Starfield[.]exe

Resubmissions

09/09/2023, 14:54

230909-r97s9sca73 1

02/09/2023, 04:07

230902-ep3mlabc43 1

Sharing

Copy URL Twitter E-mail

General

Target

Starfield.exe
Size

88.1MB
MD5

173549837281599bf8e44de81d884675
SHA1

d7603bef05efd1e4d0ca4269fda27f95171206b5
SHA256

d45ba98ad91e90cf308bec4585da5399ea1b2c88804379da2fc17a9f71f01ebd
SHA512

eecaa1f35e132eb47e3ec9ce903cdbb68f7be5b59fbd651f27f79eb747ee03c0ea49da2371e62db1d8f4152a13a26bf2efb1395d9eea156d45bd1618842954bc
SSDEEP

393216:CDFe7Mh2+WD2Qlh2lHIqaWekHyvtUpnDWcMYtjn9A5PfFgz8cuIZXuvV1xj6rWd/:EFev2Iq4vYMB5PNz/lXMyc9Amq

Score

1^/10

Malware Config

Signatures

Files

Starfield.exe
.exe windows x64

24d95bf9de827d350f4d3e51395ffbc9

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:fa:3a:9f:26:02:58:10:e4:15:fa:da:68:0d:e9:70
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

24/01/2022, 00:00

Not After

01/03/2025, 23:59

Subject

CN=Bethesda Softworks LLC,O=Bethesda Softworks LLC,L=Rockville,ST=Maryland,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a2:66:00:bd:ca:ef:8d:d1:70:1c:00:6a:38:b4:cb:d7:86:7e:8e
Signer

Actual PE Digest

0f:a2:66:00:bd:ca:ef:8d:d1:70:1c:00:6a:38:b4:cb:d7:86:7e:8e

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetFileAttributesA
SetFileAttributesA
GetCurrentThread
SetThreadPriorityBoost
CompareFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFree
OutputDebugStringA
DeleteFileA
WideCharToMultiByte
MultiByteToWideChar
GetSystemTimeAsFileTime
SystemTimeToFileTime
CreateProcessA
GetModuleFileNameA
GetSystemTime
FindFirstFileA
FindNextFileA
FindClose
WaitForSingleObject
SetPriorityClass
GetCurrentProcess
SetThreadPriority
CreateSemaphoreExW
QueryPerformanceFrequency
GlobalLock
GlobalUnlock
GlobalAlloc
DebugBreak
CreateDirectoryA
GetLocalTime
InterlockedPushEntrySList
LoadLibraryExA
TlsGetValue
ResetEvent
SetEvent
TlsFree
TlsAlloc
GetPhysicallyInstalledSystemMemory
GetLogicalProcessorInformation
FormatMessageA
ReleaseMutex
CreateMutexA
SuspendThread
CreateSemaphoreA
GetCurrentProcessId
SetThreadDescription
GetLocaleInfoA
CreateFileA
MoveFileA
SetUnhandledExceptionFilter
InitializeCriticalSectionEx
GetCommandLineA
GetComputerNameA
CreateEventA
SetEndOfFile
GetThreadId
GlobalMemoryStatusEx
OpenProcess
K32GetProcessMemoryInfo
RtlCaptureContext
GetTickCount64
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
DeleteFileW
InitOnceExecuteOnce
SetFilePointer
SetFilePointerEx
CloseHandle
SetFileInformationByHandle
GetLastError
CreateFile2
ReadFile
TlsSetValue
WriteFile
OutputDebugStringW
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
RtlVirtualUnwind
InitializeSListHead
PeekNamedPipe
GetFileType
GetStdHandle
ExpandEnvironmentStringsA
VerifyVersionInfoA
lstrlenW
GetSystemDirectoryA
GetVolumeInformationA
GetUserGeoID
GetGeoInfoW
FormatMessageW
SetEnvironmentVariableW
AcquireSRWLockShared
ReleaseSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
GetCurrentDirectoryW
ExitThread
MapViewOfFileEx
SetFileTime
WriteFileEx
ReadFileEx
GetFileTime
GetFileSizeEx
GetOverlappedResultEx
GetThreadPriority
GetPrivateProfileIntA
WritePrivateProfileStringA
GetFileAttributesExA
GetPrivateProfileStringA
WaitForMultipleObjects
WaitNamedPipeW
Sleep
TransactNamedPipe
SetNamedPipeHandleState
Thread32Next
Thread32First
CreateToolhelp32Snapshot
GetModuleHandleA
RtlLookupFunctionEntry
GetModuleHandleExA
MapViewOfFile
CreateFileMappingA
GetFileSize
UnmapViewOfFile
VirtualQueryEx
GetProcessId
TerminateThread
OpenThread
GetTempPathA
ReadProcessMemory
GetCurrentDirectoryA
SetLastError
GetEnvironmentVariableA
GetThreadContext
RtlCaptureStackBackTrace

api-ms-win-core-com-l1-1-0

CoCreateInstance
CoIncrementMTAUsage
CoCreateFreeThreadedMarshaler
PropVariantClear
CoUninitialize
CoInitializeEx
CoTaskMemFree
CoInitializeSecurity
CoTaskMemAlloc
CoCreateGuid
StringFromGUID2
CoSetProxyBlanket

