Strafe[.]one[.]rar

Sharing

Copy URL Twitter E-mail

General

Target
Strafe.one.rar
Size 16.3MB
Sample260819-hbvxdayeld
SHA256 7bd90f86f45831da59805b8bcfa14986d6a05986919090b82543f681ebfddd7c
MD5 686bc71087972879a154eb15e917a4d5
SHA1 bf25a4232985b627925c55a69c829432335cc9d5
SHA512 3a5c29041887f43e2b17e2ebba3db85001cedd52ffa36b5792413030d6409d6db71b79eda1e7387b8417ac7ff38d83615639c98419d1c1073856c3d69fed9e37
SSDEEP 393216:OgWHYzoqlgNYczJ6dF0h0uzC10v4A9mfR28NX+60jFpl:Ljlgbjt3SRdOF3
TLSH
T1BC07339BFDBFF862DB6A027210F794576811DEE6CA0CF60821DA061656B07F5231ACC7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Strafe.one.dll
unpack001/eurotrucks2.exe

File Explorer

Strafe.one.rar

.rar 16.3MB
Strafe.one.dll

.dll 12.5MB
eurotrucks2.exe

.exe 49.5MB

Strafe.one.rar

SHA256 7bd90f86f45831da59805b8bcfa14986d6a05986919090b82543f681ebfddd7c
MD5 686bc71087972879a154eb15e917a4d5
SHA1 bf25a4232985b627925c55a69c829432335cc9d5
SHA512 3a5c29041887f43e2b17e2ebba3db85001cedd52ffa36b5792413030d6409d6db71b79eda1e7387b8417ac7ff38d83615639c98419d1c1073856c3d69fed9e37
SSDEEP 393216:OgWHYzoqlgNYczJ6dF0h0uzC10v4A9mfR28NX+60jFpl:Ljlgbjt3SRdOF3
TLSH
T1BC07339BFDBFF862DB6A027210F794576811DEE6CA0CF60821DA061656B07F5231ACC7
MD5 SHA1 SHA512 SSDEEP TLSH

Strafe.one.dll

IMPHASH 1c682afccc2cb804576d75046645f137
SHA256 38273b88e445cc968d48ff0347665cc8b3fd2b347621dd1602bc1d3adccb7197
MD5 93be4927cc76e91ee668de4f1df5b97d
SHA1 a51a0a7e7fcbf064f64c2d465214c9020bfca415
SHA512 733afc823af35321f389721350a9b4e6117b43303b6b59927b6a3d61d38e399f9ea7433e6df1a98ae86fad5d8dcf109cac4e63a9b4824eb5910c16825a03f146
SSDEEP 98304:J61AganML4zp8bdJGv3GPN+ZP+1Yq9DMbJcioxcKK2SewFiYCJc7vfmIelTwEkZ:7nGIp8bdJk3GPNGKAeJwr
TLSH
T1ECD69E29A27800D8D47B91BCC982D657E771B8005BB093CF266456BADF37AE41EBF740
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4101

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Clancy\Desktop\fucking_lib\Traceless-crack\x64\Release\Traceless-crack.pdb

kernel32

VirtualQuery GetModuleHandleA HeapAlloc HeapFree GetProcessHeap ReleaseSRWLockExclusive AcquireSRWLockExclusive TlsGetValue TlsSetValue TlsAlloc TlsFree GetLastError SetLastError FlsGetValue GetCurrentProcess FlushInstructionCache GetProcAddress AllocConsole SetConsoleTitleA VirtualAlloc VirtualFree LoadLibraryA GetSystemInfo CloseHandle HeapCreate HeapDestroy HeapReAlloc Sleep GetCurrentProcessId GetCurrentThreadId OpenThread SuspendThread ResumeThread GetThreadContext SetThreadContext VirtualProtect GetModuleHandleW CreateToolhelp32Snapshot Thread32First Thread32Next GetSystemTimeAsFileTime QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent InitializeSListHead TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

