CentreGainGetDSPDescription
CompressorGetDSPDescription
D3D12SDKPath
D3D12SDKVersion
FmodGainGetDSPDescription
SaturatorGetDSPDescription
SurroundGainGetDSPDescription
Turn10GainGetDSPDescription
Static task
static1
1 signatures
General
-
Target
ForzaHorizon5.exe
-
Size
174.4MB
-
MD5
5ce25c0a9141315314acf5615942d2f1
-
SHA1
1670c7dcc2f2a51c2a278c18145e20003bcbd8bc
-
SHA256
c6024a3ed46bc2a2b08a5f079c3ea72dfc51ee397ab5beb2ab36459937f11714
-
SHA512
e54bd82efd1d91714d32d23eb01d116730f3a2ea848615298e7774e94599eea425f945235496cb260430886f20fc85f36a4b7122ca695a94cc8ad6e32fbdf3cd
-
SSDEEP
1572864:/OuAMkg5vTcxa6UgbIh4FGnJvoQToQvbW/NWW:/zDBgnzcnxoDV
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ForzaHorizon5.exe
Files
-
ForzaHorizon5.exe.exe windows:6 windows x64
39d60a25b2b1cdcf4615c07b8bc63893
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
xinput1_3
ord2
ord4
vcruntime140
__current_exception
wcsrchr
__CxxFrameHandler3
_set_purecall_handler
_purecall
__std_terminate
__std_exception_copy
__std_exception_destroy
__std_type_info_hash
wcschr
__RTtypeid
strrchr
__C_specific_handler
strchr
strstr
__std_type_info_compare
_CxxThrowException
wcsstr
memcpy
memmove
__RTDynamicCast
memset
memcmp
__std_type_info_name
memchr
__current_exception_context
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
_c_exit
_invalid_parameter_noinfo
terminate
_errno
_exit
abort
exit
_initterm_e
_beginthreadex
_initterm
_register_thread_local_exe_atexit_callback
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_set_invalid_parameter_handler
_control87
_crt_atexit
_register_onexit_function
signal
_wassert
raise
strerror_s
_initialize_onexit_table
_clearfp
_invalid_parameter_noinfo_noreturn
api-ms-win-crt-string-l1-1-0
_stricmp
strcspn
strspn
strcpy_s
strtok_s
wcstok_s
_wcsupr
isalnum
wcscpy_s
wcsncpy_s
iswascii
strnlen
wcsncpy
iswalpha
strlen
_wcsnicmp
_wcsicmp
wcsncmp
toupper
towupper
strcmp
wcscat_s
towlower
strcat_s
isalpha
iswalnum
strncpy_s
_strnicmp
wcspbrk
isspace
strncmp
tolower
isdigit
isupper
iswspace
strncpy
api-ms-win-crt-convert-l1-1-0
_wtoi
strtoul
atof
strtoll
wcstol
strtoull
_strtoui64_l
_itow_s
strtod
strtol
wcstombs_s
strtof
_itoa_s
_i64toa_s
_wcstoui64
mbstowcs
atol
wcstof
_ui64toa_s
_strtoui64
wcstoull
wcstoul
atoi
api-ms-win-crt-stdio-l1-1-0
_fileno
fputs
ferror
feof
__stdio_common_vswprintf
__acrt_iob_func
__stdio_common_vswprintf_s
__stdio_common_vsprintf
__stdio_common_vsscanf
__stdio_common_vfwprintf
_setmode
__stdio_common_vsprintf_s
fopen_s
_set_fmode
_get_stream_buffer_pointers
__stdio_common_vsnprintf_s
fclose
fopen
fflush
__p__commode
_wfopen
fgetc
fseek
ftell
__stdio_common_vfprintf
fgets
__stdio_common_vswscanf
ungetc
setvbuf
fwrite
_fseeki64
fsetpos
fread
fputc
fgetpos
api-ms-win-crt-math-l1-1-0
exp2f
atan2
acos
exp2
cos
sin
_fdpcomp
atanf
atan2f
cosf
expf
sinhf
log
_dclass
round
log2f
pow
fmaxf
_dsign
fmin
roundf
fminf
tanf
sqrt
ldexp
logf
powf
ceilf
modff
ceil
sinf
log2
log10
__setusermatherr
fmod
tanhf
_fdclass
acosf
asinf
