getSoundInfo@System@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PBDPAUFMOD_STUDIO_SOUND_INFO@@@Z
?getSoundSize@EventDescription@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAM@Z
?getSpeakerModeChannels@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_SPEAKERMODE@@PAH@Z
?getSpeakerPosition@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_SPEAKER@@PAM1PA_N@Z
?getStreamBufferSize@System@FMOD@@QAG?AW4FMOD_RESULT@@PAI0@Z
?getStringCount@Bank@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAH@Z
?getStringInfo@Bank@Studio@FMOD@@QBG?AW4FMOD_RESULT@@HPAUFMOD_GUID@@PADHPAH@Z
?getSubSound@Sound@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAV12@@Z
?getSubSoundParent@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAPAV12@@Z
?getSyncPoint@Sound@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAUFMOD_SYNCPOINT@@@Z
?getSyncPointInfo@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_SYNCPOINT@@PADHPAII@Z
?getSystem@CommandReplay@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAPAVSystem@23@@Z
?getSystemObject@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVSystem@2@@Z
?getSystemObject@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVSystem@2@@Z
?getSystemObject@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVSystem@2@@Z
?getSystemObject@SoundGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVSystem@2@@Z
?getTag@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PBDHPAUFMOD_TAG@@@Z
?getTimelinePosition@EventInstance@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAH@Z
?getType@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAW4FMOD_DSP_TYPE@@@Z
?getType@DSPConnection@FMOD@@QAG?AW4FMOD_RESULT@@PAW4FMOD_DSPCONNECTION_TYPE@@@Z
?getUserData@Bank@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAPAX@Z
?getUserData@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAPAX@Z
?getUserData@CommandReplay@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAPAX@Z
?getUserData@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAPAX@Z
?getUserData@DSPConnection@FMOD@@QAG?AW4FMOD_RESULT@@PAPAX@Z
?getUserData@EventDescription@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAPAX@Z
?getUserData@EventInstance@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAPAX@Z
?getUserData@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PAPAX@Z
?getUserData@GeometryI@FMOD@@QAG?AW4FMOD_RESULT@@PAPAX@Z
?getUserData@Reverb3D@FMOD@@QAG?AW4FMOD_RESULT@@PAPAX@Z
?getUserData@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAPAX@Z
?getUserData@SoundGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAPAX@Z
?getUserData@System@FMOD@@QAG?AW4FMOD_RESULT@@PAPAX@Z
?getUserData@System@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAPAX@Z
?getUserDataInternal@SoundI@FMOD@@QAG?AW4FMOD_RESULT@@PAPAX@Z
?getUserProperty@EventDescription@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PBDPAUFMOD_STUDIO_USER_PROPERTY@@@Z
?getUserPropertyByIndex@EventDescription@Studio@FMOD@@QBG?AW4FMOD_RESULT@@HPAUFMOD_STUDIO_USER_PROPERTY@@@Z
?getUserPropertyCount@EventDescription@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAH@Z
?getVCA@System@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PBDPAPAVVCA@23@@Z
?getVCAByID@System@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PBUFMOD_GUID@@PAPAVVCA@23@@Z
?getVCACount@Bank@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAH@Z
?getVCAList@Bank@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAPAVVCA@23@HPAH@Z
?getVersion@System@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z
?getVolume@Bus@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAM0@Z
?getVolume@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?getVolume@EventInstance@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAM0@Z
?getVolume@SoundGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?getVolume@VCA@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PAM0@Z
?getVolumeRamp@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?getWetDryMix@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAM00@Z
?hasSustainPoint@EventDescription@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PA_N@Z
?init@System@FMOD@@QAG?AW4FMOD_RESULT@@HIPAX@Z
?initialize@System@Studio@FMOD@@QAG?AW4FMOD_RESULT@@HIIPAX@Z
?is3D@EventDescription@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PA_N@Z
?isDopplerEnabled@EventDescription@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PA_N@Z
?isOneshot@EventDescription@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PA_N@Z
?isPlaying@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?isRecording@System@FMOD@@QAG?AW4FMOD_RESULT@@HPA_N@Z
?isSnapshot@EventDescription@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PA_N@Z
?isStream@EventDescription@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PA_N@Z
?isValid@Bank@Studio@FMOD@@QBG_NXZ
?isValid@Bus@Studio@FMOD@@QBG_NXZ
?isValid@CommandReplay@Studio@FMOD@@QBG_NXZ
?isValid@EventDescription@Studio@FMOD@@QBG_NXZ
?isValid@EventInstance@Studio@FMOD@@QBG_NXZ
?isValid@System@Studio@FMOD@@QBG_NXZ
?isValid@VCA@Studio@FMOD@@QBG_NXZ
?isVirtual@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?isVirtual@EventInstance@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PA_N@Z
?keyOff@EventInstance@Studio@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?loadBankCustom@System@Studio@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_STUDIO_BANK_INFO@@IPAPAVBank@23@@Z
?loadBankFile@System@Studio@FMOD@@QAG?AW4FMOD_RESULT@@PBDIPAPAVBank@23@@Z
?loadBankMemory@System@Studio@FMOD@@QAG?AW4FMOD_RESULT@@PBDHW4FMOD_STUDIO_LOAD_MEMORY_MODE@@IPAPAVBank@23@@Z
?loadCommandReplay@System@Studio@FMOD@@QAG?AW4FMOD_RESULT@@PBDIPAPAVCommandReplay@23@@Z
?loadGeometry@System@FMOD@@QAG?AW4FMOD_RESULT@@PBXHPAPAVGeometry@2@@Z
?loadPlugin@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAII@Z
?loadSampleData@Bank@Studio@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?loadSampleData@EventDescription@Studio@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?lock@Sound@FMOD@@QAG?AW4FMOD_RESULT@@IIPAPAX0PAI1@Z
?lockChannelGroup@Bus@Studio@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?lockDSP@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?lookupID@System@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PBDPAUFMOD_GUID@@@Z
?lookupPath@System@Studio@FMOD@@QBG?AW4FMOD_RESULT@@PBUFMOD_GUID@@PADHPAH@Z
?mixerResume@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?mixerSuspend@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?playDSP@System@FMOD@@QAG?AW4FMOD_RESULT@@PAVDSP@2@PAVChannelGroup@2@_NPAPAVChannel@2@@Z
?playSound@System@FMOD@@QAG?AW4FMOD_RESULT@@PAVSound@2@PAVChannelGroup@2@_NPAPAVChannel@2@@Z
?readData@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAXIPAI@Z
?recordStart@System@FMOD@@QAG?AW4FMOD_RESULT@@HPAVSound@2@_N@Z
?recordStop@System@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?registerCodec@System@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_CODEC_DESCRIPTION@@PAII@Z
?registerDSP@System@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_DSP_DESCRIPTION@@PAI@Z
?registerOutput@System@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_OUTPUT_DESCRIPTION@@PAI@Z
?registerPlugin@System@Studio@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_DSP_DESCRIPTION@@@Z
?release@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?release@CommandReplay@Studio@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?release@DSP@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?release@EventInstance@Studio@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?release@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?release@Reverb3D@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?release@Sound@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?release@SoundGroup@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?release@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?release@System@Studio@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?releaseAllInstances@EventDescription@Studio@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?removeDSP@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAVDSP@2@@Z
?removeFadePoints@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@_K0@Z
?reset@DSP@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?resetBufferUsage@System@Studio@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?save@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PAXPAH@Z
?seekData@Sound@FMOD@@QAG?AW4FMOD_RESULT@@I@Z
?seekToCommand@CommandReplay@Studio@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?seekToTime@CommandReplay@Studio@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?set3DAttributes@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_VECTOR@@0@Z
?set3DAttributes@EventInstance@Studio@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_3D_ATTRIBUTES@@@Z
?set3DAttributes@Reverb3D@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_VECTOR@@MM@Z
?set3DConeOrientation@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_VECTOR@@@Z
?set3DConeSettings@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@MMM@Z
?set3DConeSettings@Sound@FMOD@@QAG?AW4FMOD_RESULT@@MMM@Z
?set3DCustomRolloff@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_VECTOR@@H@Z
?set3DCustomRolloff@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_VECTOR@@H@Z
?set3DDistanceFilter@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@_NMM@Z
?set3DDopplerLevel@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?set3DLevel@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?set3DListenerAttributes@System@FMOD@@QAG?AW4FMOD_RESULT@@HPBUFMOD_VECTOR@@000@Z
?set3DMinMaxDistance@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@MM@Z
?set3DMinMaxDistance@Sound@FMOD@@QAG?AW4FMOD_RESULT@@MM@Z
?set3DNumListeners@System@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?set3DOcclusion@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@MM@Z
?set3DRolloffCallback@System@FMOD@@QAG?AW4FMOD_RESULT@@P6GMPAUFMOD_CHANNELCONTROL@@M@Z@Z
?set3DSettings@System@FMOD@@QAG?AW4FMOD_RESULT@@MMM@Z
?set3DSpread@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setActive@DSP@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?setActive@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?setActive@Reverb3D@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?setAdvancedSettings@System@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_ADVANCEDSETTINGS@@@Z
?setAdvancedSettings@System@Studio@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_STUDIO_ADVANCEDSETTINGS@@@Z
?setBankPath@CommandReplay@Studio@FMOD@@QAG?AW4FMOD_RESULT@@PBD@Z
?setBypass@DSP@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?setCallback@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@P6G?AW43@PAUFMOD_CHANNELCONTROL@@W4FMOD_CHANNELCONTROL_TYPE@@W4FMOD_CHANNELCONTROL_CALLBACK_TYPE@@PAX3@Z@Z
?setCallback@EventDescription@Studio@FMOD@@QAG?AW4FMOD_RESULT@@P6G?AW44@IPAUFMOD_STUDIO_EVENTINSTANCE@@PAX@ZI@Z
