c:\depot\PC\UnrealEngine3\Binaries\Win32\SpecOpsTheLine.pdb
Static task
static1
Behavioral task
behavioral1
Sample
SpecOpsTheLine.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
SpecOpsTheLine.exe
Resource
win10v2004-20240611-en
General
-
Target
SpecOpsTheLine.exe
-
Size
17.8MB
-
MD5
bcb271c1fbfdbec8742971f4acd5c880
-
SHA1
7d488fdf9922d9488a00e205de2c23a181c317a1
-
SHA256
ab78325f926051ef9e3b4e8ba67f70d744561caff70799df78373f1d96670da7
-
SHA512
407c644a00a80ec0c17a3388b65d20fa664f84644f0f46ce17c931ef5d95afacf9f3283efebea9d83beef2274544fe9c31a987982b8918c0f29d98e2a4193043
-
SSDEEP
196608:DVQhhzD7tSCem8+vVNQLGUJ5HkjA29tb:BE9Dy+NSPJ5V29B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SpecOpsTheLine.exe
Files
-
SpecOpsTheLine.exe.exe windows:5 windows x86 arch:x86
e90b84572d3a17d50a828aa375c279b5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
steam_api
SteamMasterServerUpdater
SteamAPI_RegisterCallback
SteamAPI_UnregisterCallback
SteamGameServerStats
SteamAPI_RegisterCallResult
SteamUser
SteamGameServer
SteamGameServer_Init
SteamGameServer_RunCallbacks
SteamAPI_RunCallbacks
SteamMatchmakingServers
SteamAPI_UnregisterCallResult
SteamRemoteStorage
SteamGameServer_Shutdown
SteamNetworking
SteamFriends
SteamUserStats
SteamGameServer_BSecure
SteamGameServer_GetSteamID
SteamMatchmaking
SteamApps
SteamAPI_Init
SteamUtils
SteamAPI_Shutdown
dinput8
DirectInput8Create
xinput1_3
ord3
ord2
d3d9
Direct3DCreate9
D3DPERF_SetOptions
d3dcompiler_42
D3DReflect
d3dx9_42
D3DXPreprocessShader
D3DXCompileShader
D3DXCheckVersion
D3DXDebugMute
D3DXDisassembleShader
D3DXMatrixTranslation
D3DXMatrixInverse
D3DXOptimizeFaces
D3DXMatrixScaling
D3DXMatrixMultiply
D3DXMatrixLookAtRH
D3DXMatrixOrthoOffCenterRH
D3DXVec3Transform
d3dx10_42
D3DX10CompileFromMemory
nvtt
?process@Compressor@nvtt@@QBE_NABUInputOptions@2@ABUCompressionOptions@2@ABUOutputOptions@2@@Z
?setErrorHandler@OutputOptions@nvtt@@QAEXPAUErrorHandler@2@@Z
?setOutputHandler@OutputOptions@nvtt@@QAEXPAUOutputHandler@2@@Z
?setOutputHeader@OutputOptions@nvtt@@QAEX_N@Z
?estimateSize@Compressor@nvtt@@QBEHABUInputOptions@2@ABUCompressionOptions@2@@Z
?enableCudaAcceleration@Compressor@nvtt@@QAEX_N@Z
?setNormalMap@InputOptions@nvtt@@QAEX_N@Z
?setColorWeights@CompressionOptions@nvtt@@QAEXMMMM@Z
?setQuality@CompressionOptions@nvtt@@QAEXW4Quality@2@@Z
?setFormat@CompressionOptions@nvtt@@QAEXW4Format@2@@Z
?setFormat@InputOptions@nvtt@@QAEXW4InputFormat@2@@Z
?setWrapMode@InputOptions@nvtt@@QAEXW4WrapMode@2@@Z
?setGamma@InputOptions@nvtt@@QAEXMM@Z
?setMipmapData@InputOptions@nvtt@@QAE_NPBXHHHHH@Z
?setMipmapGeneration@InputOptions@nvtt@@QAEX_NH@Z
?setTextureLayout@InputOptions@nvtt@@QAEXW4TextureType@2@HHH@Z
??1InputOptions@nvtt@@QAE@XZ
??1CompressionOptions@nvtt@@QAE@XZ
??1OutputOptions@nvtt@@QAE@XZ
??1Compressor@nvtt@@QAE@XZ
??0Compressor@nvtt@@QAE@XZ
??0OutputOptions@nvtt@@QAE@XZ
??0CompressionOptions@nvtt@@QAE@XZ
??0InputOptions@nvtt@@QAE@XZ
wsock32
WSAStartup
gethostname
socket
accept
ioctlsocket
gethostbyname
WSACleanup
setsockopt
getsockname
recv
recvfrom
send
sendto
inet_ntoa
select
listen
connect
WSAGetLastError
bind
closesocket
ntohs
htons
ntohl
htonl
getsockopt
dbghelp
MiniDumpWriteDump
StackWalk64
SymFunctionTableAccess64
SymGetModuleBase64
SymLoadModule64
SymSetSearchPath
SymInitialize
SymSetOptions
SymGetOptions
SymGetModuleInfo64
SymGetLineFromAddr64
SymGetSymFromAddr64
winmm
timeBeginPeriod
kernel32
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LocalAlloc