fmodf
_finite
log10f
_isnan
api-ms-win-crt-heap-l1-1-0
realloc
malloc
calloc
_aligned_free
_aligned_malloc
_set_new_mode
free
api-ms-win-crt-utility-l1-1-0
srand
qsort
rand
api-ms-win-crt-filesystem-l1-1-0
remove
_splitpath_s
_lock_file
_makepath_s
_splitpath
_makepath
_wremove
_unlock_file
_stat64i32
api-ms-win-crt-locale-l1-1-0
localeconv
_create_locale
_configthreadlocale
api-ms-win-crt-time-l1-1-0
_gmtime64_s
_gmtime64
_localtime64
_difftime64
_time64
_localtime64_s
concrt140
?_Internal_pop_if_present@_Concurrent_queue_base_v4@details@Concurrency@@IEAA_NPEAX@Z
?_Internal_push@_Concurrent_queue_base_v4@details@Concurrency@@IEAAXPEBX@Z
??1_Concurrent_queue_base_v4@details@Concurrency@@MEAA@XZ
??0_Concurrent_queue_base_v4@details@Concurrency@@IEAA@_K@Z
??1_Concurrent_vector_base_v4@details@Concurrency@@IEAA@XZ
?_Internal_empty@_Concurrent_queue_base_v4@details@Concurrency@@IEBA_NXZ
?_Internal_grow_to_at_least_with_result@_Concurrent_vector_base_v4@details@Concurrency@@IEAA_K_K0P6AXPEAXPEBX0@Z2@Z
?_Internal_throw_exception@_Concurrent_vector_base_v4@details@Concurrency@@IEBAX_K@Z
?_Internal_finish_clear@_Concurrent_queue_base_v4@details@Concurrency@@IEAAXXZ
??0scoped_lock@critical_section@Concurrency@@QEAA@AEAV12@@Z
??1critical_section@Concurrency@@QEAA@XZ
??0critical_section@Concurrency@@QEAA@XZ
?_Internal_swap@_Concurrent_queue_base_v4@details@Concurrency@@IEAAXAEAV123@@Z
??1_Concurrent_queue_iterator_base_v4@details@Concurrency@@IEAA@XZ
?_Advance@_Concurrent_queue_iterator_base_v4@details@Concurrency@@IEAAXXZ
??0_Concurrent_queue_iterator_base_v4@details@Concurrency@@IEAA@AEBV_Concurrent_queue_base_v4@12@@Z
?_Internal_size@_Concurrent_queue_base_v4@details@Concurrency@@IEBA_KXZ
?_Internal_move_push@_Concurrent_queue_base_v4@details@Concurrency@@IEAAXPEAX@Z
??1scoped_lock@critical_section@Concurrency@@QEAA@XZ
?_Internal_throw_exception@_Concurrent_queue_base_v4@details@Concurrency@@IEBAXXZ
?_Segment_index_of@_Concurrent_vector_base_v4@details@Concurrency@@KA_K_K@Z
?_Internal_reserve@_Concurrent_vector_base_v4@details@Concurrency@@IEAAX_K00@Z
?_Internal_capacity@_Concurrent_vector_base_v4@details@Concurrency@@IEBA_KXZ
?_Internal_push_back@_Concurrent_vector_base_v4@details@Concurrency@@IEAAPEAX_KAEA_K@Z
?_Internal_clear@_Concurrent_vector_base_v4@details@Concurrency@@IEAA_KP6AXPEAX_K@Z@Z
d3d12
D3D12SerializeVersionedRootSignature
ord101
dxgi
CreateDXGIFactory1
CreateDXGIFactory2
msvcp140
?always_noconv@codecvt_base@std@@QEBA_NXZ
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
?tolower@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?is@?$ctype@_W@std@@QEBA_NF_W@Z
?tolower@?$ctype@_W@std@@QEBA_W_W@Z
?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$ctype@_W@std@@2V0locale@2@A
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
?id@?$collate@_W@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
_Cnd_register_at_thread_exit
_Cnd_unregister_at_thread_exit
?_Syserror_map@std@@YAPEBDH@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exceptions@std@@YAHXZ