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle
WakeByAddressAll
WaitOnAddress

iphlpapi

GetAdaptersInfo
GetAdaptersAddresses

api-ms-win-core-registry-l1-1-0

RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

api-ms-win-ntuser-sysparams-l1-1-0

GetSystemMetrics
GetMonitorInfoW
EnumDisplayMonitors
EnumDisplayDevicesW

api-ms-win-core-synch-l1-1-0

CreateEventW
SleepEx
WaitForMultipleObjectsEx
ReleaseSemaphore
InitializeCriticalSection

api-ms-win-core-errorhandling-l1-1-0

RaiseException
GetErrorMode
SetErrorMode

api-ms-win-core-processthreads-l1-1-0

QueueUserAPC
CreateThread
ResumeThread
SwitchToThread

api-ms-win-core-processtopology-obsolete-l1-1-0

SetThreadAffinityMask

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary
GetModuleHandleW
GetProcAddress
GetModuleFileNameW
GetModuleHandleExW

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryA
LoadLibraryW

api-ms-win-core-memory-l1-1-0

VirtualFree
VirtualAlloc

api-ms-win-core-sysinfo-l1-1-0

GetSystemInfo

oleaut32

VariantClear
VariantInit
SysFreeString
SysAllocString
SysStringLen
SysAllocStringLen

api-ms-win-core-fibers-l1-1-0

FlsSetValue
FlsAlloc
FlsFree

api-ms-win-core-file-l1-1-0

FindFirstFileExW
FlushFileBuffers
SetFileAttributesW
CreateDirectoryW
CreateFileW
FindNextFileW
RemoveDirectoryW
GetFileAttributesW
GetFullPathNameW

api-ms-win-core-io-l1-1-1

CancelIo

api-ms-win-core-file-l2-1-2

CopyFileW

api-ms-win-core-file-l2-1-0

ReadDirectoryChangesW
MoveFileExW

api-ms-win-core-synch-l1-2-1

CreateSemaphoreW

api-ms-win-core-sysinfo-l1-2-0

VerSetConditionMask

api-ms-win-core-handle-l1-1-0

SetHandleInformation

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

ws2_32

ioctlsocket
GetAddrInfoW
inet_ntop
inet_pton
freeaddrinfo
getaddrinfo
WSAWaitForMultipleEvents
WSASocketW
WSAGetLastError
WSAStartup
FreeAddrInfoW
closesocket
gethostname
gethostbyname
connect
bind
accept
setsockopt
sendto
send
select
__WSAFDIsSet
getpeername
getsockname
WSAEventSelect
listen
recvfrom
recv
ntohs
inet_ntoa
htons
WSAIoctl
getnameinfo
WSACloseEvent
WSACreateEvent
socket
WSAEnumNetworkEvents

imm32

ImmGetCompositionStringW
ImmGetContext
ImmReleaseContext

user32

ShowCursor
IsIconic
SwitchToThisWindow
GetMonitorInfoA
GetClientRect
SetWindowPos
SetFocus
ShowWindow
MessageBoxA
RegisterClassA
SetCursorPos
ClientToScreen
GetKeyboardLayoutNameA
MapVirtualKeyA
GetRawInputData
RegisterRawInputDevices
DefWindowProcA
DestroyWindow
EnumDisplayDevicesA
CreateWindowExA
CallWindowProcW
GetForegroundWindow
SetWindowLongPtrW
GetWindowLongPtrW
IsClipboardFormatAvailable
UnregisterDeviceNotification
RegisterDeviceNotificationW
SetClipboardData
EmptyClipboard
CloseClipboard
GetClipboardData
OpenClipboard
DispatchMessageA
TranslateMessage
PeekMessageA
GetActiveWindow
ClipCursor
GetWindowRect
SystemParametersInfoA
SetForegroundWindow
FindWindowA
MessageBoxW
EnumDisplaySettingsA
LoadIconA
GetAsyncKeyState
GetWindowLongA
AdjustWindowRect

advapi32

GetUserNameA

shell32

ShellExecuteA
SHGetFolderPathA

winhttp

WinHttpQueryHeaders
WinHttpAddRequestHeaders
WinHttpQueryDataAvailable
WinHttpOpenRequest
WinHttpReceiveResponse
WinHttpSetOption
WinHttpReadData
WinHttpSetTimeouts
WinHttpConnect
WinHttpSendRequest
WinHttpCloseHandle
WinHttpSetStatusCallback
WinHttpOpen
WinHttpWriteData

steam_api64

SteamAPI_RunCallbacks
SteamAPI_UnregisterCallResult
SteamAPI_RegisterCallback
SteamInternal_ContextInit
SteamAPI_GetHSteamUser
SteamInternal_FindOrCreateUserInterface
SteamAPI_Init
SteamAPI_UnregisterCallback
SteamAPI_RegisterCallResult
SteamAPI_RestartAppIfNecessary