?setCallback@EventInstance@Studio@FMOD@@QAG?AW4FMOD_RESULT@@P6G?AW44@IPAUFMOD_STUDIO_EVENTINSTANCE@@PAX@ZI@Z
?setCallback@System@FMOD@@QAG?AW4FMOD_RESULT@@P6G?AW43@PAUFMOD_SYSTEM@@IPAX11@ZI@Z
?setCallback@System@Studio@FMOD@@QAG?AW4FMOD_RESULT@@P6G?AW44@PAUFMOD_STUDIO_SYSTEM@@IPAX1@ZI@Z
?setChannelFormat@DSP@FMOD@@QAG?AW4FMOD_RESULT@@IHW4FMOD_SPEAKERMODE@@@Z
?setChannelGroup@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAVChannelGroup@2@@Z
?setCreateInstanceCallback@CommandReplay@Studio@FMOD@@QAG?AW4FMOD_RESULT@@P6G?AW44@PAUFMOD_STUDIO_COMMANDREPLAY@@HPAUFMOD_STUDIO_EVENTDESCRIPTION@@PAPAUFMOD_STUDIO_EVENTINSTANCE@@PAX@Z@Z
?setDSPBufferSize@System@FMOD@@QAG?AW4FMOD_RESULT@@IH@Z
?setDSPIndex@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAVDSP@2@H@Z
?setDefaults@Sound@FMOD@@QAG?AW4FMOD_RESULT@@MH@Z
?setDelay@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@_K0_N@Z
?setDriver@System@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?setFadePointRamp@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@_KM@Z
?setFileSystem@System@FMOD@@QAG?AW4FMOD_RESULT@@P6G?AW43@PBDPAIPAPAXPAX@ZP6G?AW43@33@ZP6G?AW43@33I13@ZP6G?AW43@3I3@ZP6G?AW43@PAUFMOD_ASYNCREADINFO@@3@Z9H@Z
?setFrameCallback@CommandReplay@Studio@FMOD@@QAG?AW4FMOD_RESULT@@P6G?AW44@PAUFMOD_STUDIO_COMMANDREPLAY@@HMPAX@Z@Z
?setFrequency@Channel@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setGeometrySettings@System@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setInternalCallback@SystemI@FMOD@@QAG?AW4FMOD_RESULT@@HP6G?AW43@PAUFMOD_SYSTEM@@IPAX11@Z1@Z
?setListenerAttributes@System@Studio@FMOD@@QAG?AW4FMOD_RESULT@@HPBUFMOD_3D_ATTRIBUTES@@PBUFMOD_VECTOR@@@Z
?setListenerMask@EventInstance@Studio@FMOD@@QAG?AW4FMOD_RESULT@@I@Z
?setListenerWeight@System@Studio@FMOD@@QAG?AW4FMOD_RESULT@@HM@Z
?setLoadBankCallback@CommandReplay@Studio@FMOD@@QAG?AW4FMOD_RESULT@@P6G?AW44@PAUFMOD_STUDIO_COMMANDREPLAY@@HPBUFMOD_GUID@@PBDIPAPAUFMOD_STUDIO_BANK@@PAX@Z@Z
?setLoopCount@Channel@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?setLoopCount@Sound@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?setLoopPoints@Channel@FMOD@@QAG?AW4FMOD_RESULT@@IIII@Z
?setLoopPoints@Sound@FMOD@@QAG?AW4FMOD_RESULT@@IIII@Z
?setLowPassGain@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setMaxAudible@SoundGroup@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?setMaxAudibleBehavior@SoundGroup@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_SOUNDGROUP_BEHAVIOR@@@Z
?setMeteringEnabled@DSP@FMOD@@QAG?AW4FMOD_RESULT@@_N0@Z
?setMix@DSPConnection@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setMixLevelsInput@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAMH@Z
?setMixLevelsOutput@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@MMMMMMMM@Z
?setMixMatrix@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAMHHH@Z
?setMixMatrix@DSPConnection@FMOD@@QAG?AW4FMOD_RESULT@@PAMHHH@Z
?setMode@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@I@Z
?setMode@Sound@FMOD@@QAG?AW4FMOD_RESULT@@I@Z
?setMusicChannelVolume@Sound@FMOD@@QAG?AW4FMOD_RESULT@@HM@Z
?setMusicSpeed@Sound@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setMute@Bus@Studio@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?setMute@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?setMuteFadeSpeed@SoundGroup@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setNetworkProxy@System@FMOD@@QAG?AW4FMOD_RESULT@@PBD@Z
?setNetworkTimeout@System@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?setNumListeners@System@Studio@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?setOutput@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_OUTPUTTYPE@@@Z
?setOutputByPlugin@System@FMOD@@QAG?AW4FMOD_RESULT@@I@Z
?setPan@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setParameterBool@DSP@FMOD@@QAG?AW4FMOD_RESULT@@H_N@Z
?setParameterByID@EventInstance@Studio@FMOD@@QAG?AW4FMOD_RESULT@@UFMOD_STUDIO_PARAMETER_ID@@M_N@Z
?setParameterByID@System@Studio@FMOD@@QAG?AW4FMOD_RESULT@@UFMOD_STUDIO_PARAMETER_ID@@M_N@Z
?setParameterByIDWithLabel@EventInstance@Studio@FMOD@@QAG?AW4FMOD_RESULT@@UFMOD_STUDIO_PARAMETER_ID@@PBD_N@Z
?setParameterByIDWithLabel@System@Studio@FMOD@@QAG?AW4FMOD_RESULT@@UFMOD_STUDIO_PARAMETER_ID@@PBD_N@Z
?setParameterByName@EventInstance@Studio@FMOD@@QAG?AW4FMOD_RESULT@@PBDM_N@Z
?setParameterByName@System@Studio@FMOD@@QAG?AW4FMOD_RESULT@@PBDM_N@Z
?setParameterByNameWithLabel@EventInstance@Studio@FMOD@@QAG?AW4FMOD_RESULT@@PBD0_N@Z
?setParameterByNameWithLabel@System@Studio@FMOD@@QAG?AW4FMOD_RESULT@@PBD0_N@Z
?setParameterData@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HPAXI@Z
?setParameterFloat@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HM@Z
?setParameterInt@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HH@Z
?setParametersByIDs@EventInstance@Studio@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_STUDIO_PARAMETER_ID@@PAMH_N@Z
?setParametersByIDs@System@Studio@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_STUDIO_PARAMETER_ID@@PAMH_N@Z
?setPaused@Bus@Studio@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?setPaused@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?setPaused@CommandReplay@Studio@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?setPaused@EventInstance@Studio@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?setPitch@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setPitch@EventInstance@Studio@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setPluginPath@System@FMOD@@QAG?AW4FMOD_RESULT@@PBD@Z
?setPolygonAttributes@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@HMM_N@Z
?setPolygonVertex@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@HHPBUFMOD_VECTOR@@@Z
?setPortIndex@Bus@Studio@FMOD@@QAG?AW4FMOD_RESULT@@_K@Z
?setPosition@Channel@FMOD@@QAG?AW4FMOD_RESULT@@II@Z
?setPosition@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_VECTOR@@@Z
?setPriority@Channel@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?setProperties@Reverb3D@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_REVERB_PROPERTIES@@@Z
?setProperty@EventInstance@Studio@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_STUDIO_EVENT_PROPERTY@@M@Z
?setReverbLevel@EventInstance@Studio@FMOD@@QAG?AW4FMOD_RESULT@@HM@Z
?setReverbProperties@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@HM@Z
?setReverbProperties@System@FMOD@@QAG?AW4FMOD_RESULT@@HPBUFMOD_REVERB_PROPERTIES@@@Z
?setRotation@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_VECTOR@@0@Z
?setScale@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_VECTOR@@@Z
?setSoftwareChannels@System@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?setSoftwareFormat@System@FMOD@@QAG?AW4FMOD_RESULT@@HW4FMOD_SPEAKERMODE@@H@Z
?setSoundGroup@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAVSoundGroup@2@@Z
?setSpeakerPosition@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_SPEAKER@@MM_N@Z
?setStreamBufferSize@System@FMOD@@QAG?AW4FMOD_RESULT@@II@Z
?setTimelinePosition@EventInstance@Studio@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?setUserData@Bank@Studio@FMOD@@QAG?AW4FMOD_RESULT@@PAX@Z
?setUserData@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAX@Z
?setUserData@CommandReplay@Studio@FMOD@@QAG?AW4FMOD_RESULT@@PAX@Z
?setUserData@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAX@Z
?setUserData@DSPConnection@FMOD@@QAG?AW4FMOD_RESULT@@PAX@Z
?setUserData@EventDescription@Studio@FMOD@@QAG?AW4FMOD_RESULT@@PAX@Z
?setUserData@EventInstance@Studio@FMOD@@QAG?AW4FMOD_RESULT@@PAX@Z
?setUserData@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PAX@Z
?setUserData@GeometryI@FMOD@@QAG?AW4FMOD_RESULT@@PAX@Z
?setUserData@Reverb3D@FMOD@@QAG?AW4FMOD_RESULT@@PAX@Z
?setUserData@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAX@Z
?setUserData@SoundGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAX@Z
?setUserData@System@FMOD@@QAG?AW4FMOD_RESULT@@PAX@Z
?setUserData@System@Studio@FMOD@@QAG?AW4FMOD_RESULT@@PAX@Z
?setUserDataInternal@SoundI@FMOD@@QAG?AW4FMOD_RESULT@@PAX@Z
?setVolume@Bus@Studio@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setVolume@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setVolume@EventInstance@Studio@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setVolume@SoundGroup@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setVolume@VCA@Studio@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setVolumeRamp@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?setWetDryMix@DSP@FMOD@@QAG?AW4FMOD_RESULT@@MMM@Z
?showConfigDialog@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAX_N@Z
?start@CommandReplay@Studio@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?start@EventInstance@Studio@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?startCommandCapture@System@Studio@FMOD@@QAG?AW4FMOD_RESULT@@PBDI@Z
?stop@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?stop@CommandReplay@Studio@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?stop@EventInstance@Studio@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_STUDIO_STOP_MODE@@@Z
?stop@SoundGroup@FMOD@@QAG?AW4FMOD_RESULT@@XZ
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane_Data/Plugins/x86/lib_burst_generated.dll.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
1998da082e6413092f0e7bcd5a0e9331
26c6d10914da2fc98755b3533c59141e
34e8fec66b799db60cf2f2f751c3bdd9
670478f3fb3f285eeace534fbe61a03e
77fc393cb521ac129b1392d4eb94d29a
89425a97f3f500fa810ad03f0c382542
8c2be93e18276203cbd918daa2748a10
a185c62eba2497c95197140e5282b27a
aa309157da5950aa53ed6075709e6e40
b04c75a68edf1d166f6547f2ea0e8928
burst.initialize
d23a07cb3c3f217121d5bf94e76674f0
da352d92cabf024fc9986011d52a4537
e046a1595d0148509657ed4dbcb52a86
e943843acfb78f5f2f3716a6553740d9
Sections
.text Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane_Data/Plugins/x86/resonanceaudio.dll.dll windows:6 windows x86 arch:x86
76ab7e5bd06fcc7c648d744cbac704f0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
D:\Source\Depots\thirdparty\resonanceaudio\build\platforms\fmod\Release\resonanceaudio.pdb
Imports
kernel32
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetCurrentThreadId
EncodePointer
DecodePointer
MultiByteToWideChar
QueryPerformanceCounter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
CloseHandle
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
GetLastError
GetCurrentThread
GetThreadTimes
FreeLibrary
LoadLibraryExW
InterlockedFlushSList
RtlUnwind
RaiseException
HeapAlloc
HeapFree
HeapReAlloc
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetACP
GetStdHandle
GetFileType
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointerEx
GetProcessHeap
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
WriteConsoleW
ReadConsoleW
HeapSize
CreateFileW
Exports
Exports
_FMODGetPluginDescriptionList@0
_FMOD_ResonanceAudioListener_GetDSPDescription@0
_FMOD_ResonanceAudioSoundfield_GetDSPDescription@0
_FMOD_ResonanceAudioSource_GetDSPDescription@0
Sections
.text Size: 439KB - Virtual size: 439KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane_Data/Resources/unity default resources