_Xtime_get_ticks
_Lock_shared_ptr_spin_lock
_Unlock_shared_ptr_spin_lock
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?swap@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXAEAV12@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Random_device@std@@YAIXZ
?tellp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
??Bid@locale@std@@QEAA_KXZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
_Wcsxfrm
_Wcscoll
_Strxfrm
_Strcoll
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
_Thrd_hardware_concurrency
?ignore@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAG@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_Throw_C_error@std@@YAXH@Z
_Cnd_broadcast
_Cnd_wait
_Cnd_destroy_in_situ
_Cnd_init_in_situ
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
_Query_perf_frequency
_Query_perf_counter
?_Xbad_alloc@std@@YAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?uncaught_exception@std@@YA_NXZ
?_Xbad_function_call@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?_Winerror_map@std@@YAHH@Z
?classic@locale@std@@SAAEBV12@XZ
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@G@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
_Mtx_trylock
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_K@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?swap@?$basic_ostream@DU?$char_traits@D@std@@@std@@IEAAXAEAV12@@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z
_Thrd_join
_Thrd_id
_Mtx_current_owns
_Cnd_timedwait
_Cnd_do_broadcast_at_thread_exit
?_Throw_Cpp_error@std@@YAXH@Z
?toupper@?$ctype@D@std@@QEBADD@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?toupper@?$ctype@_W@std@@QEBA_W_W@Z
??0task_continuation_context@Concurrency@@AEAA@XZ
advapi32
RegCloseKey
CryptReleaseContext
CryptGetHashParam
RegEnumKeyExW
CryptGenRandom
CryptCreateHash
CryptHashData
RegOpenKeyExW
RegQueryInfoKeyW
RegGetValueW
RegOpenKeyExA
RegGetValueA
CryptDestroyHash
DeregisterEventSource
RegisterEventSourceW
ReportEventW
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptSignHashW
CryptEnumProvidersW
LookupAccountSidW
IsValidSid
GetTokenInformation
OpenProcessToken
RegQueryValueExW
CredFree
CredDeleteW
CredEnumerateW
CredWriteW
CryptAcquireContextW
kernel32
CreateFileW
GetSystemDirectoryW
LocalAlloc
LocalFree
VerifyVersionInfoW
GetTimeFormatEx
RtlCaptureStackBackTrace
GetUserDefaultUILanguage
GetUserGeoID
LCIDToLocaleName
LocaleNameToLCID
VirtualFree
VirtualAlloc
FormatMessageW
TryAcquireSRWLockShared
WideCharToMultiByte
MultiByteToWideChar
FileTimeToSystemTime
GetComputerNameA
ConvertThreadToFiber
CreateFiber
ConvertFiberToThread
DeleteFiber
SwitchToFiber
GetLogicalProcessorInformation
GetSystemCpuSetInformation
CreateProcessA
TerminateProcess
ExitProcess
CreateMutexW
GetTempPathW
SetFileAttributesW
RemoveDirectoryW
GetFileAttributesW
GetDiskFreeSpaceExW
CreateDirectoryW
GetEnvironmentVariableW
Module32NextW
Module32FirstW
CreateToolhelp32Snapshot
GetFileInformationByHandleEx