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
_Unlock_shared_ptr_spin_lock
_Lock_shared_ptr_spin_lock
_Cnd_destroy_in_situ
_Cnd_broadcast
_Cnd_wait
_Cnd_init_in_situ
_Cnd_signal
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@F@Z
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7ios_base@std@@6B@
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?_Ios_base_dtor@ios_base@std@@CAXPEAV12@@Z
?setf@ios_base@std@@QEAAHHH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??Bios_base@std@@QEBA_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
_Mtx_lock
_Mtx_init_in_situ
_Mtx_destroy_in_situ
?_Random_device@std@@YAIXZ
_Cnd_do_broadcast_at_thread_exit
_Thrd_id
_Thrd_join
?_Throw_Cpp_error@std@@YAXH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Incref@facet@locale@std@@UEAAXXZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??1_Locinfo@std@@QEAA@XZ
??1_Lockit@std@@QEAA@XZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??0_Locinfo@std@@QEAA@PEBD@Z
??0_Lockit@std@@QEAA@H@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?id@?$ctype@D@std@@2V0locale@2@A
??Bid@locale@std@@QEAA_KXZ
?id@?$collate@D@std@@2V0locale@2@A
_Strxfrm
_Strcoll
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?is@?$ctype@D@std@@QEBA_NFD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?_Xbad_alloc@std@@YAXXZ
_Query_perf_counter
_Query_perf_frequency
_Thrd_sleep
_Xtime_get_ticks
?rdstate@ios_base@std@@QEBAHXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?width@ios_base@std@@QEAA_J_J@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?flags@ios_base@std@@QEBAHXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?good@ios_base@std@@QEBA_NXZ
?uncaught_exception@std@@YA_NXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?width@ios_base@std@@QEBA_JXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?_Xout_of_range@std@@YAXPEBD@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAXXZ
_Thrd_yield
?eof@ios_base@std@@QEBA_NXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z

concrt140

??1scoped_lock@critical_section@Concurrency@@QEAA@XZ
??0scoped_lock@critical_section@Concurrency@@QEAA@AEAV12@@Z
??1critical_section@Concurrency@@QEAA@XZ
??0critical_section@Concurrency@@QEAA@XZ

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

dbghelp

MiniDumpWriteDump
StackWalk64

d3d12

ord102
ord101

wsock32

htonl
WSACleanup
ioctlsocket
shutdown
WSASetLastError
getsockopt
ntohl

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__intrinsic_setjmp
__current_exception_context
__current_exception
_set_purecall_handler
__RTDynamicCast
longjmp
__CxxFrameHandler3
_CxxThrowException
memcmp
memchr
memmove
wcsstr
__C_specific_handler
memset
memcpy
__RTtypeid
strstr
strrchr
__std_type_info_name
__std_type_info_compare
strchr
_purecall
__std_exception_copy
__std_exception_destroy
__std_terminate

api-ms-win-crt-heap-l1-1-0

free
calloc
_msize
_callnewh
malloc
realloc
_aligned_malloc
_set_new_mode
_aligned_free

api-ms-win-crt-math-l1-1-0

acos
ceilf
__setusermatherr
floorf
frexp
asin
tanf
roundf
log2f
atan2f
fmodf
exp
cos
log
log10f
log10
ceil
_dsign
pow
expf
sinf
tanhf
atanf
sqrtf
modf
lroundf
modff
cosf
tan
sin
exp2f
_isnan
fmaxf
fminf
_finite
sqrt
cbrtf
powf
copysignf
_fdsign
logf
nextafterf
atan
asinf
atan2
log2
acosf
fmod
floor
truncf
_dclass
_fdclass

api-ms-win-crt-utility-l1-1-0

qsort
rand

api-ms-win-crt-string-l1-1-0

_stricmp
isxdigit
strcspn
strnlen
wcscat_s
_wcsicmp
_wcsnicmp
wcscoll
wcscpy_s
strcmp
strncmp
_wcsicoll
wcsncpy_s
strcat_s
_strnicmp
strcpy_s
isupper
strtok_s
tolower
isspace
isalnum
toupper
_strdup
strpbrk
towlower
wcsnlen
strncpy_s
isalpha
strncat_s
wcstok_s
_strlwr_s
isdigit
wcsncpy
wcsncat_s
strncpy

api-ms-win-crt-stdio-l1-1-0

fgets
__stdio_common_vfprintf
__stdio_common_vswprintf_s
fopen_s
_wfopen
_get_stream_buffer_pointers
fputc
ungetc
_open
_close
_write
_read
__p__commode
_set_fmode
_lseeki64
fputs
fgetc
fread
fopen
fwrite
fgetpos
_fseeki64
__stdio_common_vswprintf
fsetpos
__stdio_common_vsnwprintf_s
setvbuf
fflush
__stdio_common_vsprintf_s
feof
_fileno
rewind
_wfopen_s
_filelengthi64
__stdio_common_vswscanf
__stdio_common_vsnprintf_s
fclose
fseek
__stdio_common_vsscanf
__acrt_iob_func
__stdio_common_vfwprintf
ftell
__stdio_common_vsprintf