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane_Data/RuntimeInitializeOnLoads.json
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane_Data/ScriptingAssemblies.json
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane_Data/StreamingAssets/Master.bank
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane_Data/StreamingAssets/Master.strings.bank
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane_Data/app.info
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane_Data/boot.config
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane_Data/data.unity3d
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane_Data/il2cpp_data/Metadata/global-metadata.dat
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane_Data/il2cpp_data/Resources/System.Data.dll-resources.dat
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane_Data/il2cpp_data/Resources/mscorlib.dll-resources.dat
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/Attorney of the Arcane_Data/resources.resource
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/GameAssembly.dll.dll windows:6 windows x86 arch:x86
43570f402aef5c26dac4b03ea85df9ae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
C:\Users\Stephen Taylor\Documents\DHS Productions\Games\Unity\Attorney of the Arcane\Attorney of the Arcane\Library\Bee\artifacts\WinPlayerBuildProgram\dni3n\GameAssembly.pdb
Imports
kernel32
Sleep
GetCurrentProcess
CreateThread
GetCurrentThread
GetCurrentThreadId
GetExitCodeThread
SuspendThread
ResumeThread
GetThreadContext
GetSystemInfo
VirtualAlloc
VirtualFree
VirtualQuery
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GlobalAlloc
GlobalFree
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
RtlCaptureStackBackTrace
RaiseException
ReleaseSemaphore
ReleaseMutex
SleepEx
CreateMutexW
CreateSemaphoreW
QueueUserAPC
SwitchToThread
SetThreadPriority
GetThreadPriority
FreeLibrary
LoadLibraryW
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
InitializeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
GetSystemTimes
GetSystemTimeAsFileTime
GetVersionExW
GetComputerNameW
GetStdHandle
CreateDirectoryW
DeleteFileW
DeleteVolumeMountPointW
FindFirstFileExW
FindNextFileW
FlushFileBuffers
GetFileAttributesExW
GetFileSizeEx
GetFileType
GetFullPathNameW
GetLogicalDrives
ReadFile
RemoveDirectoryW
SetEndOfFile
SetFileAttributesW
SetFileInformationByHandle
SetFilePointerEx
SetThreadErrorMode
GetOverlappedResult
SetEvent
ResetEvent
CreateEventW
LeaveCriticalSection
GetNativeSystemInfo
FormatMessageW
CopyFileExW
MoveFileExW
ReplaceFileW
GetTimeZoneInformation
GetDynamicTimeZoneInformation
GetFileInformationByHandleEx
GetConsoleMode
GetLongPathNameW
GetTempPathW
GetModuleFileNameA
WideCharToMultiByte
GetACP
GetLocaleInfoW
GetThreadLocale
GetCurrentDirectoryW
FindClose
IsDebuggerPresent
WaitForSingleObjectEx
WaitForMultipleObjectsEx
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
GetProcessHeap
SetEnvironmentVariableA
GetCommandLineW
GetCommandLineA
FindNextFileA
FindFirstFileExA
GetOEMCP
EnterCriticalSection
InitializeCriticalSection
QueryPerformanceFrequency
GetEnvironmentVariableW
QueryPerformanceCounter
IsValidCodePage
HeapQueryInformation
HeapSize
HeapReAlloc
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
HeapFree
HeapAlloc
GetConsoleCP
ReadConsoleW
GetModuleHandleExW
ExitProcess
LoadLibraryExW
InterlockedFlushSList
RtlUnwind
TerminateProcess
InitializeSListHead
GetStartupInfoW
SetLastError
GetLastError
DuplicateHandle
CloseHandle
WriteFile
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetCPInfo
GetStringTypeW
LCMapStringW
CompareStringW
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
DecodePointer
EncodePointer
DeleteCriticalSection
SetFilePointer
CreateFileW
GetCurrentProcessId
WriteConsoleW
user32
MessageBoxA
advapi32
CryptGenRandom
CryptAcquireContextW
CryptReleaseContext
GetUserNameW
ole32
CoGetContextToken
CoCreateFreeThreadedMarshaler
CoUninitialize
CoInitializeEx
CoTaskMemAlloc
CoTaskMemFree
oleaut32
SafeArrayGetVartype
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayDestroy
SafeArrayCreate
SysStringLen
SysFreeString
SafeArrayGetDim
shell32
SHGetFolderPathW
SHGetKnownFolderPath
ws2_32
recvfrom
select
WSAPoll
ntohs
ntohl
WSASend
WSARecv
WSAIoctl
WSAGetLastError
WSACleanup
WSAStartup
inet_pton
gethostbyaddr
socket
shutdown
setsockopt
listen
inet_ntoa
inet_addr
htons
htonl
getsockopt
getsockname
getpeername
ioctlsocket
connect
closesocket
bind
accept
__WSAFDIsSet
inet_ntop
freeaddrinfo
getnameinfo
gethostname
getaddrinfo
send
iphlpapi
GetNetworkParams
GetAdaptersAddresses
GetIfEntry
dbghelp
SymInitialize
SymFromAddr
baselib
?Baselib_Thread_YieldExecution@il2cpp_baselib@@YAXXZ
?Baselib_SystemSemaphore_TryTimedAcquire@il2cpp_baselib@@YA_NUBaselib_SystemSemaphore_Handle@1@I@Z
?Baselib_SystemSemaphore_TryAcquire@il2cpp_baselib@@YA_NUBaselib_SystemSemaphore_Handle@1@@Z
?Baselib_ErrorState_Explain@il2cpp_baselib@@YAIPBUBaselib_ErrorState@1@QADIW4Baselib_ErrorState_ExplainVerbosity@1@@Z
?Baselib_DynamicLibrary_FromNativeHandle@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@_KIPAUBaselib_ErrorState@1@@Z
?Baselib_SystemSemaphore_FreeInplace@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z
?Baselib_SystemSemaphore_Release@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@I@Z
?Baselib_SystemSemaphore_Acquire@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z
?Baselib_SystemSemaphore_CreateInplace@il2cpp_baselib@@YA?AUBaselib_SystemSemaphore_Handle@1@PAX@Z
?Baselib_Thread_GetCurrentThreadId@il2cpp_baselib@@YAHXZ
?Baselib_DynamicLibrary_OpenUtf16@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@PBGPAUBaselib_ErrorState@1@@Z
?Baselib_DynamicLibrary_GetFunction@il2cpp_baselib@@YAPAXUBaselib_DynamicLibrary_Handle@1@PBDPAUBaselib_ErrorState@1@@Z
?Baselib_DynamicLibrary_Close@il2cpp_baselib@@YAXUBaselib_DynamicLibrary_Handle@1@@Z
Exports
Exports
BrotliDecoderErrorString
CloseZStream
CreateZStream
DllCanUnloadNow
DllGetActivationFactory
Flush
ReadZStream
WriteZStream
_BrotliDecoderCreateInstance@12
_BrotliDecoderDecompress@16
_BrotliDecoderDecompressStream@24
_BrotliDecoderDestroyInstance@4
_BrotliDecoderGetErrorCode@4
_BrotliDecoderHasMoreOutput@4
_BrotliDecoderIsFinished@4
_BrotliDecoderIsUsed@4
_BrotliDecoderSetParameter@12
_BrotliDecoderTakeOutput@8
_BrotliDecoderVersion@0
_BrotliEncoderCompress@28
_BrotliEncoderCompressStream@28
_BrotliEncoderCreateInstance@12
_BrotliEncoderDestroyInstance@4
_BrotliEncoderHasMoreOutput@4
_BrotliEncoderIsFinished@4
_BrotliEncoderMaxCompressedSize@4
_BrotliEncoderSetParameter@12
_BrotliEncoderTakeOutput@8
_BrotliEncoderVersion@0
_DllCanUnloadNow@0
_DllGetActivationFactory@8
il2cpp_add_internal_call
il2cpp_alloc
il2cpp_allocation_granularity
il2cpp_array_class_get
il2cpp_array_element_size
il2cpp_array_get_byte_length
il2cpp_array_length
il2cpp_array_new
il2cpp_array_new_full
il2cpp_array_new_specific
il2cpp_array_object_header_size
il2cpp_assembly_get_image
il2cpp_bounded_array_class_get
il2cpp_capture_memory_snapshot
il2cpp_class_array_element_size
il2cpp_class_enum_basetype
il2cpp_class_for_each
il2cpp_class_from_il2cpp_type
il2cpp_class_from_name
il2cpp_class_from_system_type
il2cpp_class_from_type
il2cpp_class_get_assemblyname
il2cpp_class_get_bitmap
il2cpp_class_get_bitmap_size
il2cpp_class_get_data_size
il2cpp_class_get_declaring_type
il2cpp_class_get_element_class
il2cpp_class_get_events
il2cpp_class_get_field_from_name
il2cpp_class_get_fields
il2cpp_class_get_flags
il2cpp_class_get_image
il2cpp_class_get_interfaces
il2cpp_class_get_method_from_name
il2cpp_class_get_methods
il2cpp_class_get_name
il2cpp_class_get_namespace
il2cpp_class_get_nested_types
il2cpp_class_get_parent
il2cpp_class_get_properties
il2cpp_class_get_property_from_name
il2cpp_class_get_rank
il2cpp_class_get_static_field_data
il2cpp_class_get_type
il2cpp_class_get_type_token
il2cpp_class_get_userdata_offset
il2cpp_class_has_attribute
il2cpp_class_has_parent
il2cpp_class_has_references
il2cpp_class_instance_size
il2cpp_class_is_abstract
il2cpp_class_is_assignable_from
il2cpp_class_is_blittable
il2cpp_class_is_enum
il2cpp_class_is_generic
il2cpp_class_is_inflated
il2cpp_class_is_interface
il2cpp_class_is_subclass_of
il2cpp_class_is_valuetype
il2cpp_class_num_fields
il2cpp_class_set_userdata
il2cpp_class_value_size
il2cpp_current_thread_get_frame_at
il2cpp_current_thread_get_stack_depth
il2cpp_current_thread_get_top_frame
il2cpp_current_thread_walk_frame_stack
il2cpp_custom_attrs_construct
il2cpp_custom_attrs_free
il2cpp_custom_attrs_from_class
il2cpp_custom_attrs_from_method
il2cpp_custom_attrs_get_attr
il2cpp_custom_attrs_has_attr
il2cpp_debug_get_method_info
il2cpp_debugger_set_agent_options
il2cpp_domain_assembly_open
il2cpp_domain_get
il2cpp_domain_get_assemblies
il2cpp_exception_from_name_msg
il2cpp_field_get_flags
il2cpp_field_get_name
il2cpp_field_get_offset
il2cpp_field_get_parent
il2cpp_field_get_type
il2cpp_field_get_value
il2cpp_field_get_value_object
il2cpp_field_has_attribute
il2cpp_field_is_literal
il2cpp_field_set_value
il2cpp_field_set_value_object
il2cpp_field_static_get_value
il2cpp_field_static_set_value
il2cpp_format_exception
il2cpp_format_stack_trace
il2cpp_free
il2cpp_free_captured_memory_snapshot
il2cpp_gc_alloc_fixed
il2cpp_gc_collect
il2cpp_gc_collect_a_little
il2cpp_gc_disable
il2cpp_gc_enable
il2cpp_gc_foreach_heap
il2cpp_gc_free_fixed
il2cpp_gc_get_heap_size
il2cpp_gc_get_max_time_slice_ns
il2cpp_gc_get_used_size
il2cpp_gc_has_strict_wbarriers
il2cpp_gc_is_disabled
il2cpp_gc_is_incremental
il2cpp_gc_set_external_allocation_tracker
il2cpp_gc_set_external_wbarrier_tracker
il2cpp_gc_set_max_time_slice_ns
il2cpp_gc_set_mode
il2cpp_gc_start_incremental_collection
il2cpp_gc_wbarrier_set_field
il2cpp_gchandle_foreach_get_target
il2cpp_gchandle_free
il2cpp_gchandle_get_target
il2cpp_gchandle_new
il2cpp_gchandle_new_weakref
il2cpp_get_corlib
il2cpp_get_exception_argument_null
il2cpp_image_get_assembly
il2cpp_image_get_class
il2cpp_image_get_class_count
il2cpp_image_get_entry_point
il2cpp_image_get_filename
il2cpp_image_get_name
il2cpp_init
il2cpp_init_utf16
il2cpp_is_debugger_attached
il2cpp_is_vm_thread
il2cpp_method_get_class
il2cpp_method_get_declaring_type
il2cpp_method_get_flags
il2cpp_method_get_from_reflection
il2cpp_method_get_name
il2cpp_method_get_object
il2cpp_method_get_param
il2cpp_method_get_param_count
il2cpp_method_get_param_name
il2cpp_method_get_return_type
il2cpp_method_get_token
il2cpp_method_has_attribute
il2cpp_method_is_generic
il2cpp_method_is_inflated
il2cpp_method_is_instance
il2cpp_monitor_enter
il2cpp_monitor_exit
il2cpp_monitor_pulse
il2cpp_monitor_pulse_all
il2cpp_monitor_try_enter
il2cpp_monitor_try_wait
il2cpp_monitor_wait
il2cpp_native_stack_trace
il2cpp_object_get_class
il2cpp_object_get_size
il2cpp_object_get_virtual_method
il2cpp_object_header_size
il2cpp_object_new
il2cpp_object_unbox
il2cpp_offset_of_array_bounds_in_array_object_header
il2cpp_offset_of_array_length_in_array_object_header