MoveFileExW
CopyFileW
GetModuleHandleW
GetModuleHandleA
GetCurrentProcessId
GetOverlappedResultEx
GetOverlappedResult
SetLastError
GetDateFormatEx
GetUserDefaultLocaleName
CreateThreadpoolWait
SetThreadpoolWait
WaitForThreadpoolWaitCallbacks
CloseThreadpoolWait
DisassociateCurrentThreadFromCallback
CreateThreadpoolWork
SubmitThreadpoolWork
WaitForThreadpoolWorkCallbacks
CloseThreadpoolWork
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateFile2
WriteFile
SetFilePointerEx
SetFilePointer
InitOnceComplete
InitOnceBeginInitialize
GetStartupInfoW
GlobalFree
RtlCaptureContext
InitializeSListHead
SetFileTime
SetUnhandledExceptionFilter
IsDebuggerPresent
CloseThreadpoolIo
WaitForThreadpoolIoCallbacks
CancelThreadpoolIo
StartThreadpoolIo
CreateThreadpoolIo
FlsGetValue
FlsAlloc
SleepEx
TryAcquireSRWLockExclusive
ReleaseMutex
GetSystemInfo
K32GetProcessMemoryInfo
GetPhysicallyInstalledSystemMemory
GetPackagePath
PackageIdFromFullName
K32GetModuleBaseNameA
GetSystemDirectoryA
CreateEventW
FlushInstructionCache
SetThreadContext
FreeLibrary
WaitForMultipleObjectsEx
CreateDirectoryA
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
SetWaitableTimer
CreateWaitableTimerW
QueueUserAPC
TerminateThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FormatMessageA
GetVersionExW
GetSystemDefaultLocaleName
GetStdHandle
GetFileType
LoadLibraryA
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
InitializeCriticalSectionEx
CreateSemaphoreExW
SetThreadDescription
SetThreadAffinityMask
SetThreadIdealProcessor
IsProcessorFeaturePresent
GetProcessHeap
HeapFree
HeapAlloc
LoadLibraryExW
GetLargePageMinimum
SetEndOfFile
ReadFile
GetFullPathNameW
GetFileTime
GetFileSizeEx
GetFileSize
GetFileAttributesExA
GetFileAttributesA
FlushFileBuffers
FindNextFileW
FindNextFileA
FindFirstFileW
FindClose
DeleteFileW
DeleteFileA
CreateFileA
GetSystemTime
FileTimeToLocalFileTime
CompareFileTime
K32GetModuleInformation
CreateSemaphoreA
GetModuleHandleExW
VirtualQuery
VirtualProtect
SetThreadSelectedCpuSets
GetThreadTimes
GetThreadContext
GetThreadId
ResumeThread
SuspendThread
GetExitCodeThread
SetThreadPriorityBoost
OpenThread
CreateThread
GetCurrentProcess
CreateEventA
CreateMutexA
InitializeCriticalSectionAndSpinCount
DuplicateHandle
RtlVirtualUnwind
RtlLookupFunctionEntry
OutputDebugStringA
LoadLibraryW
GetProcAddress
GetThreadPriority
SetThreadPriority
GetCurrentThread
GetLastError
GetModuleFileNameW
ResetEvent
DeleteCriticalSection
InitializeCriticalSection
CloseHandle
GetLocalTime
SetCurrentDirectoryA
GetCommandLineW
GetModuleFileNameA
GlobalMemoryStatus
GetCurrentThreadId
Sleep
WaitForSingleObjectEx
TryEnterCriticalSection
AcquireSRWLockShared
ReleaseSRWLockShared
SwitchToThread
SetEvent
InitializeSRWLock
OutputDebugStringW
WaitForSingleObject
ReleaseSemaphore
LeaveCriticalSection
EnterCriticalSection
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
WaitForMultipleObjects
QueryPerformanceFrequency
QueryPerformanceCounter
SystemTimeToFileTime
GetSystemTimeAsFileTime