__std_type_info_destroy_list __C_specific_handler memset memcmp __std_exception_destroy _CxxThrowException memcpy __current_exception __current_exception_context __std_exception_copy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __stdio_common_vfprintf freopen

api-ms-win-crt-runtime-l1-1-0

_initterm _configure_narrow_argv _crt_at_quick_exit _crt_atexit _execute_onexit_table _initialize_narrow_environment _seh_filter_dll _register_onexit_function _initialize_onexit_table _initterm_e terminate _invalid_parameter_noinfo_noreturn _cexit

api-ms-win-crt-heap-l1-1-0

malloc free _callnewh

Name

.text

Size

88KB

Virtual Size

87KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

33KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

12.3MB

Virtual Size

12.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

1024B

Virtual Size

771B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

373B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

806B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

eurotrucks2.exe

IMPHASH 7febb1e98bbf33c72045a55367785cdc
SHA256 1d61ba2337e4d8ced85a06e10566a4df064a2a0919ccd5e51561972d2a04255e
MD5 5c8721f71a48b79daea8e487ba848ec6
SHA1 8246279e71c285db5ebb2ce8c0fcbd2b8b863463
SHA512 29ada9b8616fba45c5b6253220017b89c26985c9f6cfb2c89ab6b9a97b9b4c245e2f04892210bd3975bc7c828efe681c93af3c4866726dbfa2282afd3d4892cc
SSDEEP 393216:oINL3ujK6c73pSjG39oz1bIhRxq8R/ugjXSrv14Suvhy/L4Sjdum:LQG6c74GNmuZYfuvhrm
TLSH
T1EEB79E4A31A911CAE036D078DA1AA807FBB274280B3447EB46B057656F7BFF15DBF610
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

29516628

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d:\buildbot\slaves\win_slave\final_build_ets2_160_windows_bin_steam_x64\build\prism\obj\x64\eurotrucks\Steam\eurotrucks\exe_ets\eurotrucks.pdb

kernel32

CopyFileW RemoveDirectoryW GetFileAttributesW CreateDirectoryW GetFileAttributesExW GetFileInformationByHandle DeleteFileW PostQueuedCompletionStatus GetQueuedCompletionStatus CreateIoCompletionPort GetFileType ResetEvent FindClose GetLogicalProcessorInformation QueryPerformanceCounter QueryPerformanceFrequency OutputDebugStringA GetExitCodeProcess CreateProcessW DuplicateHandle CreatePipe ReadFile PeekNamedPipe GetCommandLineW LocalFree WriteFile WideCharToMultiByte VirtualQuery FormatMessageW OutputDebugStringW IsBadReadPtr IsBadCodePtr GlobalMemoryStatusEx GetCurrentProcessId GetProcAddress TerminateProcess SetFilePointer CreateFileW LoadLibraryW FreeLibrary SetUnhandledExceptionFilter Sleep VirtualFree VirtualAlloc GetSystemInfo GetCurrentThread SetThreadAffinityMask GetProcessAffinityMask GetCurrentProcess SetThreadIdealProcessor SetThreadPriority GetCurrentThreadId ResumeThread SwitchToThread WakeAllConditionVariable WakeConditionVariable InitializeConditionVariable SleepConditionVariableSRW ReleaseSemaphore CreateSemaphoreW SetEvent WaitForSingleObject CreateEventW CloseHandle LeaveCriticalSection SearchPathW TerminateThread WaitForMultipleObjects ExpandEnvironmentStringsW WaitForSingleObjectEx InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetSystemTimeAsFileTime TlsAlloc TlsGetValue TlsSetValue TlsFree GetTickCount EncodePointer DecodePointer CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo RtlUnwindEx InterlockedPushEntrySList InterlockedFlushSList RtlPcToFileHeader LoadLibraryExW FindFirstFileW CreateThread GetThreadPriority CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber RegisterWaitForSingleObject UnregisterWait FreeLibraryAndExitThread GetModuleHandleA GetVersionExW VirtualProtect InterlockedPopEntrySList QueryDepthSList UnregisterWaitEx CreateTimerQueue ExitThread GetStdHandle HeapFree HeapAlloc HeapReAlloc HeapSize HeapQueryInformation FlsAlloc FlsGetValue FlsSetValue FlsFree GetDateFormatW GetTimeFormatW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetConsoleMode ReadConsoleW FlushFileBuffers GetConsoleOutputCP GetTimeZoneInformation GetFileSizeEx FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle WriteConsoleW GetNativeSystemInfo SetThreadExecutionState GlobalAlloc GlobalLock GlobalFree GlobalUnlock LocalAlloc CancelIoEx ReadDirectoryChangesW AddAtomA FindAtomA DeleteAtom CreateMutexW FindResourceW LoadResource LockResource FreeResource SizeofResource GetUserDefaultLangID GetSystemDefaultLangID GetSystemDirectoryA LoadLibraryA GetSystemDirectoryW GetFullPathNameW GetModuleFileNameA GetFileTime GetTempFileNameW SetErrorMode GlobalSize WriteConsoleA FillConsoleOutputCharacterW SetConsoleCursorPosition ReadConsoleOutputCharacterA GetConsoleScreenBufferInfo AttachConsole FreeConsole MulDiv GetEnvironmentVariableW RtlUnwind MoveFileExW FindNextFileW SetFilePointerEx SetEndOfFile CreateFileA DeviceIoControl SetLastError GetThreadTimes SystemTimeToTzSpecificLocalTime SignalObjectAndWait EnterCriticalSection TryEnterCriticalSection InitializeCriticalSectionAndSpinCount InitializeCriticalSection DeleteCriticalSection ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive InitializeSRWLock GetModuleHandleW GetModuleHandleExW VerifyVersionInfoW VerSetConditionMask SetCurrentDirectoryW GetLongPathNameW GetTempPathW GetCurrentDirectoryW GetDriveTypeW GetModuleFileNameW ExitProcess RaiseException GetLastError MultiByteToWideChar FileTimeToSystemTime

shell32

ShellExecuteW DragAcceptFiles DragQueryFileW DragQueryPoint DragFinish ExtractIconExW ExtractIconW ShellExecuteExW CommandLineToArgvW SHGetFolderPathW SHGetMalloc SHGetPathFromIDListW SHBrowseForFolderW ord6 SHGetFileInfoW

user32

SystemParametersInfoW UnhookWindowsHookEx SetWindowsHookExW GetDC EnumDisplayDevicesA GetKeyboardLayoutNameW GetKeyboardLayout ReleaseCapture SetCursorPos ShowCursor SetCapture ShowWindow UpdateWindow MoveWindow GetPropW GetWindowPlacement GetCursorPos GetCursorInfo GetWindowTextW GetSysColor DialogBoxParamW EndDialog SetDlgItemInt EnableWindow GetSystemMetrics RedrawWindow GetWindowRect SetWindowPos GetWindowThreadProcessId AdjustWindowRectEx IsDialogMessageW PeekMessageW GetClipboardData IsClipboardFormatAvailable CloseClipboard SetClipboardData EmptyClipboard OpenClipboard MessageBoxW GetClipboardSequenceNumber EnumDisplaySettingsW LoadIconW EndPaint SetDlgItemTextW SetCursor SendDlgItemMessageW SetFocus GetDlgItemInt GetDlgItemTextW ReleaseDC SetMenuInfo TrackPopupMenu MapWindowPoints GetMessagePos MessageBoxA wsprintfW wvsprintfW RemoveMenu GetSubMenu InsertMenuItemW AppendMenuW DdeGetLastError DdeFreeStringHandle DdeQueryStringW DdeCreateStringHandleW DdeCreateDataHandle DdePostAdvise DdeFreeDataHandle DdeGetData DdeClientTransaction DdeDisconnect DdeConnect DdeNameService DdeUninitialize DdeInitializeW KillTimer SetTimer ClipCursor ClientToScreen GetClientRect SetWindowTextW GetDesktopWindow GetAncestor GetAsyncKeyState MapVirtualKeyW ScreenToClient GetKeyNameTextW DefWindowProcW GetWindowLongPtrW SetWindowLongPtrW UnregisterDeviceNotification DispatchMessageW TranslateMessage GetMessageW DestroyWindow RegisterDeviceNotificationW UnregisterClassW CreateWindowExW RegisterClassW PostMessageW CreatePopupMenu MsgWaitForMultipleObjects MonitorFromWindow MonitorFromPoint GetClassInfoW ValidateRgn IsRectEmpty UnionRect GetMenu GetDlgItem CallNextHookEx SetLayeredWindowAttributes GetKeyState SetForegroundWindow GetForegroundWindow CreateDialogParamW GetMenuItemInfoW SetMenuItemInfoW UnregisterHotKey RegisterHotKey MsgWaitForMultipleObjectsEx SetWindowPlacement SetActiveWindow BeginPaint SendMessageW EnumDisplayMonitors GetMonitorInfoW EnumDisplayDevicesW ChangeDisplaySettingsExW LoadBitmapW GetIconInfo GetWindow SetWindowLongW GetFocus AnimateWindow GetCapture PtInRect GetScrollInfo SetScrollInfo EnableScrollBar ScrollWindow GetWindowLongW IsWindow WindowFromPoint GetParent SetParent DeferWindowPos PostQuitMessage CallWindowProcW IsWindowEnabled IsWindowVisible InflateRect InvalidateRect GetUpdateRgn FillRect BeginDeferWindowPos EndDeferWindowPos GetMessageTime GetMenuItemCount VkKeyScanW GetActiveWindow ChildWindowFromPointEx DrawIconEx DestroyCursor LoadCursorW CreateIconIndirect DrawTextW DrawFocusRect SetRectEmpty OffsetRect DrawStateW CopyRect GetProcessDefaultLayout ValidateRect PostThreadMessageW GetWindowTextLengthW keybd_event HideCaret IsMenu CreateDialogIndirectParamW GetDialogBaseUnits BringWindowToTop IsIconic IsZoomed GetSystemMenu EnableMenuItem DrawMenuBar FlashWindowEx SetWindowRgn GetComboBoxInfo ChildWindowFromPoint FindWindowExW SetMenu DestroyIcon MessageBeep GetClassNameW SetRect GetDoubleClickTime GetCaretBlinkTime GetClipboardFormatNameW RegisterClipboardFormatW GetMenuState CheckMenuRadioItem CheckMenuItem DrawEdge GetSysColorBrush DrawFrameControl GetMenuItemID DestroyMenu InsertMenuW ModifyMenuW CreateMenu DestroyAcceleratorTable CreateAcceleratorTableW TranslateAcceleratorW GetWindowDC LoadImageW

advapi32

RegEnumValueW RegQueryValueExW RegGetValueW OpenProcessToken GetTokenInformation IsValidSid GetSidIdentifierAuthority GetSidSubAuthorityCount GetSidSubAuthority CryptAcquireContextW CryptReleaseContext CryptGenRandom RegCloseKey RegOpenKeyExW

ole32

DoDragDrop ReleaseStgMedium OleIsCurrentClipboard OleSetClipboard OleFlushClipboard OleGetClipboard CoLockObjectExternal RevokeDragDrop RegisterDragDrop CoTaskMemAlloc CoCreateInstance CoSetProxyBlanket OleInitialize OleUninitialize CoInitializeEx CoTaskMemFree CoUninitialize