il2cpp_override_stack_backtrace
il2cpp_profiler_install
il2cpp_profiler_install_allocation
il2cpp_profiler_install_enter_leave
il2cpp_profiler_install_fileio
il2cpp_profiler_install_gc
il2cpp_profiler_install_thread
il2cpp_profiler_set_events
il2cpp_property_get_flags
il2cpp_property_get_get_method
il2cpp_property_get_name
il2cpp_property_get_parent
il2cpp_property_get_set_method
il2cpp_raise_exception
il2cpp_register_debugger_agent_transport
il2cpp_register_log_callback
il2cpp_resolve_icall
il2cpp_runtime_class_init
il2cpp_runtime_invoke
il2cpp_runtime_invoke_convert_args
il2cpp_runtime_object_init
il2cpp_runtime_object_init_exception
il2cpp_runtime_unhandled_exception_policy_set
il2cpp_set_commandline_arguments
il2cpp_set_commandline_arguments_utf16
il2cpp_set_config
il2cpp_set_config_dir
il2cpp_set_config_utf16
il2cpp_set_data_dir
il2cpp_set_default_thread_affinity
il2cpp_set_find_plugin_callback
il2cpp_set_memory_callbacks
il2cpp_set_temp_dir
il2cpp_shutdown
il2cpp_start_gc_world
il2cpp_stats_dump_to_file
il2cpp_stats_get_value
il2cpp_stop_gc_world
il2cpp_string_chars
il2cpp_string_intern
il2cpp_string_is_interned
il2cpp_string_length
il2cpp_string_new
il2cpp_string_new_len
il2cpp_string_new_utf16
il2cpp_string_new_wrapper
il2cpp_thread_attach
il2cpp_thread_current
il2cpp_thread_detach
il2cpp_thread_get_all_attached_threads
il2cpp_thread_get_frame_at
il2cpp_thread_get_stack_depth
il2cpp_thread_get_top_frame
il2cpp_thread_walk_frame_stack
il2cpp_type_equals
il2cpp_type_get_assembly_qualified_name
il2cpp_type_get_attrs
il2cpp_type_get_class_or_element_class
il2cpp_type_get_name
il2cpp_type_get_name_chunked
il2cpp_type_get_object
il2cpp_type_get_type
il2cpp_type_is_byref
il2cpp_type_is_pointer_type
il2cpp_type_is_static
il2cpp_unhandled_exception
il2cpp_unity_install_unitytls_interface
il2cpp_unity_liveness_allocate_struct
il2cpp_unity_liveness_calculation_from_root
il2cpp_unity_liveness_calculation_from_statics
il2cpp_unity_liveness_finalize
il2cpp_unity_liveness_free_struct
il2cpp_value_box
jinfo_get_method
mini_get_interp_callbacks
mini_jit_info_table_find
mono_arch_clear_breakpoint
mono_arch_context_get_int_reg
mono_arch_context_set_int_reg
mono_arch_set_breakpoint
mono_arch_setup_resume_sighandler_ctx
mono_arch_skip_breakpoint
mono_arch_skip_single_step
mono_arch_start_single_stepping
mono_arch_stop_single_stepping
mono_array_element_size
mono_array_length
mono_assembly_get_image
mono_class_from_mono_type
mono_class_get_byref_type
mono_class_get_context
mono_class_get_element_class
mono_class_get_fields
mono_class_get_flags
mono_class_get_image
mono_class_get_interfaces
mono_class_get_method_from_name
mono_class_get_methods
mono_class_get_name
mono_class_get_namespace
mono_class_get_nested_types
mono_class_get_parent
mono_class_get_properties
mono_class_get_rank
mono_class_get_type
mono_class_get_type_token
mono_class_instance_size
mono_class_is_assignable_from
mono_class_is_enum
mono_class_is_valuetype
mono_class_num_fields
mono_class_num_methods
mono_class_num_properties
mono_class_value_size
mono_class_vtable
mono_debug_find_method
mono_debug_free_locals
mono_debug_il_offset_from_address
mono_debug_lookup_locals
mono_domain_foreach
mono_domain_get
mono_domain_get_assemblies_iter
mono_domain_get_corlib
mono_domain_set
mono_environment_exitcode_get
mono_environment_exitcode_set
mono_field_get_name
mono_field_get_offset
mono_field_get_parent
mono_field_get_type
mono_field_set_value
mono_field_static_set_value
mono_find_prev_seq_point_for_native_offset
mono_free_method_signatures
mono_gc_register_root
mono_gchandle_free
mono_gchandle_get_target
mono_gchandle_new_weakref
mono_get_lmf_addr
mono_get_root_domain
mono_get_runtime_build_info
mono_get_string_class
mono_image_get_assembly
mono_image_get_entry_point
mono_image_get_filename
mono_image_get_guid
mono_image_get_name
mono_image_is_dynamic
mono_jit_find_compiled_method_with_jit_info
mono_jit_info_get_method
mono_jit_info_table_find
mono_marshal_method_from_wrapper
mono_metadata_free_mh
mono_method_full_name
mono_method_get_class
mono_method_get_context
mono_method_get_declaring_generic_method
mono_method_get_flags
mono_method_get_generic_container
mono_method_get_header_checked
mono_method_get_name
mono_method_get_param_names
mono_method_get_token
mono_method_is_generic
mono_method_is_inflated
mono_method_signature
mono_object_get_class
mono_object_get_type
mono_object_get_virtual_method
mono_object_hash
mono_object_unbox
mono_property_get_get_method
mono_property_get_name
mono_property_get_parent
mono_property_get_set_method
mono_restore_context
mono_runtime_is_shutting_down
mono_runtime_quit
mono_set_is_debugger_attached
mono_set_lmf
mono_string_chars
mono_string_length
mono_string_new
mono_string_to_utf8_checked
mono_thread_attach
mono_thread_current
mono_thread_detach
mono_thread_get_main
mono_thread_state_init_from_current
mono_thread_state_init_from_monoctx
mono_thread_suspend_all_other_threads
mono_type_full_name
mono_type_generic_inst_is_valuetype
mono_type_get_attrs
mono_type_get_class
mono_type_get_name_full
mono_type_get_type
mono_type_is_byref
mono_type_is_reference
mono_type_is_struct
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
il2cpp Size: 14.8MB - Virtual size: 14.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 940KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/UnityCrashHandler32.exe.exe windows:6 windows x86 arch:x86
90f304823cd13bdbf521bc6ab26a8f40
Code Sign
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23/03/2022, 00:00Not After22/03/2037, 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29/04/2021, 00:00Not After28/04/2036, 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before29/03/2022, 00:00Not After14/03/2033, 23:59SubjectCN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
0f:7c:5a:5e:06:2a:bd:ba:fc:be:1e:c6:3d:4c:30:52Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before14/07/2021, 00:00Not After18/07/2024, 23:59SubjectCN=Unity Technologies ApS,OU=Developer Services,O=Unity Technologies ApS,L=København,C=DKExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
61:68:97:9e:1e:7d:4e:13:32:de:3f:c9:c7:f6:9c:c9:6a:d8:11:08Signer
Actual PE Digest61:68:97:9e:1e:7d:4e:13:32:de:3f:c9:c7:f6:9c:c9:6a:d8:11:08Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\buildslave\unity\build\artifacts\UnityCrashHandler\Win32_VS2019_nondev_i_r\UnityCrashHandler32.pdb
Imports
user32
EndDialog
GetDlgItem
SendDlgItemMessageA
SetWindowTextW
AdjustWindowRect
DialogBoxParamA
SetWindowPos
SendMessageW
OffsetRect
UnionRect
SetForegroundWindow
InflateRect
GetWindowLongA
GetIconInfo
LoadImageA
CreateIconFromResourceEx
LookupIconIdFromDirectoryEx
kernel32
DuplicateHandle
VirtualProtect
GetVersionExW
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
SignalObjectAndWait
CreateTimerQueue
WriteConsoleW
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
HeapQueryInformation
HeapSize
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
HeapFree
HeapAlloc
FreeLibraryAndExitThread
GetConsoleCP
GetConsoleMode
SetConsoleCtrlHandler
GetFileType
SetStdHandle
GetModuleHandleExW
ExitProcess
InterlockedFlushSList
InterlockedPushEntrySList
WaitForSingleObjectEx
CloseHandle
RaiseException
GetLastError
GetCurrentThread
OpenThread
GetThreadTimes
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
DeleteCriticalSection
SwitchToThread
CreateThread
GetCurrentThreadId
SetThreadPriority
GetThreadPriority
FreeLibrary
GetModuleFileNameA
GetModuleFileNameW
GetProcAddress
LoadLibraryA
LoadLibraryW
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
SuspendThread
ResumeThread
TlsGetValue
TlsSetValue
GetThreadContext
SetLastError
CreateEventW
CreateFileW
DeleteFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
FlushFileBuffers
InterlockedPopEntrySList
GetFileAttributesA
GetFileAttributesW
ReadFile
SetFilePointerEx
WriteFile
GetEnvironmentVariableA
GetCurrentDirectoryA
OutputDebugStringA
GetSystemTime
ReadProcessMemory
VerSetConditionMask
GetSystemTimeAsFileTime
GetCurrentProcessId
GetModuleHandleW
WaitForSingleObject
LocalFree
FormatMessageW
VerifyVersionInfoW
CreateToolhelp32Snapshot
Thread32First
Thread32Next
GetStdHandle
GetFileSize
GetTempPathW
SetEvent
Sleep
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetProcessId
GetThreadId
OpenProcess
CopyFileExW
AllocConsole
SetErrorMode
GetCommandLineW
InitializeCriticalSection
CreateEventA
TerminateThread
GetExitCodeThread
GetModuleHandleA
LoadLibraryExW
LoadResource
LockResource
SizeofResource
FindResourceA
EnumResourceNamesA
GetFileSizeEx
IsDebuggerPresent
QueryPerformanceCounter
QueryPerformanceFrequency
ReleaseSemaphore
TlsAlloc
TlsFree
VirtualAlloc
VirtualFree
VirtualQuery
RtlUnwind
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTickCount
GetCPInfo
DecodePointer
EncodePointer
GetStringTypeW
InitializeSListHead
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
QueryDepthSList
UnregisterWaitEx
IsProcessorFeaturePresent
ResetEvent
WaitForMultipleObjectsEx
shell32
SHCreateDirectoryExW
CommandLineToArgvW
ole32
CoInitializeEx
CoTaskMemFree
CoCreateGuid
psapi
GetModuleFileNameExW
advapi32
GetUserNameA
wininet
HttpOpenRequestA
InternetCloseHandle
InternetConnectA
HttpQueryInfoA
HttpSendRequestA
InternetOpenA
InternetCrackUrlA
gdi32
GetObjectA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 444KB - Virtual size: 443KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 349KB - Virtual size: 349KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/UnityPlayer.dll.dll windows:6 windows x86 arch:x86
7c5733f3d9717f2c5205e6c9f0f133e8
Code Sign
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23/03/2022, 00:00Not After22/03/2037, 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29/04/2021, 00:00Not After28/04/2036, 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before29/03/2022, 00:00Not After14/03/2033, 23:59SubjectCN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
0f:7c:5a:5e:06:2a:bd:ba:fc:be:1e:c6:3d:4c:30:52Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before14/07/2021, 00:00Not After18/07/2024, 23:59SubjectCN=Unity Technologies ApS,OU=Developer Services,O=Unity Technologies ApS,L=København,C=DKExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
86:49:82:ab:01:a2:2c:31:29:ab:1b:1c:60:c2:c0:0a:54:02:de:1dSigner
Actual PE Digest86:49:82:ab:01:a2:2c:31:29:ab:1b:1c:60:c2:c0:0a:54:02:de:1dDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
C:\buildslave\unity\build\artifacts\UnityPlayer\Win32_VS2019_nondev_i_r\UnityPlayer_Win32_player_il2cpp_x86.pdb
Imports
kernel32
GetSystemPowerStatus
GetUserDefaultLocaleName
K32GetProcessMemoryInfo
CreateToolhelp32Snapshot
DeleteFileW
GetFileAttributesW
GetTempFileNameW
GlobalAlloc
GlobalUnlock
GlobalLock
GetSystemTime
GetSystemTimeAsFileTime
ExpandEnvironmentStringsW
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetDiskFreeSpaceExW
GetFileAttributesExW
GetFullPathNameW
ReadFile
RemoveDirectoryW
SetEndOfFile
SetFileAttributesW
SetFilePointer
SetFilePointerEx
SetFileTime
SuspendThread
ResumeThread
LocalFree
CopyFileW