api-ms-win-crt-convert-l1-1-0

wcstol
strtoul
_strtoi64_l
atoi
_strtoui64_l
_strtoi64
strtoll
_itoa
atol
strtoull
_itoa_s
_strtoui64
strtod
strtol
mbsrtowcs_s
wcsrtombs_s
atof
_strtod_l
wcstombs_s

api-ms-win-crt-runtime-l1-1-0

_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_get_narrow_winmain_command_line
_initialize_narrow_environment
_configure_narrow_argv
_initterm_e
strerror
_exit
_c_exit
_register_thread_local_exe_atexit_callback
_initialize_onexit_table
_set_invalid_parameter_handler
_initterm
exit
_endthreadex
_wassert
strerror_s
_beginthreadex
terminate
quick_exit
_getpid
abort
_invalid_parameter_noinfo_noreturn
_errno
_invalid_parameter_noinfo
__sys_nerr

api-ms-win-crt-time-l1-1-0

strftime
_gmtime64
_ftime64
_gmtime64_s
_localtime64_s
_time64
_mkgmtime64
clock

api-ms-win-crt-locale-l1-1-0

_create_locale
localeconv
_configthreadlocale

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file
_stat64
_access
_fstat64
remove
rename
_wstat64
_splitpath_s
_stat64i32
_makepath_s

api-ms-win-crt-multibyte-l1-1-0

_mbsnbcpy
_mbspbrk
_mbsncmp
_mbschr

api-ms-win-crt-environment-l1-1-0

getenv

winmm

timeBeginPeriod
timeEndPeriod
timeGetTime

dxgi

CreateDXGIFactory2

api-ms-win-security-cryptoapi-l1-1-0

CryptAcquireContextA
CryptGenRandom
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptReleaseContext
CryptGetHashParam

crypt32

CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertAddCertificateContextToStore
CryptStringToBinaryA
CertFreeCertificateChain
CertOpenStore
CertGetNameStringA
CertFreeCertificateContext
CertFindCertificateInStore
CertCloseStore

bink2w64

BinkNextFrame
BinkDoFrame
BinkClose
BinkGetFrameBuffersInfo
BinkOpen
BinkSetIOSize
BinkWait
BinkPause
BinkSetSoundTrack
BinkSetVolume
BinkSetSoundSystem
BinkOpenDirectSound
BinkRegisterFrameBuffers

wldap32

ord143
ord46
ord200
ord211
ord79
ord60
ord35
ord33
ord45
ord32
ord30
ord26
ord22
ord27
ord50
ord301
ord41

wininet

HttpOpenRequestW
InternetReadFile
InternetSetOptionW
InternetConnectW
HttpAddRequestHeadersW
InternetOpenW
HttpSendRequestW
HttpQueryInfoW
InternetCloseHandle
InternetCrackUrlW
InternetQueryDataAvailable

shlwapi

PathFindFileNameA

gdi32

GetStockObject

ole32

CoInitialize

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-winrt-string-l1-1-0

WindowsPromoteStringBuffer
WindowsDeleteString
WindowsDeleteStringBuffer
WindowsPreallocateStringBuffer
WindowsCreateStringReference