steam_api64

SteamInternal_FindOrCreateUserInterface SteamAPI_GetHSteamUser SteamAPI_UnregisterCallback SteamAPI_RegisterCallback SteamInternal_CreateInterface SteamAPI_Shutdown SteamAPI_RunCallbacks SteamAPI_UnregisterCallResult SteamAPI_RegisterCallResult SteamAPI_InitSafe SteamInternal_FindOrCreateGameServerInterface SteamAPI_IsSteamRunning SteamInternal_ContextInit

ws2_32

WSAGetLastError WSASetLastError WSAStartup WSACleanup ntohl __WSAFDIsSet WSACloseEvent WSACreateEvent WSAEventSelect WSAWaitForMultipleEvents WSAEnumNetworkEvents WSAResetEvent WSASetEvent recv send inet_addr gethostbyname htons getservbyname htonl inet_ntoa ntohs getservbyport gethostbyaddr closesocket socket ioctlsocket connect select getsockopt shutdown

fmod

?getOpenState@Sound@FMOD@@QEAA?AW4FMOD_RESULT@@PEAW4FMOD_OPENSTATE@@PEAIPEA_N2@Z ?isPlaying@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@PEA_N@Z ?setPaused@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@_N@Z ?setLoopCount@Channel@FMOD@@QEAA?AW4FMOD_RESULT@@H@Z ?setPriority@Channel@FMOD@@QEAA?AW4FMOD_RESULT@@H@Z ?playSound@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEAVSound@2@PEAVChannelGroup@2@_NPEAPEAVChannel@2@@Z ?release@Sound@FMOD@@QEAA?AW4FMOD_RESULT@@XZ ?stop@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@XZ ?setUserData@Sound@FMOD@@QEAA?AW4FMOD_RESULT@@PEAX@Z ?createSound@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEBDIPEAUFMOD_CREATESOUNDEXINFO@@PEAPEAVSound@2@@Z ?createStream@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEBDIPEAUFMOD_CREATESOUNDEXINFO@@PEAPEAVSound@2@@Z FMOD_Sound_GetUserData ?setParameterInt@DSP@FMOD@@QEAA?AW4FMOD_RESULT@@HH@Z ?setParameterFloat@DSP@FMOD@@QEAA?AW4FMOD_RESULT@@HM@Z ?setBypass@DSP@FMOD@@QEAA?AW4FMOD_RESULT@@_N@Z ?getBypass@DSP@FMOD@@QEAA?AW4FMOD_RESULT@@PEA_N@Z ?setVolume@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@M@Z ?getType@DSP@FMOD@@QEAA?AW4FMOD_RESULT@@PEAW4FMOD_DSP_TYPE@@@Z ?getDSP@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@HPEAPEAVDSP@2@@Z ?getNumDSPs@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@PEAH@Z ?setDriver@System@FMOD@@QEAA?AW4FMOD_RESULT@@H@Z ?getDriverInfo@System@FMOD@@QEAA?AW4FMOD_RESULT@@HPEADHPEAUFMOD_GUID@@PEAHPEAW4FMOD_SPEAKERMODE@@2@Z ?getDriver@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEAH@Z ?getNumDrivers@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEAH@Z ?setAdvancedSettings@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEAUFMOD_ADVANCEDSETTINGS@@@Z ?setSoftwareChannels@System@FMOD@@QEAA?AW4FMOD_RESULT@@H@Z FMOD_Memory_Initialize ?setPosition@Channel@FMOD@@QEAA?AW4FMOD_RESULT@@II@Z ?getLength@Sound@FMOD@@QEAA?AW4FMOD_RESULT@@PEAII@Z ?set3DAttributes@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@PEBUFMOD_VECTOR@@0@Z ?setPitch@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@M@Z

fmodstudio

?create@System@Studio@FMOD@@SA?AW4FMOD_RESULT@@PEAPEAV123@I@Z ?getCoreSystem@System@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAPEAV13@@Z ?initialize@System@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@HIIPEAX@Z ?flushCommands@System@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@XZ ?update@System@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@XZ ?release@System@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@XZ FMOD_Studio_ParseID ?getBusCount@Bank@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAH@Z ?getBusList@Bank@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAPEAVBus@23@HPEAH@Z ?getID@Bus@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAUFMOD_GUID@@@Z ?lockChannelGroup@Bus@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@XZ ?unlockChannelGroup@Bus@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@XZ ?getChannelGroup@Bus@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAPEAVChannelGroup@3@@Z ?getVolume@Bus@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAM0@Z ?setVolume@Bus@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@M@Z ?setMute@Bus@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@_N@Z ?getMute@Bus@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEA_N@Z ?setListenerAttributes@System@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@HPEBUFMOD_3D_ATTRIBUTES@@PEBUFMOD_VECTOR@@@Z ?loadBankCustom@System@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@PEBUFMOD_STUDIO_BANK_INFO@@IPEAPEAVBank@23@@Z ?release@EventInstance@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@XZ ?setVolume@EventInstance@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@M@Z ?getDescription@EventInstance@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAPEAVEventDescription@23@@Z ?getParameterDescriptionCount@EventDescription@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAH@Z ?getParameterDescriptionByIndex@EventDescription@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@HPEAUFMOD_STUDIO_PARAMETER_DESCRIPTION@@@Z ?start@EventInstance@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@XZ ?setPaused@EventInstance@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@_N@Z ?setParameterByID@EventInstance@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@UFMOD_STUDIO_PARAMETER_ID@@M_N@Z ?stop@EventInstance@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@W4FMOD_STUDIO_STOP_MODE@@@Z ?getPlaybackState@EventInstance@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAW4FMOD_STUDIO_PLAYBACK_STATE@@@Z ?setPitch@EventInstance@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@M@Z ?getParameterDescriptionCount@System@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAH@Z ?getParameterDescriptionList@System@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAUFMOD_STUDIO_PARAMETER_DESCRIPTION@@HPEAH@Z ?getParameterByID@System@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@UFMOD_STUDIO_PARAMETER_ID@@PEAM1@Z ?setParameterByID@System@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@UFMOD_STUDIO_PARAMETER_ID@@M_N@Z ?unload@Bank@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@XZ ?getEventByID@System@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEBUFMOD_GUID@@PEAPEAVEventDescription@23@@Z ?hasSustainPoint@EventDescription@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEA_N@Z ?setProperty@EventInstance@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@W4FMOD_STUDIO_EVENT_PROPERTY@@M@Z ?createInstance@EventDescription@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAPEAVEventInstance@23@@Z ?getMinMaxDistance@EventDescription@Studio@FMOD@@QEBA?AW4FMOD_RESULT@@PEAM0@Z ?set3DAttributes@EventInstance@Studio@FMOD@@QEAA?AW4FMOD_RESULT@@PEBUFMOD_3D_ATTRIBUTES@@@Z