MoveFileExW
ReplaceFileW
SystemTimeToFileTime
Thread32First
Thread32Next
CreateMutexA
RtlCaptureContext
GetEnvironmentVariableA
GetCurrentDirectoryA
GetCurrentDirectoryW
GetFileAttributesA
DebugBreak
SetUnhandledExceptionFilter
GetErrorMode
GetThreadContext
ReadProcessMemory
GetModuleFileNameA
LocalAlloc
GetOverlappedResult
CancelIo
ResetEvent
FormatMessageA
GetWindowsDirectoryW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateIoCompletionPort
GetQueuedCompletionStatus
DeleteCriticalSection
AttachConsole
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
ReleaseSemaphore
GetSystemInfo
GetLocalTime
GetTimeZoneInformation
GetFileSizeEx
IsDebuggerPresent
CreateSemaphoreExW
TlsAlloc
TlsFree
OpenThread
VirtualAlloc
GetModuleHandleA
GetStdHandle
GetModuleFileNameW
SetThreadAffinityMask
FlushConsoleInputBuffer
ReadConsoleInputW
CreateWaitableTimerA
OpenEventA
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ExitThread
GetTickCount
GlobalMemoryStatus
InitializeCriticalSectionEx
GetSystemDirectoryW
EncodePointer
DecodePointer
CompareStringW
LCMapStringW
GetStringTypeW
GetCPInfo
IsProcessorFeaturePresent
UnhandledExceptionFilter
GetStartupInfoW
CreateTimerQueue
SignalObjectAndWait
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
RegisterWaitForSingleObject
UnregisterWait
FreeLibraryAndExitThread
GetVersionExW
DuplicateHandle
QueryDepthSList
UnregisterWaitEx
RtlUnwind
HeapReAlloc
HeapSize
HeapQueryInformation
ExitProcess
GetModuleHandleExW
GetConsoleCP
GetConsoleMode
ReadConsoleW
GetDriveTypeW
GetFileInformationByHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
HeapFree
HeapAlloc
GetProcessHeap
GetDateFormatW
GetTimeFormatW
CreateEventExW
WaitForMultipleObjectsEx
QueryPerformanceFrequency
QueryPerformanceCounter
VerifyVersionInfoW
VerSetConditionMask
SetConsoleCtrlHandler
GetStartupInfoA
UpdateProcThreadAttribute
GetFileType
DeleteProcThreadAttributeList
InitializeProcThreadAttributeList
GetProcessId
CreateProcessW
GetExitCodeProcess
WaitForMultipleObjects
CreateEventW
CreatePipe
OutputDebugStringA
GetTempPathW
WriteFile
FlushFileBuffers
SetStdHandle
SetConsoleMode
GetComputerNameW
VirtualFree
TerminateProcess
GetCurrentProcess
WaitForSingleObject
VirtualProtect
CreateFileA
GetCommandLineW
GetLogicalProcessorInformationEx
GetSystemDirectoryA
GlobalMemoryStatusEx
SetErrorMode
LoadLibraryExW
VirtualQuery
IsValidCodePage
GetACP
SetLastError
GetModuleHandleW
GetThreadPriority
SetThreadPriority
GetCurrentThreadId
GetCurrentThread
RaiseException
CreateWaitableTimerExW
SetWaitableTimer
SleepEx
CloseHandle
Sleep
CreateEventA
WaitForSingleObjectEx
SetEvent
FormatMessageW
CreateThread
SwitchToThread
GetFileSize
GetThreadTimes
SetHandleInformation
SetDllDirectoryW
LoadLibraryW
GetLastError
WideCharToMultiByte
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
LoadLibraryA
GetProcAddress
FreeLibrary
GetCurrentProcessId
MultiByteToWideChar
TlsSetValue
GetNativeSystemInfo
TlsGetValue
user32
AdjustWindowRectEx
LoadIconW
EnumDisplaySettingsW
GetWindowPlacement
KillTimer
RegisterRawInputDevices
GetRawInputBuffer
GetRawInputDeviceInfoW
SetTimer
MsgWaitForMultipleObjects
PeekMessageA
GetCaretBlinkTime
GetDoubleClickTime
GetUserObjectInformationW
GetProcessWindowStation
GetRawInputDeviceList
EnumDisplaySettingsA
GetDC
GetRawInputData
SystemParametersInfoW
GetWindowLongA
PtInRect
ScreenToClient
GetCursorPos
GetSystemMetrics
ReleaseCapture
SetCapture
MapVirtualKeyExA
MapVirtualKeyW
MapVirtualKeyA
ToUnicode
GetKeyNameTextW
GetAsyncKeyState
GetKeyState
UnregisterDeviceNotification
RegisterDeviceNotificationW
GetMessageExtraInfo
DispatchMessageA
TranslateMessage
GetKeyboardLayout
GetKeyboardLayoutNameW
LoadIconA
OffsetRect
CopyRect
SendDlgItemMessageW
SetDlgItemTextW
SetDlgItemTextA
EndDialog
DialogBoxParamW
EnumWindows
SetForegroundWindow
SendMessageTimeoutA
RegisterWindowMessageA
GetUserObjectInformationA
GetThreadDesktop
LoadImageW
DestroyIcon
DestroyCursor
LoadCursorA
SetCursor
IsClipboardFormatAvailable
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
TrackMouseEvent
AllowSetForegroundWindow
ReleaseDC
GetDesktopWindow
DisplayConfigGetDeviceInfo
QueryDisplayConfig
GetDisplayConfigBufferSizes
UpdateWindow
EnumDisplayMonitors
GetMonitorInfoW
GetMonitorInfoA
MonitorFromWindow
MonitorFromRect
EnumDisplayDevicesA
GetParent
SetWindowLongW
SetWindowLongA
GetWindowLongW
ClipCursor
ClientToScreen
SetCursorPos
ShowCursor
GetWindowRect
GetClientRect
SetWindowTextW
ValidateRect
DragDetect
GetFocus
GetActiveWindow
SetFocus
IsIconic
IsWindowVisible
SetWindowPos
MoveWindow
ShowWindow
DestroyWindow
CreateWindowExW
UnregisterClassW
RegisterClassW
PostQuitMessage
DefWindowProcW
SendMessageW
GetMessageA
MessageBoxA
RegisterClassExW
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
ole32
CoSetProxyBlanket
CoInitialize
StringFromGUID2
CoUninitialize
PropVariantCopy
PropVariantClear
CoCreateInstance
CoCreateGuid
CoTaskMemFree
CoCreateFreeThreadedMarshaler
CoTaskMemAlloc
shlwapi
PathCanonicalizeW
SHDeleteKeyW
setupapi
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
advapi32
RegCloseKey
RegDeleteValueA
RegOpenKeyExW
RegQueryValueExA
RegSetValueExA
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
OpenProcessToken
DeregisterEventSource
RegisterEventSourceA
ReportEventA
GetSidSubAuthority
GetTokenInformation
GetUserNameA
CryptAcquireContextA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
RegCreateKeyW
gdi32
SetPixelFormat
ChoosePixelFormat
SwapBuffers
GetDeviceCaps
shell32
SHGetFolderPathW
CommandLineToArgvW
ShellExecuteW
SHFileOperationW
opengl32
wglCreateContext
wglGetProcAddress
wglDeleteContext
wglGetCurrentDC
wglMakeCurrent
wglGetCurrentContext
winmm
timeGetTime
waveInAddBuffer
waveOutGetDevCapsA
waveOutGetDevCapsW
waveOutOpen
waveOutClose
waveOutPrepareHeader
waveOutUnprepareHeader
waveInStart
waveOutReset
waveOutGetPosition
waveInGetNumDevs
waveInGetDevCapsA
waveInGetDevCapsW
waveInOpen
waveInClose
timeBeginPeriod
timeEndPeriod
waveOutWrite
waveInReset
waveInPrepareHeader
waveInUnprepareHeader
waveOutGetNumDevs
oleaut32
SysAllocString
SysFreeString
VariantClear
VariantChangeType
VariantInit
imm32
ImmSetCompositionStringW
ImmGetCompositionStringW
ImmAssociateContextEx
ImmAssociateContext
ImmReleaseContext
ImmGetConversionStatus
ImmNotifyIME
ImmGetContext
winhttp
WinHttpGetIEProxyConfigForCurrentUser
bcrypt
BCryptGenRandom
hid
HidP_SetUsageValue
HidP_SetUsages
HidP_GetData
HidP_MaxDataListLength
HidP_GetValueCaps
HidP_GetButtonCaps
HidP_GetCaps
HidD_GetHidGuid
HidD_GetPreparsedData
HidD_FreePreparsedData
HidD_GetProductString
HidD_GetManufacturerString
HidD_GetSerialNumberString
HidD_GetAttributes
crypt32
CertFreeCertificateChain
CertVerifyCertificateChainPolicy
CertAddEncodedCertificateToStore
CertGetCertificateChain
CertOpenStore
CertFreeCertificateContext
CertCloseStore
ws2_32
WSAGetLastError
WSASetLastError
WSACleanup
WSAStartup
gethostname
socket
shutdown
setsockopt
sendto
send
select
WSASocketA
recv
ntohs
listen
inet_addr
htons
htonl
getsockname
ioctlsocket
connect
closesocket
bind
accept
__WSAFDIsSet
getaddrinfo
freeaddrinfo
getnameinfo
ntohl
WSAIoctl
getpeername
gethostbyname
getprotobyname
WSARecvFrom
getsockopt
WSACloseEvent
WSACreateEvent
WSASocketW
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSAEventSelect
WSAResetEvent
WSASetEvent
gethostbyaddr
WSASendDisconnect
WSAAsyncGetHostByName
WSACancelAsyncRequest
recvfrom
dwmapi
DwmGetWindowAttribute
Exports
Exports
UnityMain
Sections
.text Size: 18.2MB - Virtual size: 18.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 267KB - Virtual size: 988KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rodata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 658KB - Virtual size: 657KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/Tyrion Cuthbert Attorney of the Arcane/baselib.dll.dll windows:6 windows x86 arch:x86
02aaa95fdf0635d01147bb896b42472c
Code Sign
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23/03/2022, 00:00Not After22/03/2037, 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29/04/2021, 00:00Not After28/04/2036, 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before29/03/2022, 00:00Not After14/03/2033, 23:59SubjectCN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
0f:7c:5a:5e:06:2a:bd:ba:fc:be:1e:c6:3d:4c:30:52Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before14/07/2021, 00:00Not After18/07/2024, 23:59SubjectCN=Unity Technologies ApS,OU=Developer Services,O=Unity Technologies ApS,L=København,C=DKExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
18:5c:b6:81:91:5d:72:6c:ef:eb:0b:39:9c:58:03:25:eb:4f:e7:10Signer
Actual PE Digest18:5c:b6:81:91:5d:72:6c:ef:eb:0b:39:9c:58:03:25:eb:4f:e7:10Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
C:\buildslave\unity\build\artifacts\baselib\Win32_VS2019_nondev_i_r\baselib_Win32_Master_il2cpp_x86.pdb
Imports
ws2_32
accept
WSAWaitForMultipleEvents
WSASocketW
WSAIoctl
WSACreateEvent
WSACloseEvent
WSAGetLastError
shutdown
setsockopt
sendto
send
select
recvfrom
recv
listen
getsockopt
getsockname
ioctlsocket
connect
closesocket
bind
__WSAFDIsSet
kernel32
GetCurrentProcessId
WriteConsoleW
GetStringTypeW
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
DecodePointer
HeapQueryInformation
RaiseException
GetLastError
CreateFileW
FlushFileBuffers
GetFileAttributesW
GetFileSizeEx
ReadFile
SetEndOfFile
SetFilePointerEx
WriteFile
IsDebuggerPresent
CloseHandle
QueryPerformanceCounter
QueryPerformanceFrequency
ReleaseSemaphore
WaitForSingleObject
WaitForSingleObjectEx
CreateSemaphoreExW
SwitchToThread
CreateThread
GetCurrentThreadId
ResumeThread
TlsAlloc
TlsFree
GetThreadId
GetNativeSystemInfo
VirtualAlloc
VirtualFree
VirtualQuery
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryW
FormatMessageW
Sleep
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsGetValue
TlsSetValue
GetSystemTimeAsFileTime
GetTickCount
SetEvent
ResetEvent
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
InitializeSListHead
GetCurrentProcess
TerminateProcess
CreateTimerQueue
SignalObjectAndWait
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
EncodePointer
GetCurrentThread
GetThreadTimes
FreeLibraryAndExitThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryExW
GetVersionExW
VirtualProtect
DuplicateHandle
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
HeapSize
RtlUnwind
GetModuleHandleExW
ExitProcess
HeapAlloc
HeapFree
LCMapStringW
GetStdHandle
GetFileType
GetConsoleCP
GetConsoleMode
HeapReAlloc
Exports
Exports
??0AbortShim@il2cpp_baselib@@QAE@P6A_NW4Baselib_ErrorCode@1@PAX@Z1@Z
??0Thread@il2cpp_baselib@baselib@@QAE@$$QAV012@@Z
??0Thread@il2cpp_baselib@baselib@@QAE@XZ
??1Thread@il2cpp_baselib@baselib@@QAE@XZ
??4AbortShim@il2cpp_baselib@@QAEAAV01@$$QAV01@@Z
??4AbortShim@il2cpp_baselib@@QAEAAV01@ABV01@@Z
??4Thread@il2cpp_baselib@baselib@@QAEAAV012@$$QAV012@@Z
??6il2cpp_baselib@@YAAAVomemstream@0@AAV10@ABW4Baselib_ErrorCode@0@@Z
?Baselib_Debug_IsDebuggerAttached@il2cpp_baselib@@YA_NXZ
?Baselib_DynamicLibrary_Close@il2cpp_baselib@@YAXUBaselib_DynamicLibrary_Handle@1@@Z