GetTickCount64
GetProcessAffinityMask
GetFileAttributesExW
GlobalMemoryStatusEx
VerSetConditionMask
InterlockedPushEntrySList
UnhandledExceptionFilter
WerRegisterFile
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler
user32
SetRect
ClientToScreen
ShowCursor
AdjustWindowRect
GetWindowRect
GetClientRect
SetWindowTextW
EndPaint
BeginPaint
SetForegroundWindow
UpdateWindow
EnableMenuItem
GetSystemMenu
GetSystemMetrics
MonitorFromWindow
GetAsyncKeyState
IsZoomed
IsIconic
CopyRect
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
SetWindowLongPtrW
GetKeyNameTextW
MapVirtualKeyW
TranslateMessage
DispatchMessageW
PeekMessageW
RegisterWindowMessageW
EnumDisplaySettingsW
MonitorFromPoint
GetDoubleClickTime
GetActiveWindow
GetKeyState
SetCapture
ReleaseCapture
SetWindowLongW
SetWindowPos
SetCursor
LoadCursorW
PostQuitMessage
DefWindowProcW
PostMessageW
GetMonitorInfoW
SystemParametersInfoW
SendMessageW
GetClassInfoExW
ShowWindowAsync
AdjustWindowRectExForDpi
GetWindowLongPtrW
LoadImageW
UnregisterClassW
MonitorFromRect
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
GetClassLongPtrW
GetDpiForWindow
MsgWaitForMultipleObjectsEx
ws2_32
WSAStringToAddressW
WSAAddressToStringW
WSASend
WSARecv
WSASetLastError
getsockopt
getsockname
getpeername
inet_pton
htonl
select
closesocket
connect
htons
inet_addr
recv
send
socket
gethostbyaddr
gethostbyname
__WSAFDIsSet
accept
bind
ioctlsocket
listen
ntohs
sendto
setsockopt
shutdown
WSAStartup
WSACleanup
WSAGetLastError
WSAIoctl
WSARecvFrom
WSASendTo
WSASocketW
getaddrinfo
freeaddrinfo
getnameinfo
ntohl
api-ms-win-core-version-l1-1-0
VerQueryValueW
GetFileVersionInfoExW
GetFileVersionInfoSizeExW
mfplat
MFStartup
MFShutdown
api-ms-win-core-com-l1-1-0
CoUninitialize
CoCreateInstanceEx
CoInitializeEx
CoCreateInstance
CoCreateFreeThreadedMarshaler
CoTaskMemAlloc
CoTaskMemFree
CoIncrementMTAUsage
CoCreateGuid
bcrypt
BCryptEncrypt
BCryptGenerateSymmetricKey
BCryptCloseAlgorithmProvider
BCryptExportKey
BCryptSetProperty
BCryptFinalizeKeyPair
BCryptDestroyHash
BCryptImportKeyPair
BCryptGetProperty
BCryptGenRandom
BCryptDecrypt
BCryptOpenAlgorithmProvider
BCryptDestroyKey
BCryptCreateHash
BCryptHashData
BCryptGenerateKeyPair
BCryptSignHash
BCryptFinishHash
api-ms-win-core-memory-l1-1-3
VirtualAllocFromApp
api-ms-win-core-winrt-string-l1-1-0
WindowsPreallocateStringBuffer
WindowsDeleteStringBuffer
WindowsDeleteString
WindowsCreateStringReference
WindowsGetStringRawBuffer
WindowsCreateString
WindowsPromoteStringBuffer
api-ms-win-gaming-tcui-l1-1-0
ShowPlayerPickerUI
ShowProfileCardUI
ProcessPendingGameUI
api-ms-win-shcore-scaling-l1-1-1
GetDpiForMonitor
amd_ags_x64
agsDriverExtensionsDX12_CreateDevice
agsInitialize
winhttp
WinHttpCloseHandle
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpSetOption
WinHttpWriteData
WinHttpSetStatusCallback
WinHttpQueryOption
WinHttpConnect
WinHttpSetTimeouts
WinHttpOpen
WinHttpOpenRequest
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpAddRequestHeaders
crypt32