api-ms-win-core-winrt-error-l1-1-1

RoOriginateLanguageException

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo
GetRestrictedErrorInfo

Exports

Exports

??0BufferedFile@Scaleform@@IEAA@XZ
??0BufferedFile@Scaleform@@QEAA@PEAVFile@1@@Z
??0Event@Scaleform@@QEAA@_N0@Z
??0Mutex@Scaleform@@QEAA@_N0@Z
??0Semaphore@Scaleform@@QEAA@H_N@Z
??0SysAllocStatic@Scaleform@@QEAA@PEAX_K010101@Z
??0SysAllocStatic@Scaleform@@QEAA@_K@Z
??0SysFile@Scaleform@@QEAA@AEBVString@1@HH@Z
??0SysFile@Scaleform@@QEAA@XZ
??0System@Scaleform@@QEAA@AEBUHeapDesc@MemoryHeap@1@PEAVSysAllocBase@1@@Z
??0System@Scaleform@@QEAA@PEAVSysAllocBase@1@@Z
??0Thread@Scaleform@@QEAA@AEBUCreateParams@01@@Z
??0Thread@Scaleform@@QEAA@P6AHPEAV01@PEAX@Z1_KHW4ThreadState@01@@Z
??0Thread@Scaleform@@QEAA@_KH@Z
??0WaitCondition@Scaleform@@QEAA@XZ
??1AcquireInterface@Scaleform@@UEAA@XZ
??1BufferedFile@Scaleform@@UEAA@XZ
??1DefaultAcquireInterface@Scaleform@@UEAA@XZ
??1Event@Scaleform@@UEAA@XZ
??1Loader@GFx@Scaleform@@UEAA@XZ
??1Mutex@Scaleform@@UEAA@XZ
??1RefCountImplCore@Scaleform@@UEAA@XZ
??1RefCountNTSImplCore@Scaleform@@UEAA@XZ
??1RefCountWeakSupportImpl@Scaleform@@UEAA@XZ
??1Semaphore@Scaleform@@UEAA@XZ
??1System@Scaleform@@QEAA@XZ
??1Thread@Scaleform@@UEAA@XZ
??1WaitCondition@Scaleform@@QEAA@XZ
??ESemaphore@Scaleform@@QEAAHH@Z
??FSemaphore@Scaleform@@QEAAHH@Z
??YSemaphore@Scaleform@@QEAAHH@Z
??ZSemaphore@Scaleform@@QEAAHH@Z
??_FEvent@Scaleform@@QEAAXXZ
??_FMutex@Scaleform@@QEAAXXZ
??_FSemaphore@Scaleform@@QEAAXXZ
??_FSysAllocStatic@Scaleform@@QEAAXXZ
??_FSystem@Scaleform@@QEAAXXZ
??_FThread@Scaleform@@QEAAXXZ
?Acquire@Waitable@Scaleform@@QEAA_NI@Z
?AcquireMultipleObjects@AcquireInterface@Scaleform@@SA_NPEAPEAVWaitable@2@II@Z
?AcquireOneOfMultipleObjects@AcquireInterface@Scaleform@@SAHPEAPEAVWaitable@2@II@Z
?AddMemSegment@SysAllocStatic@Scaleform@@QEAAXPEAX_K@Z
?AddRef@RefCountImpl@Scaleform@@QEAAXXZ
?AddWaitHandler@Waitable@Scaleform@@QEAA_NP6AXPEAX@Z0@Z
?Append@?$Matrix2x4@M@Render@Scaleform@@QEAAAEAV123@AEBV123@@Z
?Append@?$Matrix2x4@N@Render@Scaleform@@QEAAAEAV123@AEBV123@@Z
?Append_NonOpt@?$Matrix2x4@N@Render@Scaleform@@QEAAAEAV123@AEBV123@@Z
?Blend@Color@Render@Scaleform@@SA?AV123@V123@0M@Z
?BytesAvailable@BufferedFile@Scaleform@@UEAAHXZ
?CallWaitHandlers@HandlerArray@Waitable@Scaleform@@QEAAXXZ
?CallWaitHandlers@Waitable@Scaleform@@QEAAXXZ
?CanAcquire@AcquireInterface@Scaleform@@UEAA_NXZ
?CanAcquire@Event@Scaleform@@UEAA_NXZ
?CanAcquire@Mutex@Scaleform@@UEAA_NXZ
?CanAcquire@Semaphore@Scaleform@@UEAA_NXZ
?ChangeSize@BufferedFile@Scaleform@@UEAA_NH@Z
?Close@BufferedFile@Scaleform@@UEAA_NXZ
?Close@SysFile@Scaleform@@UEAA_NXZ
?ConvertHSIToRGB@Color@Render@Scaleform@@SAXNNNPEAN00@Z
?ConvertRGBToHSI@Color@Render@Scaleform@@SAXNNNPEAN00@Z
?CopyFromStream@BufferedFile@Scaleform@@UEAAHPEAVFile@2@H@Z
?CreateWaitableIncrement@Semaphore@Scaleform@@QEAAPEAVWaitable@2@H@Z
?Destroy@System@GFx@Scaleform@@SAXXZ
?Destroy@System@Scaleform@@SAXXZ
?DoLock@Mutex@Scaleform@@QEAAXXZ
?EncloseTransform@?$Matrix2x4@M@Render@Scaleform@@QEBAXPEAV?$Rect@M@23@AEBV423@@Z
?EncloseTransform@?$Matrix3x4@M@Render@Scaleform@@QEBA?AV?$Rect@M@23@AEBV423@@Z
?EncloseTransform@?$Matrix3x4@M@Render@Scaleform@@QEBAXPEAV?$Rect@M@23@AEBV423@@Z
?EncloseTransformHomogeneous@?$Matrix4x4@M@Render@Scaleform@@QEBAXPEAV?$Rect@M@23@AEBV423@@Z
?Exit@Thread@Scaleform@@UEAAXH@Z
?FinishAllThreads@Thread@Scaleform@@SAXXZ
?Flush@BufferedFile@Scaleform@@UEAA_NXZ
?FlushBuffer@BufferedFile@Scaleform@@IEAAXXZ
?GetAcquireInterface@Event@Scaleform@@UEAAPEAVAcquireInterface@2@XZ
?GetAcquireInterface@Mutex@Scaleform@@UEAAPEAVAcquireInterface@2@XZ
?GetAcquireInterface@Semaphore@Scaleform@@UEAAPEAVAcquireInterface@2@XZ