?Baselib_DynamicLibrary_FromNativeHandle@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@_KIPAUBaselib_ErrorState@1@@Z
?Baselib_DynamicLibrary_GetFunction@il2cpp_baselib@@YAPAXUBaselib_DynamicLibrary_Handle@1@PBDPAUBaselib_ErrorState@1@@Z
?Baselib_DynamicLibrary_OpenProgramHandle@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@PAUBaselib_ErrorState@1@@Z
?Baselib_DynamicLibrary_OpenUtf16@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@PBGPAUBaselib_ErrorState@1@@Z
?Baselib_DynamicLibrary_OpenUtf8@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@PBDPAUBaselib_ErrorState@1@@Z
?Baselib_ErrorState_Explain@il2cpp_baselib@@YAIPBUBaselib_ErrorState@1@QADIW4Baselib_ErrorState_ExplainVerbosity@1@@Z
?Baselib_ErrorState_FormatAndStoreExtraInformation@il2cpp_baselib@@YA_KPBDPAD@Z
?Baselib_FileIO_AsyncClose@il2cpp_baselib@@YAXUBaselib_FileIO_AsyncFile@1@@Z
?Baselib_FileIO_AsyncOpen@il2cpp_baselib@@YA?AUBaselib_FileIO_AsyncFile@1@UBaselib_FileIO_EventQueue@1@PBD_KW4Baselib_FileIO_Priority@1@@Z
?Baselib_FileIO_AsyncRead@il2cpp_baselib@@YAXUBaselib_FileIO_AsyncFile@1@QAUBaselib_FileIO_ReadRequest@1@_K2W4Baselib_FileIO_Priority@1@@Z
?Baselib_FileIO_EventQueue_Create@il2cpp_baselib@@YA?AUBaselib_FileIO_EventQueue@1@XZ
?Baselib_FileIO_EventQueue_Dequeue@il2cpp_baselib@@YA_KUBaselib_FileIO_EventQueue@1@QAUBaselib_FileIO_EventQueue_Result@1@_KI@Z
?Baselib_FileIO_EventQueue_Free@il2cpp_baselib@@YAXUBaselib_FileIO_EventQueue@1@@Z
?Baselib_FileIO_EventQueue_Shutdown@il2cpp_baselib@@YAXUBaselib_FileIO_EventQueue@1@I@Z
?Baselib_FileIO_SyncClose@il2cpp_baselib@@YAXUBaselib_FileIO_SyncFile@1@PAUBaselib_ErrorState@1@@Z
?Baselib_FileIO_SyncFileFromNativeHandle@il2cpp_baselib@@YA?AUBaselib_FileIO_SyncFile@1@_KI@Z
?Baselib_FileIO_SyncFlush@il2cpp_baselib@@YAXUBaselib_FileIO_SyncFile@1@PAUBaselib_ErrorState@1@@Z
?Baselib_FileIO_SyncGetFileSize@il2cpp_baselib@@YA_KUBaselib_FileIO_SyncFile@1@PAUBaselib_ErrorState@1@@Z
?Baselib_FileIO_SyncOpen@il2cpp_baselib@@YA?AUBaselib_FileIO_SyncFile@1@PBDIPAUBaselib_ErrorState@1@@Z
?Baselib_FileIO_SyncRead@il2cpp_baselib@@YA_KUBaselib_FileIO_SyncFile@1@_KPAX1PAUBaselib_ErrorState@1@@Z
?Baselib_FileIO_SyncSetFileSize@il2cpp_baselib@@YAXUBaselib_FileIO_SyncFile@1@_KPAUBaselib_ErrorState@1@@Z
?Baselib_FileIO_SyncWrite@il2cpp_baselib@@YA_KUBaselib_FileIO_SyncFile@1@_KPBX1PAUBaselib_ErrorState@1@@Z
?Baselib_Memory_AlignedAllocate@il2cpp_baselib@@YAPAXII@Z
?Baselib_Memory_AlignedFree@il2cpp_baselib@@YAXPAX@Z
?Baselib_Memory_AlignedReallocate@il2cpp_baselib@@YAPAXPAXII@Z
?Baselib_Memory_Allocate@il2cpp_baselib@@YAPAXI@Z
?Baselib_Memory_AllocatePages@il2cpp_baselib@@YA?AUBaselib_Memory_PageAllocation@1@_K00W4Baselib_Memory_PageState@1@PAUBaselib_ErrorState@1@@Z
?Baselib_Memory_Free@il2cpp_baselib@@YAXPAX@Z
?Baselib_Memory_GetPageSizeInfo@il2cpp_baselib@@YAXPAUBaselib_Memory_PageSizeInfo@1@@Z
?Baselib_Memory_Reallocate@il2cpp_baselib@@YAPAXPAXI@Z
?Baselib_Memory_ReleasePages@il2cpp_baselib@@YAXUBaselib_Memory_PageAllocation@1@PAUBaselib_ErrorState@1@@Z
?Baselib_Memory_SetPageState@il2cpp_baselib@@YAXPAX_K1W4Baselib_Memory_PageState@1@PAUBaselib_ErrorState@1@@Z
?Baselib_NetworkAddress_Decode@il2cpp_baselib@@YAXPBUBaselib_NetworkAddress@1@PAW4Baselib_NetworkAddress_Family@1@QADIPAGPAUBaselib_ErrorState@1@@Z
?Baselib_NetworkAddress_Encode@il2cpp_baselib@@YAXPAUBaselib_NetworkAddress@1@W4Baselib_NetworkAddress_Family@1@QBDGPAUBaselib_ErrorState@1@@Z
?Baselib_Process_Abort@il2cpp_baselib@@YAXW4Baselib_ErrorCode@1@@Z
?Baselib_RegisteredNetwork_BufferSlice_Create@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_BufferSlice@1@UBaselib_RegisteredNetwork_Buffer@1@II@Z
?Baselib_RegisteredNetwork_BufferSlice_Empty@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_BufferSlice@1@XZ
?Baselib_RegisteredNetwork_Buffer_Deregister@il2cpp_baselib@@YAXUBaselib_RegisteredNetwork_Buffer@1@@Z
?Baselib_RegisteredNetwork_Buffer_Register@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_Buffer@1@UBaselib_Memory_PageAllocation@1@PAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Endpoint_Create@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_Endpoint@1@PBUBaselib_NetworkAddress@1@UBaselib_RegisteredNetwork_BufferSlice@1@PAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Endpoint_Empty@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_Endpoint@1@XZ
?Baselib_RegisteredNetwork_Endpoint_GetNetworkAddress@il2cpp_baselib@@YAXUBaselib_RegisteredNetwork_Endpoint@1@PAUBaselib_NetworkAddress@1@PAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_Close@il2cpp_baselib@@YAXUBaselib_RegisteredNetwork_Socket_UDP@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_Create@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_Socket_UDP@1@PBUBaselib_NetworkAddress@1@W4Baselib_NetworkAddress_AddressReuse@1@IIPAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_DequeueRecv@il2cpp_baselib@@YAIUBaselib_RegisteredNetwork_Socket_UDP@1@QAUBaselib_RegisteredNetwork_CompletionResult@1@IPAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_DequeueSend@il2cpp_baselib@@YAIUBaselib_RegisteredNetwork_Socket_UDP@1@QAUBaselib_RegisteredNetwork_CompletionResult@1@IPAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_GetNetworkAddress@il2cpp_baselib@@YAXUBaselib_RegisteredNetwork_Socket_UDP@1@PAUBaselib_NetworkAddress@1@PAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_ProcessRecv@il2cpp_baselib@@YA?AW4Baselib_RegisteredNetwork_ProcessStatus@1@UBaselib_RegisteredNetwork_Socket_UDP@1@PAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_ProcessSend@il2cpp_baselib@@YA?AW4Baselib_RegisteredNetwork_ProcessStatus@1@UBaselib_RegisteredNetwork_Socket_UDP@1@PAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_ScheduleRecv@il2cpp_baselib@@YAIUBaselib_RegisteredNetwork_Socket_UDP@1@PBUBaselib_RegisteredNetwork_Request@1@IPAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_ScheduleSend@il2cpp_baselib@@YAIUBaselib_RegisteredNetwork_Socket_UDP@1@PBUBaselib_RegisteredNetwork_Request@1@IPAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_WaitForCompletedRecv@il2cpp_baselib@@YA?AW4Baselib_RegisteredNetwork_CompletionQueueStatus@1@UBaselib_RegisteredNetwork_Socket_UDP@1@IPAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_WaitForCompletedSend@il2cpp_baselib@@YA?AW4Baselib_RegisteredNetwork_CompletionQueueStatus@1@UBaselib_RegisteredNetwork_Socket_UDP@1@IPAUBaselib_ErrorState@1@@Z
?Baselib_Socket_Bind@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@PBUBaselib_NetworkAddress@1@W4Baselib_NetworkAddress_AddressReuse@1@PAUBaselib_ErrorState@1@@Z
?Baselib_Socket_Close@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@@Z
?Baselib_Socket_Create@il2cpp_baselib@@YA?AUBaselib_Socket_Handle@1@W4Baselib_NetworkAddress_Family@1@W4Baselib_Socket_Protocol@1@PAUBaselib_ErrorState@1@@Z
?Baselib_Socket_GetAddress@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@PAUBaselib_NetworkAddress@1@PAUBaselib_ErrorState@1@@Z
?Baselib_Socket_Poll@il2cpp_baselib@@YAXPAUBaselib_Socket_PollFd@1@IIPAUBaselib_ErrorState@1@@Z
?Baselib_Socket_TCP_Accept@il2cpp_baselib@@YA?AUBaselib_Socket_Handle@1@U21@PAUBaselib_ErrorState@1@@Z
?Baselib_Socket_TCP_Connect@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@PBUBaselib_NetworkAddress@1@W4Baselib_NetworkAddress_AddressReuse@1@PAUBaselib_ErrorState@1@@Z
?Baselib_Socket_TCP_Listen@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@PAUBaselib_ErrorState@1@@Z
?Baselib_Socket_TCP_Recv@il2cpp_baselib@@YAIUBaselib_Socket_Handle@1@PAXIPAUBaselib_ErrorState@1@@Z
?Baselib_Socket_TCP_Send@il2cpp_baselib@@YAIUBaselib_Socket_Handle@1@PAXIPAUBaselib_ErrorState@1@@Z
?Baselib_Socket_UDP_Recv@il2cpp_baselib@@YAIUBaselib_Socket_Handle@1@QAUBaselib_Socket_Message@1@IPAUBaselib_ErrorState@1@@Z
?Baselib_Socket_UDP_Send@il2cpp_baselib@@YAIUBaselib_Socket_Handle@1@QAUBaselib_Socket_Message@1@IPAUBaselib_ErrorState@1@@Z
?Baselib_SystemFutex_Notify@il2cpp_baselib@@YAXPAHIW4Baselib_WakeupFallbackStrategy@1@@Z
?Baselib_SystemFutex_Wait@il2cpp_baselib@@YAXPAHHI@Z
?Baselib_SystemSemaphore_Acquire@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z
?Baselib_SystemSemaphore_Create@il2cpp_baselib@@YA?AUBaselib_SystemSemaphore_Handle@1@XZ
?Baselib_SystemSemaphore_CreateInplace@il2cpp_baselib@@YA?AUBaselib_SystemSemaphore_Handle@1@PAX@Z
?Baselib_SystemSemaphore_Free@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z
?Baselib_SystemSemaphore_FreeInplace@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z
?Baselib_SystemSemaphore_Release@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@I@Z
?Baselib_SystemSemaphore_TryAcquire@il2cpp_baselib@@YA_NUBaselib_SystemSemaphore_Handle@1@@Z
?Baselib_SystemSemaphore_TryTimedAcquire@il2cpp_baselib@@YA_NUBaselib_SystemSemaphore_Handle@1@I@Z
?Baselib_TLS_Alloc@il2cpp_baselib@@YAIXZ
?Baselib_TLS_Free@il2cpp_baselib@@YAXI@Z
?Baselib_Thread_Create@il2cpp_baselib@@YAPAUBaselib_Thread@1@UBaselib_Thread_Config@1@PAUBaselib_ErrorState@1@@Z
?Baselib_Thread_GetCurrentThreadId@il2cpp_baselib@@YAHXZ
?Baselib_Thread_GetId@il2cpp_baselib@@YAHPAUBaselib_Thread@1@@Z
?Baselib_Thread_Join@il2cpp_baselib@@YAXPAUBaselib_Thread@1@IPAUBaselib_ErrorState@1@@Z
?Baselib_Thread_SupportsThreads@il2cpp_baselib@@YA_NXZ
?Baselib_Thread_YieldExecution@il2cpp_baselib@@YAXXZ
?Baselib_Timer_GetHighPrecisionTimerTicks@il2cpp_baselib@@YA_KXZ
?Baselib_Timer_GetTicksToNanosecondsConversionRatio@il2cpp_baselib@@YA?AUBaselib_Timer_TickToNanosecondConversionRatio@1@XZ
?Baselib_Timer_GetTimeSinceStartupInSeconds@il2cpp_baselib@@YANXZ
?Baselib_Timer_TickToNanosecondsConversionFactor@il2cpp_baselib@@3NB
?Baselib_Timer_WaitForAtLeast@il2cpp_baselib@@YAXI@Z
?Call@AbortShim@il2cpp_baselib@@QAE_NW4Baselib_ErrorCode@2@@Z
?CreateThread@Thread@il2cpp_baselib@baselib@@CAPAUBaselib_Thread@2@P6AXPAX@Z0@Z
?Detail_Baselib_EventSemaphore_SemaphoreBased_AcquireNonSet@il2cpp_baselib@@YAXHPAUBaselib_EventSemaphore@@@Z
?Detail_Baselib_EventSemaphore_SemaphoreBased_TryTimedAcquireNonSet@il2cpp_baselib@@YA_NHPAUBaselib_EventSemaphore@@I@Z
?Empty@AbortShim@il2cpp_baselib@@SA?AV12@XZ
?GetCurrentId@Thread@il2cpp_baselib@baselib@@SAHXZ
?GetId@Thread@il2cpp_baselib@baselib@@QAEHXZ
?SetAbortShim@il2cpp_baselib@@YA?AVAbortShim@1@V21@@Z
?ShimmableAbort@il2cpp_baselib@@YAXW4Baselib_ErrorCode@1@@Z
?SupportsThreads@Thread@il2cpp_baselib@baselib@@SA_NXZ
?TryJoin@Thread@il2cpp_baselib@baselib@@QAE_NV?$duration@IU?$ratio@$00$0DOI@@std@@@chrono@std@@@Z
?YieldExecution@Thread@il2cpp_baselib@baselib@@SAXXZ
?detail_AssertLog@il2cpp_baselib@@YAXPBDZZ
?detail_AssertLogMute@il2cpp_baselib@@YAX_N@Z
Sections
.text Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/_Redist/dotNetFx40_Full_setup.exe.exe windows:5 windows x86 arch:x86
02483cd76378259a50b7b66146b45f06
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22/08/2007, 22:31Not After25/08/2012, 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07/12/2009, 22:40Not After07/03/2011, 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16/09/2006, 01:04Not After15/09/2019, 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:05:a2:30:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25/07/2008, 19:01Not After25/07/2013, 19:11SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