winmm

timeBeginPeriod timeGetDevCaps timeEndPeriod

gdi32

GetStockObject Ellipse PolyBezier GetObjectType CreateCompatibleDC MaskBlt BitBlt ExtTextOutW GetObjectW CreateFontIndirectW SetROP2 SetMapMode SetViewportExtEx SetWindowExtEx Polyline SetWindowOrgEx SetGraphicsMode SetWorldTransform GetWorldTransform ModifyWorldTransform StretchBlt StretchDIBits CreateCompatibleBitmap GetOutlineTextMetricsW CreateBitmap CreateBitmapIndirect CreateSolidBrush CreatePatternBrush CreateHatchBrush GetRegionData ExtCreateRegion OffsetRgn GetTextExtentPoint32W CreateICW MoveToEx LineTo GetBkColor CreatePen ExtCreatePen CombineRgn GetRgnBox EqualRgn PtInRegion RectInRegion CreatePalette GetPaletteEntries PolyPolygon Polygon SetPolyFillMode SetPixel Arc Pie GetWindowExtEx GetViewportExtEx GetGraphicsMode GetPixel ExtFloodFill SelectClipRgn ExtSelectClipRgn GetClipBox DeleteDC SetStretchBltMode SetLayout GetLayout SetBkMode SetBkColor SetTextColor GetTextMetricsW SelectObject SetBrushOrgEx CreateRectRgn RealizePalette SelectPalette ExcludeClipRect GdiFlush DeleteObject Rectangle GetDeviceCaps ChoosePixelFormat SwapBuffers SetPixelFormat DescribePixelFormat SetViewportOrgEx RoundRect PatBlt DeleteEnhMetaFile GetEnhMetaFileW EnumFontFamiliesExW CreateDCW CreateRectRgnIndirect GetTextExtentExPointW GetCharABCWidthsW CreateDIBitmap GetDIBColorTable GetDIBits CreateDIBSection GetNearestPaletteIndex

comdlg32

ChooseFontW CommDlgExtendedError GetSaveFileNameW ChooseColorW GetOpenFileNameW

oleaut32

VariantInit VarBstrFromDate VariantClear SysAllocString SysFreeString GetErrorInfo

comctl32

ImageList_SetOverlayImage ImageList_LoadImageW ImageList_GetImageCount ImageList_SetDragCursorImage ImageList_GetIconSize ImageList_Create ImageList_Destroy ImageList_Add ImageList_ReplaceIcon ImageList_Replace ImageList_Remove ImageList_SetBkColor ImageList_GetImageInfo ord8 ImageList_DragMove ImageList_EndDrag ImageList_DragLeave ImageList_DragEnter ImageList_BeginDrag ord17 ord16 ImageList_Copy ImageList_Draw

imm32

ImmAssociateContext ImmReleaseContext ImmSetOpenStatus ImmGetCompositionStringW ImmGetOpenStatus ImmGetCandidateListW ImmNotifyIME ImmSetCandidateWindow ImmSetCompositionWindow ImmGetContext

rpcrt4

RpcStringFreeW UuidToStringW

uxtheme

CloseThemeData OpenThemeData GetThemeBackgroundContentRect IsThemeBackgroundPartiallyTransparent DrawThemeParentBackground GetThemeColor GetThemeMargins SetWindowTheme GetThemePartSize GetThemeInt GetThemeSysFont GetThemeSysColor IsAppThemed GetCurrentThemeName GetThemeBackgroundExtent IsThemePartDefined GetThemeFont IsThemeActive DrawThemeBackground

shlwapi

AssocQueryStringW SHAutoComplete

msimg32

AlphaBlend GradientFill

Name

.text

Size

28.8MB

Virtual Size

28.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

8.8MB

Virtual Size

8.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

9.3MB

Virtual Size

16.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

136KB

Virtual Size

140KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gxfg

Size

15KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gehcont

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

460KB

Virtual Size

464KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

496KB

Virtual Size

496KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.bind

Size

229KB

Virtual Size

232KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

generic

count=2, id=257, version=30148,

count=34, id=259, version=29395,

count=1, id=199, version=41118,

count=20, id=260, productName=VS2019 v16.2.3 build 27905, version=27905,

count=34, id=259, productName=VS2019 v16.2.3 build 27905, version=27905,

count=238, id=261, version=29395,

count=159, id=261, productName=VS2019 v16.2.3 build 27905, version=27905,

count=56, id=260, version=29395,

count=1, id=262, version=29395,

count=7, id=261, version=30159,

count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=9, id=260, version=28106,

count=1, id=259, version=28106,

count=3, id=261, version=28106,

count=4, id=257, version=30159,

count=35, id=257, version=29395,

count=850, id=1, productName=Unmarked objects,

count=3749, id=265, version=28106,

count=1, id=256, version=28106,

count=1, id=255, version=28106,

count=1, id=151,

count=1, id=258, version=28106,