?GetAcquireInterface@Waitable@Scaleform@@UEAAPEAVAcquireInterface@2@XZ
?GetCPUCount@Thread@Scaleform@@SAHXZ
?GetDefaultAcquireInterface@DefaultAcquireInterface@Scaleform@@SAPEAV12@XZ
?GetDeterminant@?$Matrix2x4@M@Render@Scaleform@@QEBAMXZ
?GetErrorCode@SysFile@Scaleform@@UEAAHXZ
?GetExitFlag@Thread@Scaleform@@QEBA_NXZ
?GetFileStat@SysFile@Scaleform@@SA_NPEAUFileStat@2@AEBVString@2@@Z
?GetHSI@Color@Render@Scaleform@@QEBAXPEAH00@Z
?GetHSI@Color@Render@Scaleform@@QEBAXPEAM00@Z
?GetHSV@Color@Render@Scaleform@@QEBAXPEAH00@Z
?GetHSV@Color@Render@Scaleform@@QEBAXPEAM00@Z
?GetLength@BufferedFile@Scaleform@@UEAAHXZ
?GetMaxScale@?$Matrix2x4@M@Render@Scaleform@@QEBAMXZ
?GetRotation@?$Matrix2x4@M@Render@Scaleform@@QEBAMXZ
?GetRotationDouble@?$Matrix2x4@M@Render@Scaleform@@QEBANXZ
?GetScale@?$Matrix2x4@M@Render@Scaleform@@QEBAMXZ
?GetThreadState@Thread@Scaleform@@QEBA?AW4ThreadState@12@XZ
?GetXScale@?$Matrix2x4@M@Render@Scaleform@@QEBAMXZ
?GetXScaleDouble@?$Matrix2x4@M@Render@Scaleform@@QEBANXZ
?GetYScale@?$Matrix2x4@M@Render@Scaleform@@QEBAMXZ
?GetYScaleDouble@?$Matrix2x4@M@Render@Scaleform@@QEBANXZ
?HasMemoryLeaks@System@Scaleform@@2_NA
?Init@System@GFx@Scaleform@@SAXAEBUHeapDesc@MemoryHeap@3@PEAVSysAllocBase@3@@Z
?Init@System@GFx@Scaleform@@SAXPEAVSysAllocBase@3@@Z
?Init@System@Scaleform@@SAXAEBUHeapDesc@MemoryHeap@2@PEAVSysAllocBase@2@@Z
?Init@System@Scaleform@@SAXPEAVSysAllocBase@2@@Z
?IsFinished@Thread@Scaleform@@QEBA_NXZ
?IsLockedByAnotherThread@Mutex@Scaleform@@QEAA_NXZ
?IsSignaled@Event@Scaleform@@UEBA_NXZ
?IsSignaled@Mutex@Scaleform@@UEBA_NXZ
?IsSignaled@Semaphore@Scaleform@@UEBA_NXZ
?IsSignaled@Waitable@Scaleform@@UEBA_NXZ
?IsSuspended@Thread@Scaleform@@QEBA_NXZ
?IsValid@?$Matrix2x4@M@Render@Scaleform@@QEBA_NXZ
?IsValid@?$Matrix3x4@M@Render@Scaleform@@QEBA_NXZ
?IsValid@?$Matrix3x4@N@Render@Scaleform@@QEBA_NXZ
?IsValid@?$Matrix4x4@N@Render@Scaleform@@QEBA_NXZ
?IsValid@SysFile@Scaleform@@UEBA_NXZ
?LGetLength@BufferedFile@Scaleform@@UEAA_JXZ
?LSeek@BufferedFile@Scaleform@@UEAA_J_JH@Z
?LTell@BufferedFile@Scaleform@@UEAA_JXZ
?LoadBuffer@BufferedFile@Scaleform@@IEAAXXZ
?MSleep@Thread@Scaleform@@SA_NI@Z
?MultiplyMatrix@?$Matrix3x4@M@Render@Scaleform@@QEAAXAEBV123@0@Z
?MultiplyMatrix@?$Matrix3x4@M@Render@Scaleform@@QEAAXAEBV123@AEBV?$Matrix2x4@M@23@@Z
?MultiplyMatrix@?$Matrix3x4@M@Render@Scaleform@@QEAAXAEBV?$Matrix2x4@M@23@AEBV123@@Z
?MultiplyMatrix@?$Matrix3x4@N@Render@Scaleform@@QEAAXAEBV123@0@Z
?MultiplyMatrix@?$Matrix4x4@M@Render@Scaleform@@QEAAXAEBV123@0@Z
?MultiplyMatrix@?$Matrix4x4@M@Render@Scaleform@@QEAAXAEBV123@AEBV?$Matrix2x4@M@23@@Z
?MultiplyMatrix@?$Matrix4x4@M@Render@Scaleform@@QEAAXAEBV123@AEBV?$Matrix3x4@M@23@@Z
?MultiplyMatrix@?$Matrix4x4@M@Render@Scaleform@@QEAAXAEBV?$Matrix2x4@M@23@AEBV123@@Z
?MultiplyMatrix@?$Matrix4x4@M@Render@Scaleform@@QEAAXAEBV?$Matrix3x4@M@23@AEBV123@@Z
?MultiplyMatrix@?$Matrix4x4@N@Render@Scaleform@@QEAAXAEBV123@0@Z
?MultiplyMatrix_NonOpt@?$Matrix3x4@N@Render@Scaleform@@QEAAXAEBV123@0@Z
?MultiplyMatrix_NonOpt@?$Matrix4x4@N@Render@Scaleform@@QEAAXAEBV123@0@Z
?Notify@WaitCondition@Scaleform@@QEAAXXZ
?NotifyAll@WaitCondition@Scaleform@@QEAAXXZ
?ObtainSemaphore@Semaphore@Scaleform@@QEAA_NHI@Z
?OnExit@Thread@Scaleform@@UEAAXXZ
?Open@SysFile@Scaleform@@QEAA_NAEBVString@2@HH@Z
?OrthoOffCenterLH@?$Matrix4x4@M@Render@Scaleform@@QEAAXMMMMMM@Z
?OrthoOffCenterRH@?$Matrix4x4@M@Render@Scaleform@@QEAAXMMMMMM@Z
?PerspectiveOffCenterLH@?$Matrix4x4@M@Render@Scaleform@@QEAAXMMMMMMM@Z
?PerspectiveOffCenterRH@?$Matrix4x4@M@Render@Scaleform@@QEAAXMMMMMMM@Z
?Prepend@?$Matrix2x4@M@Render@Scaleform@@QEAAAEAV123@AEBV123@@Z
?PulseEvent@Event@Scaleform@@QEAAXXZ
?Read@BufferedFile@Scaleform@@UEAAHPEAEH@Z
?Release@HandlerArray@Waitable@Scaleform@@QEAAXXZ
?Release@RefCountImpl@Scaleform@@QEAAXXZ
?Release@RefCountNTSImpl@Scaleform@@QEBAXXZ
?ReleaseSemaphore@Semaphore@Scaleform@@QEAA_NH@Z
?RemoveWaitHandler@Waitable@Scaleform@@QEAA_NP6AXPEAX@Z0@Z
?ResetEvent@Event@Scaleform@@QEAAXXZ
?Resume@Thread@Scaleform@@QEAA_NXZ
?Run@Thread@Scaleform@@UEAAHXZ
?Seek@BufferedFile@Scaleform@@UEAAHHH@Z
?SetBufferMode@BufferedFile@Scaleform@@IEAA_NW4BufferModeType@12@@Z
?SetEvent@Event@Scaleform@@QEAAXXZ
?SetExitFlag@Thread@Scaleform@@QEAAX_N@Z
?SetHSI@Color@Render@Scaleform@@QEAAXHHH@Z
?SetHSI@Color@Render@Scaleform@@QEAAXMMM@Z
?SetHSV@Color@Render@Scaleform@@QEAAXHHH@Z
?SetHSV@Color@Render@Scaleform@@QEAAXMMM@Z
?SetIdentity@?$Matrix2x4@M@Render@Scaleform@@QEAAXXZ
?SetIdentity@?$Matrix2x4@N@Render@Scaleform@@QEAAXXZ
?SetIdentity@?$Matrix3x4@M@Render@Scaleform@@QEAAXXZ
?SetIdentity@?$Matrix3x4@N@Render@Scaleform@@QEAAXXZ
?SetIdentity@?$Matrix4x4@M@Render@Scaleform@@QEAAXXZ
?SetIdentity@?$Matrix4x4@N@Render@Scaleform@@QEAAXXZ
?SetInverse@?$Matrix2x4@M@Render@Scaleform@@QEAAXAEBV123@@Z
?SetInverse@?$Matrix2x4@N@Render@Scaleform@@QEAAXAEBV123@@Z
?SetLerp@?$Matrix2x4@M@Render@Scaleform@@QEAAXAEBV123@0M@Z
?SetZero@?$Matrix2x4@M@Render@Scaleform@@QEAAXXZ
?SkipBytes@BufferedFile@Scaleform@@UEAAHH@Z
?Sleep@Thread@Scaleform@@SA_NI@Z
?Start@Thread@Scaleform@@UEAA_NW4ThreadState@12@@Z
?Suspend@Thread@Scaleform@@QEAA_NXZ
?Tell@BufferedFile@Scaleform@@UEAAHXZ
?Transform@?$Matrix2x4@M@Render@Scaleform@@QEBAXPEAV?$Point@M@23@AEBV423@@Z
?Transform@?$Matrix3x4@M@Render@Scaleform@@QEBA?AV?$Point@M@23@AEBV423@@Z
?Transform@?$Matrix3x4@M@Render@Scaleform@@QEBAXPEAV?$Point@M@23@AEBV423@@Z
?TransformByInverse@?$Matrix2x4@M@Render@Scaleform@@QEBAXPEAV?$Point@M@23@AEBV423@@Z
?Transpose@?$Matrix3x4@N@Render@Scaleform@@QEAAXXZ
?Transpose@?$Matrix4x4@N@Render@Scaleform@@QEAAXXZ
?TryAcquire@AcquireInterface@Scaleform@@UEAA_NXZ
?TryAcquire@Event@Scaleform@@UEAA_NXZ
?TryAcquire@Mutex@Scaleform@@UEAA_NXZ
?TryAcquire@Semaphore@Scaleform@@UEAA_NXZ
?TryAcquireCancel@AcquireInterface@Scaleform@@UEAA_NXZ
?TryAcquireCancel@Event@Scaleform@@UEAA_NXZ
?TryAcquireCancel@Mutex@Scaleform@@UEAA_NXZ
?TryAcquireCancel@Semaphore@Scaleform@@UEAA_NXZ
?TryAcquireCommit@AcquireInterface@Scaleform@@UEAA_NXZ
?TryAcquireCommit@Event@Scaleform@@UEAA_NXZ
?TryAcquireCommit@Mutex@Scaleform@@UEAA_NXZ
?TryAcquireCommit@Semaphore@Scaleform@@UEAA_NXZ
?TryLock@Mutex@Scaleform@@QEAA_NXZ
?Unlock@Mutex@Scaleform@@QEAAXXZ
?View@?$Matrix3x4@M@Render@Scaleform@@QEAAXAEBV?$Point3@M@23@00@Z
?ViewLH@?$Matrix3x4@M@Render@Scaleform@@QEAAXAEBV?$Point3@M@23@00@Z
?ViewRH@?$Matrix3x4@M@Render@Scaleform@@QEAAXAEBV?$Point3@M@23@00@Z
?Wait@Event@Scaleform@@QEAA_NI@Z
?Wait@WaitCondition@Scaleform@@QEAA_NPEAVMutex@2@I@Z
?Wait@Waitable@Scaleform@@QEAA_NI@Z
?Write@BufferedFile@Scaleform@@UEAAHPEBEH@Z
AkMotionInitializeScePadFunctions
D3D12SDKPath
D3D12SDKVersion
agsCheckDriverVersion
agsDeInitialize
agsDriverExtensionsDX12_CreateDevice
agsDriverExtensionsDX12_CreateFromDevice
agsDriverExtensionsDX12_Destroy
agsDriverExtensionsDX12_DestroyDevice
agsDriverExtensionsDX12_PopMarker
agsDriverExtensionsDX12_PushMarker
agsDriverExtensionsDX12_SetMarker
agsGetVersionNumber
agsInitialize
agsSetDisplayMode
ffxFsr2ContextCreate
ffxFsr2ContextDestroy
ffxFsr2ContextDispatch
ffxFsr2ContextGenerateReactiveMask
ffxFsr2GetInterfaceDX12
ffxFsr2GetJitterOffset
ffxFsr2GetJitterPhaseCount
ffxFsr2GetRenderResolutionFromQualityMode
ffxFsr2GetScratchMemorySizeDX12
ffxFsr2GetUpscaleRatioFromQualityMode
ffxFsr2RegisterAliasableResources
ffxFsr2ResourceIsNull
ffxGetCommandListDX12
ffxGetDX12ResourcePtr
ffxGetDeviceDX12
ffxGetResourceDX12
g_pAKPluginList