d6:d5:21:44:87:a4:87:f6:84:c8:27:2e:90:f4:8d:98:d2:12:c9:41Signer
Actual PE Digestd6:d5:21:44:87:a4:87:f6:84:c8:27:2e:90:f4:8d:98:d2:12:c9:41Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
boxstub.pdb
Imports
advapi32
CryptGenRandom
CryptReleaseContext
DecryptFileW
CryptAcquireContextA
kernel32
Sleep
WaitForSingleObject
GetExitCodeProcess
CloseHandle
SetFileAttributesW
InitializeCriticalSection
CreateEventA
CreateThread
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
GetCommandLineW
CreateProcessW
CompareStringW
LocalFree
QueryDosDeviceW
GetLogicalDriveStringsW
GetDiskFreeSpaceExW
GetDriveTypeW
CreateFileW
DeviceIoControl
SetErrorMode
CreateDirectoryW
RemoveDirectoryW
MoveFileExW
LoadLibraryW
GetProcAddress
GetSystemDirectoryW
GetVersion
GetLastError
SetEnvironmentVariableW
ExitThread
GetTickCount
GetEnvironmentVariableW
GetModuleHandleW
lstrlenW
WaitForMultipleObjects
ResetEvent
GetSystemInfo
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetEndOfFile
DuplicateHandle
ReadFile
SetFilePointerEx
GlobalFree
GlobalAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
LCMapStringW
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
GetStringTypeW
HeapSize
HeapReAlloc
IsProcessorFeaturePresent
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileA
GetLocalTime
GetComputerNameW
lstrlenA
FormatMessageW
GetSystemTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
DeleteFileW
GetFileAttributesW
FindFirstFileW
FindNextFileW
FindClose
GetCurrentDirectoryW
SetCurrentDirectoryW
ExpandEnvironmentStringsW
GetProcessHeap
RaiseException
comctl32
ord17
rpcrt4
UuidToStringW
RpcStringFreeW
UuidCreate
shell32
CommandLineToArgvW
SHBrowseForFolderW
SHGetPathFromIDListW
shlwapi
PathRemoveExtensionW
user32
MessageBoxW
GetTopWindow
GetWindowThreadProcessId
GetWindow
SendMessageA
PostMessageW
SendMessageW
DialogBoxParamA
GetDlgItem
SetWindowTextW
EndDialog
PostQuitMessage
DialogBoxParamW
SetWindowLongW
GetWindowLongW
LoadStringW
CharUpperW
cabinet
ord22
ord23
ord20
oleaut32
SysAllocString
VariantClear
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
Exports
Exports
?dwPlaceholder@@3PAEA
_DecodePointerInternal@4
_EncodePointerInternal@4
Sections
.text Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boxld01 Size: 512B - Virtual size: 194B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/_Redist/dxwebsetup.exe.exe windows:5 windows x86 arch:x86
1494de9b53e05fc1f40cb92afbdd6ce4
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22/08/2007, 22:31Not After25/08/2012, 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07/12/2009, 22:40Not After07/03/2011, 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16/09/2006, 01:04Not After15/09/2019, 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:05:a2:30:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25/07/2008, 19:01Not After25/07/2013, 19:11SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:b8:85:36:04:6e:46:6d:2f:58:b3:18:fd:18:43:f0:b8:4b:28:d3Signer
Actual PE Digest47:b8:85:36:04:6e:46:6d:2f:58:b3:18:fd:18:43:f0:b8:4b:28:d3Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA
kernel32
LocalFree
LocalAlloc
GetLastError
GetCurrentProcess
GetModuleFileNameA
lstrlenA
GetSystemDirectoryA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
lstrcatA
lstrcpyA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
CreateDirectoryA
GetFileAttributesA
ExpandEnvironmentStringsA
IsDBCSLeadByte
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
GetProcAddress
GlobalUnlock
GlobalLock
GlobalAlloc
FreeResource
CloseHandle
LoadResource
SizeofResource
FindResourceA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetCurrentDirectoryA
GetTempFileNameA
ExitProcess
CreateFileA
LoadLibraryExA
lstrcpynA
GetVolumeInformationA
FormatMessageA
GetCurrentDirectoryA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
GetSystemInfo
CreateMutexA
SetEvent
CreateEventA
CreateThread
ResetEvent
TerminateThread
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
LockResource
LoadLibraryA
GetDiskFreeSpaceA
MulDiv
EnumResourceLanguagesA
FreeLibrary
GlobalFree
gdi32
GetDeviceCaps
user32
ExitWindowsEx
wsprintfA
CharNextA
CharUpperA
CharPrevA
SetWindowLongA
GetWindowLongA
CallWindowProcA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
SendDlgItemMessageA
GetDlgItem
SetForegroundWindow
SetWindowTextA
MessageBoxA
DialogBoxIndirectParamA
ShowWindow
EnableWindow
GetDlgItemTextA
EndDialog
GetDesktopWindow
MessageBeep
SetDlgItemTextA
LoadStringA
GetSystemMetrics
comctl32
ord17
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 239KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/_Redist/oalinst.exe.exe windows:4 windows x86 arch:x86
1ff011c2e13ea492fe69b2fbfc802083
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15/06/2007, 00:00Not After14/06/2012, 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04/12/2003, 00:00Not After03/12/2013, 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before16/07/2004, 00:00Not After15/07/2014, 23:59SubjectCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
36:33:6d:83:6a:19:e2:44:ff:0e:52:88:2e:b5:b1:deCertificate
IssuerCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USNot Before30/06/2006, 00:00Not After14/07/2009, 23:59SubjectCN=Creative Labs Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=CLI,O=Creative Labs Inc,L=Milpitas,ST=California,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
61:0c:12:06:00:00:00:00:00:1bCertificate
IssuerCN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before23/05/2006, 17:01Not After23/05/2016, 17:11SubjectOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
cb:34:e3:72:3d:d1:2b:57:d7:86:46:9b:d8:78:2f:92:cf:2d:5d:4fSigner
Actual PE Digestcb:34:e3:72:3d:d1:2b:57:d7:86:46:9b:d8:78:2f:92:cf:2d:5d:4fDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
c:\cbs\build\ec922632-90cb-1015-8202-b7f05167b5ef\in\CTSDK\AL_Installer\Release\oalinst.pdb
Imports
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
GetFileAttributesA
GetProcAddress
LoadLibraryA
FreeResource
SizeofResource
LoadResource
FindResourceA
ReadFile
SetEndOfFile
GetLocaleInfoW
HeapSize
IsValidCodePage
IsValidLocale
DeleteFileA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetFilePointer
FlushFileBuffers
SetStdHandle
InterlockedExchange
RemoveDirectoryA
CreateDirectoryA
GetModuleFileNameA
GetSystemDirectoryA
CopyFileA
GetTempFileNameA
LockResource
MoveFileExA
GetTimeZoneInformation
CompareStringA
CompareStringW
EnumSystemLocalesA
VirtualAlloc
GetLastError
HeapFree
HeapAlloc
MoveFileA
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetEnvironmentVariableA
HeapReAlloc
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
LCMapStringA
MultiByteToWideChar
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
Sleep
SetConsoleCtrlHandler
FreeLibrary
user32
LoadCursorA
RegisterClassExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
PostQuitMessage
LoadIconA
SetClassLongA
LoadImageA
CreateWindowExA
SendMessageA
BeginPaint
GetClientRect
MoveWindow
DrawTextA
EndPaint
DefWindowProcA
gdi32
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
GetStockObject
advapi32
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
Sections
.text Size: 116KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 636KB - Virtual size: 633KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/_Redist/vcredist_2015-2019_x64.exe.exe windows:5 windows x86 arch:x86
1a5cdbf711fee14b077e599d13fddab2
Code Sign
33:00:00:01:34:22:1e:7e:49:2a:ac:da:6a:00:00:00:00:01:34Certificate
IssuerCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08/10/2019, 18:17Not After03/01/2021, 18:17SubjectCN=Microsoft Time-Stamp service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:E041-4BEE-FA7E,O=Microsoft Corporation,L=Redmond,ST=WA,C=USExtended Key Usages
ExtKeyUsageTimeStamping
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before02/05/2019, 21:37Not After02/05/2020, 21:37SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:16:68:34:00:00:00:00:00:1cCertificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before03/04/2007, 12:53Not After03/04/2021, 13:03SubjectCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08/07/2011, 20:59Not After08/07/2026, 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before02/05/2019, 21:37Not After02/05/2020, 21:37SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08/07/2011, 20:59Not After08/07/2026, 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
b4:cd:00:d9:81:97:db:3f:fb:fb:3f:54:d1:0a:0d:d4:f4:56:29:a6:03:63:86:3f:a0:b1:71:7e:4c:43:8a:daSigner
Actual PE Digestb4:cd:00:d9:81:97:db:3f:fb:fb:3f:54:d1:0a:0d:d4:f4:56:29:a6:03:63:86:3f:a0:b1:71:7e:4c:43:8a:daDigest Algorithmsha256PE Digest Matchestrue77:97:6d:62:92:5a:37:44:2f:5d:c5:b0:8d:43:91:09:56:54:b2:48Signer
Actual PE Digest77:97:6d:62:92:5a:37:44:2f:5d:c5:b0:8d:43:91:09:56:54:b2:48Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB Paths
C:\agent\_work\8\s\build\ship\x86\burn.pdb
Imports
advapi32
RegCloseKey
RegOpenKeyExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
DecryptFileW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
ChangeServiceConfigW
CloseServiceHandle
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceStatus
SetNamedSecurityInfoW
CheckTokenMembership
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
GetTokenInformation
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
QueryServiceConfigW
user32
GetMessageW
PostMessageW
IsWindow
WaitForInputIdle
PostQuitMessage
PeekMessageW
MsgWaitForMultipleObjects
PostThreadMessageW
GetMonitorInfoW
MonitorFromPoint
IsDialogMessageW
LoadCursorW
LoadBitmapW
SetWindowLongW
GetWindowLongW
GetCursorPos
MessageBoxW
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
DispatchMessageW
TranslateMessage
oleaut32
SysFreeString
SysAllocString
VariantInit
VariantClear
gdi32
CreateCompatibleDC
DeleteObject
SelectObject
StretchBlt
GetObjectW
DeleteDC
shell32
SHGetFolderPathW
CommandLineToArgvW
ShellExecuteExW
ole32
CoUninitialize
CoInitializeEx
CoInitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoInitializeSecurity
CLSIDFromProgID
kernel32
GetCommandLineA
GetCPInfo
GetOEMCP
CloseHandle
CreateFileW
GetProcAddress
LocalFree
HeapSetInformation
GetLastError
GetModuleHandleW
FormatMessageW
lstrlenA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
Sleep
GetLocalTime
GetModuleFileNameW
ExpandEnvironmentStringsW
GetTempPathW
GetTempFileNameW
CreateDirectoryW
GetFullPathNameW
CompareStringW
GetCurrentProcessId
WriteFile
SetFilePointer
LoadLibraryW
GetSystemDirectoryW
CreateFileA
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FindClose
GetCommandLineW
GetCurrentDirectoryW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
FindFirstFileW
FindNextFileW
MoveFileExW
GetCurrentProcess
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
GetEnvironmentStringsW
TlsGetValue
TlsSetValue
TlsFree
CreateProcessW
GetVersionExW