GetExitCodeProcess
OpenProcess
GetModuleFileNameW
GetComputerNameW
GetTempPathW
LoadLibraryA
OpenEventA
OpenFileMappingA
GetSystemDirectoryW
GetWindowsDirectoryW
CreateSemaphoreA
CreateFileMappingA
MapViewOfFile
ReleaseSemaphore
SetLastError
GetStartupInfoW
GetEnvironmentStringsW
GetCurrentDirectoryW
FindResourceW
SizeofResource
LoadResource
LockResource
CreateEventA
UnmapViewOfFile
GetSystemTimeAsFileTime
FileTimeToSystemTime
GetComputerNameA
GetTimeZoneInformation
VirtualQuery
AddVectoredExceptionHandler
HeapSize
lstrcmpiW
GetFileInformationByHandle
GetModuleHandleA
CreateFileA
GetModuleHandleExA
GetModuleFileNameA
GetProcessTimes
HeapFree
GetProcessHeap
HeapAlloc
RemoveVectoredExceptionHandler
GetTickCount
GetPriorityClass
SetPriorityClass
VirtualAlloc
CreateMutexW
ReleaseMutex
VirtualFree
GetProcessAffinityMask
SetProcessAffinityMask
IsDebuggerPresent
GetCommandLineW
GetFullPathNameW
SetDllDirectoryW
GetProcessId
CreateProcessW
GetVersionExW
InterlockedExchange
CreateThread
SetThreadAffinityMask
GetFullPathNameA
RtlCaptureContext
RtlCaptureStackBackTrace
VerSetConditionMask
VerifyVersionInfoW
GetSystemInfo
GlobalMemoryStatusEx
QueryPerformanceFrequency
QueryPerformanceCounter
InterlockedDecrement
InterlockedExchangeAdd
DeleteCriticalSection
EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
lstrlenA
CloseHandle
SetCurrentDirectoryW
GetFileSize
CreateFileW
GetLastError
DeleteFileW
SetFileAttributesW
GetFileAttributesW
CreateDirectoryW
RemoveDirectoryW
GetFileTime
SystemTimeToFileTime
GetSystemTime
SetFilePointer
SetCriticalSectionSpinCount
InitializeCriticalSection
ReadFile
GetFileSizeEx
WriteFile
CopyFileW
MoveFileW
Sleep
FindClose
FindNextFileW
FindFirstFileW
InterlockedIncrement
InterlockedCompareExchange
TlsAlloc
TlsSetValue
TlsGetValue
TlsFree
RaiseException
GetCurrentProcess
GetProcAddress
GetModuleHandleW
GetCurrentThread
SetThreadIdealProcessor
ExitProcess
GetConsoleScreenBufferInfo
GetConsoleWindow
SetConsoleCtrlHandler
GetCurrentThreadId
FlushFileBuffers
SetStdHandle
GetCurrentProcessId
SetEvent
OpenEventW
FreeConsole
SetConsoleScreenBufferSize
GetStdHandle
AllocConsole
WriteConsoleW
SetConsoleTextAttribute
SetConsoleTitleW
WaitForSingleObject
PulseEvent
CreateEventW
ResetEvent
ResumeThread
SuspendThread
TerminateThread
SetThreadPriority
OutputDebugStringW
FormatMessageW
GlobalUnlock
GlobalLock
GlobalAlloc
LoadLibraryW
FreeLibrary
GetLocalTime
user32
RegisterClassExA
LoadCursorA
SetWindowLongA
GetDesktopWindow
MoveWindow
UnregisterClassA
DefWindowProcA
PeekMessageA
DispatchMessageA
IsDialogMessageA
GetMessageA
GetKeyState
UnhookWindowsHookEx
SetWindowsHookExW
SetCursor
MapWindowPoints
GetCapture
SetCapture
SetCursorPos
GetCursorPos
GetWindowLongA
GetWindowLongW
GetClipCursor
DestroyWindow
CallNextHookEx
GetForegroundWindow
IsIconic
ClientToScreen
LoadCursorW
RegisterClassW
LoadImageW
GetMessageW
UnregisterClassW
ValidateRect
CreateWindowExA
MessageBoxA
FindWindowExW
InvalidateRect
GetWindowThreadProcessId
SetActiveWindow
PostThreadMessageW
SetTimer
SetFocus
BeginPaint
DrawStateW
GetClientRect
EndPaint
PostMessageW
DialogBoxParamW
LoadIconW
AdjustWindowRect
KillTimer
GetCursorInfo
RegisterClassExW
CreateWindowExW
ShowWindow
ScreenToClient
SetWindowTextW
GetTopWindow
SetForegroundWindow
RegisterHotKey
UnregisterHotKey
EndDialog
GetClipboardData
GetSystemMetrics
SystemParametersInfoW
MessageBoxW
SendInput
GetDlgItem
SetDlgItemTextW
GetKeyboardLayout