Sections

.text
Size: 62.7MB - Virtual size: 62.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17.1MB - Virtual size: 17.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4.3MB - Virtual size: 44.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xbld
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 365KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 847KB - Virtual size: 846KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.bind
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

24d95bf9de827d350f4d3e51395ffbc9

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

02:fa:3a:9f:26:02:58:10:e4:15:fa:da:68:0d:e9:70Certificate

Extended Key Usages

Key Usages

0f:a2:66:00:bd:ca:ef:8d:d1:70:1c:00:6a:38:b4:cb:d7:86:7e:8eSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

api-ms-win-core-com-l1-1-0

api-ms-win-core-synch-l1-2-0

iphlpapi

api-ms-win-core-registry-l1-1-0

api-ms-win-ntuser-sysparams-l1-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-processtopology-obsolete-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-libraryloader-l1-2-1

api-ms-win-core-memory-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

oleaut32

api-ms-win-core-fibers-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-io-l1-1-1

api-ms-win-core-file-l2-1-2

api-ms-win-core-file-l2-1-0

api-ms-win-core-synch-l1-2-1

api-ms-win-core-sysinfo-l1-2-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-kernel32-legacy-l1-1-1

ws2_32

imm32

user32

advapi32

shell32

winhttp

steam_api64

msvcp140

concrt140

version

dbghelp

d3d12

wsock32

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

api-ms-win-crt-environment-l1-1-0

winmm

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

02:fa:3a:9f:26:02:58:10:e4:15:fa:da:68:0d:e9:70
Certificate

0f:a2:66:00:bd:ca:ef:8d:d1:70:1c:00:6a:38:b4:cb:d7:86:7e:8e
Signer

.text
Size: 62.7MB - Virtual size: 62.7MB

.rdata
Size: 17.1MB - Virtual size: 17.1MB

.data
Size: 4.3MB - Virtual size: 44.8MB

.pdata
Size: 2.5MB - Virtual size: 2.5MB

_RDATA
Size: 155KB - Virtual size: 155KB

.xbld
Size: 512B - Virtual size: 228B

.rsrc
Size: 365KB - Virtual size: 364KB

.reloc
Size: 847KB - Virtual size: 846KB

.bind
Size: 201KB - Virtual size: 201KB