VerSetConditionMask
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
GetNativeSystemInfo
GetModuleHandleExW
GetWindowsDirectoryW
GetSystemWow64DirectoryW
GetComputerNameW
VerifyVersionInfoW
GetVolumePathNameW
GetDateFormatW
GetSystemDefaultLangID
GetUserDefaultLangID
GetStringTypeW
ReadFile
SetFilePointerEx
DuplicateHandle
InterlockedExchange
InterlockedCompareExchange
CreateEventW
ProcessIdToSessionId
OpenProcess
GetProcessId
WaitForSingleObject
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
CreateThread
GetExitCodeThread
SetEvent
WaitForMultipleObjects
InterlockedIncrement
InterlockedDecrement
ResetEvent
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CompareStringA
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
MapViewOfFile
UnmapViewOfFile
CreateMutexW
CreateFileMappingW
GetThreadLocale
IsValidCodePage
FreeEnvironmentStringsW
TlsAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DecodePointer
WriteConsoleW
GetModuleHandleA
GlobalAlloc
GlobalFree
GetFileSizeEx
CopyFileW
VirtualAlloc
VirtualFree
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
SystemTimeToFileTime
GetSystemInfo
VirtualProtect
VirtualQuery
SetCurrentDirectoryW
FindFirstFileExW
GetFileType
GetACP
ExitProcess
GetStdHandle
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
SetLastError
LoadLibraryExA
rpcrt4
UuidCreate
Sections
.text Size: 294KB - Virtual size: 293KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 123KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wixburn Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/_Redist/vcredist_2015-2019_x86.exe.exe windows:5 windows x86 arch:x86
1a5cdbf711fee14b077e599d13fddab2
Code Sign
33:00:00:01:2a:30:bf:85:c5:0e:b1:e2:8c:00:00:00:00:01:2aCertificate
IssuerCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before06/09/2019, 20:40Not After04/12/2020, 20:40SubjectCN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:7D2E-3782-B0F7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before02/05/2019, 21:37Not After02/05/2020, 21:37SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:16:68:34:00:00:00:00:00:1cCertificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before03/04/2007, 12:53Not After03/04/2021, 13:03SubjectCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08/07/2011, 20:59Not After08/07/2026, 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before02/05/2019, 21:37Not After02/05/2020, 21:37SubjectCN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08/07/2011, 20:59Not After08/07/2026, 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
74:6d:60:08:04:c6:65:c7:f8:0a:78:74:29:9a:a4:ab:9d:42:b8:ba:0c:df:95:ee:75:8a:64:a4:2f:71:a6:46Signer
Actual PE Digest74:6d:60:08:04:c6:65:c7:f8:0a:78:74:29:9a:a4:ab:9d:42:b8:ba:0c:df:95:ee:75:8a:64:a4:2f:71:a6:46Digest Algorithmsha256PE Digest Matchestrue0b:05:b3:51:e7:d2:3f:ce:ad:94:9d:75:ac:64:9a:ad:21:01:73:2cSigner
Actual PE Digest0b:05:b3:51:e7:d2:3f:ce:ad:94:9d:75:ac:64:9a:ad:21:01:73:2cDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB Paths
C:\agent\_work\8\s\build\ship\x86\burn.pdb
Imports
advapi32
RegCloseKey
RegOpenKeyExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
DecryptFileW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
ChangeServiceConfigW
CloseServiceHandle
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceStatus
SetNamedSecurityInfoW
CheckTokenMembership
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
GetTokenInformation
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
QueryServiceConfigW
user32
GetMessageW
PostMessageW
IsWindow
WaitForInputIdle
PostQuitMessage
PeekMessageW
MsgWaitForMultipleObjects
PostThreadMessageW
GetMonitorInfoW
MonitorFromPoint
IsDialogMessageW
LoadCursorW
LoadBitmapW
SetWindowLongW
GetWindowLongW
GetCursorPos
MessageBoxW
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
DispatchMessageW
TranslateMessage
oleaut32
SysFreeString
SysAllocString
VariantInit
VariantClear
gdi32
CreateCompatibleDC
DeleteObject
SelectObject
StretchBlt
GetObjectW
DeleteDC
shell32
SHGetFolderPathW
CommandLineToArgvW
ShellExecuteExW
ole32
CoUninitialize
CoInitializeEx
CoInitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoInitializeSecurity
CLSIDFromProgID
kernel32
GetCommandLineA
GetCPInfo
GetOEMCP
CloseHandle
CreateFileW
GetProcAddress
LocalFree
HeapSetInformation
GetLastError
GetModuleHandleW
FormatMessageW
lstrlenA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
Sleep
GetLocalTime
GetModuleFileNameW
ExpandEnvironmentStringsW
GetTempPathW
GetTempFileNameW
CreateDirectoryW
GetFullPathNameW
CompareStringW
GetCurrentProcessId
WriteFile
SetFilePointer
LoadLibraryW
GetSystemDirectoryW
CreateFileA
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FindClose
GetCommandLineW
GetCurrentDirectoryW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
FindFirstFileW
FindNextFileW
MoveFileExW
GetCurrentProcess
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
GetEnvironmentStringsW
TlsGetValue
TlsSetValue
TlsFree
CreateProcessW
GetVersionExW
VerSetConditionMask
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
GetNativeSystemInfo
GetModuleHandleExW
GetWindowsDirectoryW
GetSystemWow64DirectoryW
GetComputerNameW
VerifyVersionInfoW
GetVolumePathNameW
GetDateFormatW
GetSystemDefaultLangID
GetUserDefaultLangID
GetStringTypeW
ReadFile
SetFilePointerEx
DuplicateHandle
InterlockedExchange
InterlockedCompareExchange
CreateEventW
ProcessIdToSessionId
OpenProcess
GetProcessId
WaitForSingleObject
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
CreateThread
GetExitCodeThread
SetEvent
WaitForMultipleObjects
InterlockedIncrement
InterlockedDecrement
ResetEvent
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CompareStringA
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
MapViewOfFile
UnmapViewOfFile
CreateMutexW
CreateFileMappingW
GetThreadLocale
IsValidCodePage
FreeEnvironmentStringsW
TlsAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DecodePointer
WriteConsoleW
GetModuleHandleA
GlobalAlloc
GlobalFree
GetFileSizeEx
CopyFileW
VirtualAlloc
VirtualFree
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
SystemTimeToFileTime
GetSystemInfo
VirtualProtect
VirtualQuery
SetCurrentDirectoryW
FindFirstFileExW
GetFileType
GetACP
ExitProcess
GetStdHandle
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
SetLastError
LoadLibraryExA
rpcrt4
UuidCreate
Sections
.text Size: 294KB - Virtual size: 293KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 123KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wixburn Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/_Redist/vcredist_x64.exe.exe windows:5 windows x86 arch:x86
a1f6f100bff4507a3332f3f0cdfc24f5
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22/08/2007, 22:31Not After25/08/2012, 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07/12/2009, 22:40Not After07/03/2011, 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16/09/2006, 01:04Not After15/09/2019, 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:05:a2:30:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25/07/2008, 19:01Not After25/07/2013, 19:11SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
b7:67:e2:97:28:63:cf:54:51:e3:36:ce:0a:1f:4f:ce:6e:3a:bc:30Signer
Actual PE Digestb7:67:e2:97:28:63:cf:54:51:e3:36:ce:0a:1f:4f:ce:6e:3a:bc:30Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB Paths
sfxcab.pdb
Imports
msvcrt
__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_adjust_fdiv
_exit
_c_exit
strncpy
strstr
_strlwr
strrchr
_stricmp
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_snprintf
sprintf
strchr
_strnicmp
_vsnprintf
advapi32
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
InitializeSecurityDescriptor
kernel32
CreateThread
GetFileSize
ExpandEnvironmentStringsA
CreateProcessA
GetExitCodeProcess
InitializeCriticalSectionAndSpinCount
LocalFileTimeToFileTime
SetFileTime
SetEndOfFile
CreateEventA
QueryDosDeviceA
GetDiskFreeSpaceA
GetSystemTime
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentDirectoryA
GetProcessHeap
CopyFileA
SetFileAttributesA
DosDateTimeToFileTime
SetEvent
GetVersionExA
ReadFile
SetFilePointer
MoveFileExA
RemoveDirectoryA
GetLastError
CreateDirectoryA
GetTickCount
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
CloseHandle
DeviceIoControl
CreateFileA
GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
FindFirstFileA
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
FindClose
FindNextFileA
SystemTimeToFileTime
user32
SendDlgItemMessageA
SendMessageA
DialogBoxParamA
MessageBoxA
SetParent
EndDialog
LoadStringA
ShowWindow
ntdll
NtOpenProcessToken
NtAdjustPrivilegesToken
NtClose
NtShutdownSystem
comctl32
ord17
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5.4MB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/_Redist/vcredist_x86.exe.exe windows:5 windows x86 arch:x86
a1f6f100bff4507a3332f3f0cdfc24f5
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22/08/2007, 22:31Not After25/08/2012, 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07/12/2009, 22:40Not After07/03/2011, 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16/09/2006, 01:04Not After15/09/2019, 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:06:94:2d:00:00:00:00:00:09Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25/07/2008, 19:02Not After25/07/2013, 19:12SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
8a:19:aa:3a:87:7f:dd:23:dc:03:96:64:c9:5b:23:7c:35:b0:fd:3dSigner
Actual PE Digest8a:19:aa:3a:87:7f:dd:23:dc:03:96:64:c9:5b:23:7c:35:b0:fd:3dDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB Paths
sfxcab.pdb
Imports
msvcrt
__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_adjust_fdiv
_exit
_c_exit
strncpy
strstr
_strlwr
strrchr
_stricmp
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_snprintf
sprintf
strchr
_strnicmp
_vsnprintf
advapi32
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
InitializeSecurityDescriptor
kernel32
CreateThread
GetFileSize
ExpandEnvironmentStringsA
CreateProcessA
GetExitCodeProcess
InitializeCriticalSectionAndSpinCount
LocalFileTimeToFileTime
SetFileTime
SetEndOfFile
CreateEventA
QueryDosDeviceA
GetDiskFreeSpaceA
GetSystemTime
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentDirectoryA
GetProcessHeap
CopyFileA
SetFileAttributesA
DosDateTimeToFileTime
SetEvent
GetVersionExA
ReadFile
SetFilePointer
MoveFileExA
RemoveDirectoryA
GetLastError
CreateDirectoryA
GetTickCount
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
CloseHandle
DeviceIoControl
CreateFileA
GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
FindFirstFileA
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
FindClose
FindNextFileA
SystemTimeToFileTime
user32
SendDlgItemMessageA
SendMessageA
DialogBoxParamA
MessageBoxA
SetParent
EndDialog
LoadStringA
ShowWindow
ntdll
NtOpenProcessToken
NtAdjustPrivilegesToken
NtClose
NtShutdownSystem
comctl32
ord17
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.8MB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Tyrion.Cuthbert.Attorney.of.the.Arcane/_Redist/xnafx40_redist.msi.msi