MonitorFromWindow
GetMonitorInfoW
SetWindowLongW
GetWindowPlacement
SetWindowPlacement
UpdateWindow
PeekMessageW
DispatchMessageW
TranslateMessage
DefWindowProcW
GetActiveWindow
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
ShowCursor
ReleaseCapture
ClipCursor
SetWindowPos
GetWindowRect
PostQuitMessage
GetFocus
gdi32
SetBkColor
SetTextColor
DeleteDC
SetBkMode
SelectObject
DeleteObject
CreateFontIndirectW
GetStockObject
TextOutW
CreateCompatibleDC
GetTextExtentPoint32W
GetObjectW
advapi32
SetSecurityDescriptorDacl
CryptImportKey
CryptAcquireContextW
RegCloseKey
RegOpenKeyExW
InitializeSecurityDescriptor
RegQueryValueExW
CryptEncrypt
CryptDecrypt
CryptDestroyKey
CryptReleaseContext
GetUserNameW
CryptSetKeyParam
shell32
ShellExecuteW
SHGetFolderPathW
CommandLineToArgvW
ole32
CoInitialize
CoCreateInstance
StringFromGUID2
CoUninitialize
CoCreateGuid
CoSetProxyBlanket
oleaut32
SysAllocString
SysFreeString
fmodex
?setDSPBufferSize@System@FMOD@@QAG?AW4FMOD_RESULT@@IH@Z
?getOutput@System@FMOD@@QAG?AW4FMOD_RESULT@@PAW4FMOD_OUTPUTTYPE@@@Z
?getSoftwareFormat@System@FMOD@@QAG?AW4FMOD_RESULT@@PAHPAW4FMOD_SOUND_FORMAT@@00PAW4FMOD_DSP_RESAMPLER@@0@Z
?setSoftwareFormat@System@FMOD@@QAG?AW4FMOD_RESULT@@HW4FMOD_SOUND_FORMAT@@HHW4FMOD_DSP_RESAMPLER@@@Z
?getAdvancedSettings@System@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_ADVANCEDSETTINGS@@@Z
?setAdvancedSettings@System@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_ADVANCEDSETTINGS@@@Z
?getOutputHandle@System@FMOD@@QAG?AW4FMOD_RESULT@@PAPAX@Z
?setPitch@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?getBypass@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?setSoftwareChannels@System@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?getChannel@System@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAVChannel@2@@Z
?stop@Channel@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?createDSPByType@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_DSP_TYPE@@PAPAVDSP@2@@Z
?getRecordDriverInfo@System@FMOD@@QAG?AW4FMOD_RESULT@@HPADHPAUFMOD_GUID@@@Z
?getRecordNumDrivers@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
FMOD_Memory_Initialize
FMOD_Memory_GetStats
FMOD_Debug_SetLevel
FMOD_Debug_GetLevel
?setParameter@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HM@Z
?setMix@DSPConnection@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setBypass@DSP@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?getVersion@System@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z
?getNumDrivers@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?setDriver@System@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?getDriverInfo@System@FMOD@@QAG?AW4FMOD_RESULT@@HPADHPAUFMOD_GUID@@@Z
?createSound@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDIPAUFMOD_CREATESOUNDEXINFO@@PAPAVSound@2@@Z
?setActive@DSP@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?addInput@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAV12@PAPAVDSPConnection@2@@Z
?getOutput@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAV12@PAPAVDSPConnection@2@@Z
?getDSPHead@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVDSP@2@@Z
?addGroup@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAV12@@Z
?createChannelGroup@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAPAVChannelGroup@2@@Z
?getParentGroup@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAPAV12@@Z
?release@Sound@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?getUserData@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAPAX@Z
?getSubSound@Sound@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAV12@@Z
?getDSPBufferSize@System@FMOD@@QAG?AW4FMOD_RESULT@@PAIPAH@Z
?addDSP@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAVDSP@2@PAPAVDSPConnection@2@@Z
?setOutput@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_OUTPUTTYPE@@@Z
?setHardwareChannels@System@FMOD@@QAG?AW4FMOD_RESULT@@HHHH@Z
?getDriverCaps@System@FMOD@@QAG?AW4FMOD_RESULT@@HPAIPAH1PAW4FMOD_SPEAKERMODE@@@Z
?setSpeakerMode@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_SPEAKERMODE@@@Z
?setCallback@System@FMOD@@QAG?AW4FMOD_RESULT@@P6G?AW43@PAUFMOD_SYSTEM@@W4FMOD_SYSTEM_CALLBACKTYPE@@PAX2@Z@Z
fmod_event
?setVolume@Event@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?getChannelGroup@Event@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVChannelGroup@2@@Z
?setPropertyByIndex@Event@FMOD@@QAG?AW4FMOD_RESULT@@HPAX_N@Z
?setMute@Event@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?getNumProjects@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getProjectByIndex@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAVEventProject@2@@Z
?start@Event@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?getState@Event@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z
?getRange@EventParameter@FMOD@@QAG?AW4FMOD_RESULT@@PAM0@Z
?keyOff@EventParameter@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?stop@Event@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?getValue@EventParameter@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?getParameter@Event@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAPAVEventParameter@2@@Z
?setPaused@Event@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?update@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?getCategoryByIndex@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAVEventCategory@2@@Z
?getCategory@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAPAVEventCategory@2@@Z
?setValue@EventParameter@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setSeekSpeed@EventParameter@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?set3DListenerAttributes@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@HPBUFMOD_VECTOR@@000@Z
?getSystemObject@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVSystem@2@@Z
_FMOD_EventSystem_Create@4
?setUserData@Event@FMOD@@QAG?AW4FMOD_RESULT@@PAX@Z
?getVolume@Event@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?getUserData@Event@FMOD@@QAG?AW4FMOD_RESULT@@PAPAX@Z
?getPitch@Event@FMOD@@QAG?AW4FMOD_RESULT@@PAMW4FMOD_EVENT_PITCHUNITS@@@Z
?setCallback@Event@FMOD@@QAG?AW4FMOD_RESULT@@P6G?AW43@PAUFMOD_EVENT@@W4FMOD_EVENT_CALLBACKTYPE@@PAX22@Z2@Z
?set3DAttributes@Event@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_VECTOR@@00@Z
?getPropertyByIndex@Event@FMOD@@QAG?AW4FMOD_RESULT@@HPAX_N@Z
?get3DOcclusion@Event@FMOD@@QAG?AW4FMOD_RESULT@@PAM0@Z
?set3DOcclusion@Event@FMOD@@QAG?AW4FMOD_RESULT@@MM@Z
?release@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?get3DAttributes@Event@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_VECTOR@@00@Z
?getProject@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAPAVEventProject@2@@Z
?init@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@HIPAXI@Z
?getReverbPreset@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAUFMOD_REVERB_PROPERTIES@@PAH@Z
?getReverbPresetByIndex@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@HPAUFMOD_REVERB_PROPERTIES@@PAPAD@Z
?unloadFSB@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBDH@Z
?setMediaPath@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBD@Z
?load@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAUFMOD_EVENT_LOADINFO@@PAPAVEventProject@2@@Z
?preloadFSB@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBDHPAVSound@2@@Z
?getSeekSpeed@EventParameter@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
msvcp90
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
msvcr90
wcscat_s
_CIacos
_CIasin
_copysign
strcat_s
wcscpy_s
_stricmp
wcstoul
wprintf
abort
_set_abort_behavior
_vsnwprintf_s
_vsnprintf_s
srand
iswpunct
_strdup
_fpclass
_isnan
_finite
wcsncmp
ceil
tolower
_wmkdir
strchr
_vsnprintf
atof
strncpy
vsprintf_s
memcpy_s
printf
_wtoi64
_snprintf
vswprintf_s
vsprintf
_strnicmp
sprintf
atoi
memmove_s
_set_invalid_parameter_handler
fgets
__iob_func
fflush
_set_purecall_handler
strstr
fprintf
fopen
feof
sprintf_s
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
strrchr
_CIsqrt
_aligned_free
__libm_sse2_sin
__libm_sse2_cos
_aligned_malloc
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
strtod
_iob
longjmp
_setjmp3
memcpy
memmove
memset
strcpy_s
strncmp
_purecall
ftell
fseek
fclose
fread
fwrite
malloc
free
__CxxFrameHandler3
frexp
floor
_CIfmod
_CIpow
rand
wcsstr
wcschr
wcsrchr
_wcsicmp
_wtoi
_wtof
wcstod
_wcsnicmp
ldexp
_CxxThrowException
_wutime64
_gmtime64_s
_time64
_wstat64i32
exit
swscanf_s
_wstrdate_s
_wstrtime_s
wcsncpy_s
strncpy_s
qsort
_strupr
_controlfp_s
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_except_handler4_common
_decode_pointer
binkw32
_BinkPause@8
_BinkWait@4
_BinkShouldSkip@4
_BinkNextFrame@4
_BinkGetKeyFrame@12
_BinkGetRealtime@12
_BinkClose@4
_BinkGetRects@8
_BinkDoFrame@4
_BinkSetIOSize@4
_BinkSetSoundTrack@8
_BinkSetVolume@12
_BinkSetPan@12
_BinkGoto@12
_BinkRegisterFrameBuffers@8
_BinkOpen@8
_BinkSetSoundSystem@8
_BinkGetFrameBuffersInfo@8
_BinkOpenDirectSound@4
physxextensions
NxCreateExtension
apex_release
NxCreateApexSDK
powrprof
CallNtPowerInformation
imm32
ImmReleaseContext
ImmAssociateContext
ImmCreateContext
ImmGetContext
ImmDestroyContext
ImmGetCompositionStringW
faultrep
ReportFault
Exports
Exports
?TootleCleanup@@YAXXZ
?TootleClusterMesh@@YA?AW4TootleResult@@PBXPBIIIIIPAI22@Z
?TootleFastOptimize@@YA?AW4TootleResult@@PBXPBIIIIIW4TootleFaceWinding@@PAI3M@Z
?TootleFastOptimizeVCacheAndClusterMesh@@YA?AW4TootleResult@@PBIIIIPAI11M@Z
?TootleInit@@YA?AW4TootleResult@@XZ
?TootleMeasureCacheEfficiency@@YA?AW4TootleResult@@PBIIIPAM@Z
?TootleMeasureOverdraw@@YA?AW4TootleResult@@PBXPBIIIIPBMIW4TootleFaceWinding@@PAM4W4TootleOverdrawOptimizer@@@Z
?TootleOptimize@@YA?AW4TootleResult@@PBXPBIIIIIPBMIW4TootleFaceWinding@@PAI4W4TootleVCacheOptimizer@@W4TootleOverdrawOptimizer@@@Z
?TootleOptimizeOverdraw@@YA?AW4TootleResult@@PBXPBIIIIPBMIW4TootleFaceWinding@@1PAI4W4TootleOverdrawOptimizer@@@Z
?TootleOptimizeVCache@@YA?AW4TootleResult@@PBIIIIPAI1W4TootleVCacheOptimizer@@@Z
?TootleOptimizeVertexMemory@@YA?AW4TootleResult@@PBXPBIIIIPAXPAI3@Z
?TootleVCacheClusters@@YA?AW4TootleResult@@PBIIII0PAI1W4TootleVCacheOptimizer@@@Z
GDebugger
GetOutermost
GetStackOwnerClass
PIBGetInterface
nFringePFO
Sections
.text Size: 13.0MB - Virtual size: 13.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.version Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