CertGetCertificateContextProperty
CertDuplicateCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertOpenStore
CertGetCertificateChain
CertFreeCertificateContext
CertCreateCertificateContext
CertFindChainInStore
CertFreeCertificateChain
CertOpenSystemStoreW
CertCloseStore
emp
EMP
comctl32
ord345
bink2w64
BinkGetFrameBuffersInfo
BinkOpenXAudio2
BinkRegisterFrameBuffers
BinkUtilFree
BinkOpen
BinkNextFrame
BinkSetSoundTrack
BinkClose
BinkPause
BinkSetSoundSystem2
BinkUtilMalloc
BinkWait
BinkGetRealtime
BinkWaitStopAsyncThread
BinkGetPlatformInfo
BinkSetSpeakerVolumes
BinkShouldSkip
BinkSetOSFileCallbacks
BinkSetWillLoop
BinkStartAsyncThread
BinkDoFrameAsync
BinkDoFrameAsyncWait
BinkRequestStopAsyncThread
gdi32
SelectObject
GetStockObject
DeleteObject
CreateCompatibleDC
BitBlt
GetObjectW
shell32
ShellExecuteExW
ShellExecuteW
SHGetKnownFolderPath
ole32
PropVariantClear
CoWaitForMultipleHandles
CoGetApartmentType
StringFromGUID2
partywin
ord136
ord63
ord101
ord59
ord141
ord90
ord62
ord60
ord93
ord61
ord91
ord109
ord108
ord65
ord110
ord112
ord131
ord125
ord111
ord117
ord53
ord144
ord146
ord145
ord49
ord28
ord41
ord25
ord32
ord50
ord46
ord55
ord57
ord58
ord56
ord45
ord24
ord42
ord47
partyxboxlive
PartyXblChatUserGetXboxUserId
PartyXblChatUserSetCustomContext
PartyXblLocalChatUserGetAccessibilitySettings
PartyXblLocalChatUserGetRequiredChatPermissionInfo
PartyXblGetEntityIdsFromXboxLiveUserIds
PartyXblLoginToPlayFab
PartyXblGetChatUsers
PartyXblDestroyChatUser
PartyXblCreateRemoteChatUser
PartyXblCreateLocalChatUser
PartyXblCompleteGetTokenAndSignatureRequest
PartyXblFinishProcessingStateChanges
PartyXblStartProcessingStateChanges
PartyXblCleanup
PartyXblInitialize
steam_api64
SteamAPI_RegisterCallback
SteamAPI_ReleaseCurrentThreadMemory
SteamAPI_UnregisterCallResult
SteamAPI_RegisterCallResult
SteamAPI_RunCallbacks
SteamInternal_FindOrCreateUserInterface
SteamInternal_CreateInterface
SteamInternal_ContextInit
SteamAPI_GetHSteamUser
SteamAPI_RestartAppIfNecessary
SteamAPI_Shutdown
SteamAPI_Init
SteamAPI_UnregisterCallback
webview2loader
CompareBrowserVersions
GetAvailableCoreWebView2BrowserVersionString
CreateCoreWebView2EnvironmentWithOptions
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-core-winrt-error-l1-1-0
GetRestrictedErrorInfo
SetRestrictedErrorInfo
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
api-ms-win-core-winrt-error-l1-1-1
RoOriginateLanguageException
oleaut32
SysFreeString
SysStringLen
Exports
Exports
Sections
.text Size: 93.6MB - Virtual size: 93.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 34.8MB - Virtual size: 34.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 15.1MB - Virtual size: 18.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 5.0MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.detourc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.detourd Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 23.5MB - Virtual size: 23.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE