ForzaHorizon4[.]exe

Resubmissions

01/07/2026, 19:59

260701-yqpxnsdy8m10

01/07/2026, 19:55

260701-ym4awsfx7110

Sharing

Copy URL Twitter E-mail

General

Target
ForzaHorizon4.exe
Size 152.1MB
Sample260701-ym4awsfx71
SHA256 b838a79a65c6d1e12f46deaba3584e4c88ebccdfdc4214b4535ece4ba3c0abbe
MD5 9cd142955c5c7e4c5bac486709c66891
SHA1 b854427abf85715a052425262a4ecdf971167d2e
SHA512 60566016ba31218a80009a1b363ed973c356a144f661f522f3ac465fd02e1ff191f783fb5b496941a519a78beb0133adc5c2cef5b0d2b39eda561b81a20e6293
SSDEEP 1572864:CYyaVl+Bsr6asnmteN/erC4dnrGY+IBAvbV+rZWo4qjrImF:CYzlr6asnmYxerrGPIBAvJ+rZWSpF
TLSH
T16E78BE05BB81CDE1E41AD2759D6F82487662FC749F8187CB34EAB30D6E7E2C50E72825
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ForzaHorizon4.exe

File Explorer

ForzaHorizon4.exe

.exe 152.1MB

ForzaHorizon4.exe

IMPHASH d850446c4de91f0f2f3c95099d074582
SHA256 b838a79a65c6d1e12f46deaba3584e4c88ebccdfdc4214b4535ece4ba3c0abbe
MD5 9cd142955c5c7e4c5bac486709c66891
SHA1 b854427abf85715a052425262a4ecdf971167d2e
SHA512 60566016ba31218a80009a1b363ed973c356a144f661f522f3ac465fd02e1ff191f783fb5b496941a519a78beb0133adc5c2cef5b0d2b39eda561b81a20e6293
SSDEEP 1572864:CYyaVl+Bsr6asnmteN/erC4dnrGY+IBAvbV+rZWo4qjrImF:CYzlr6asnmYxerrGPIBAvJ+rZWSpF
TLSH
T16E78BE05BB81CDE1E41AD2759D6F82487662FC749F8187CB34EAB30D6E7E2C50E72825
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

46625148

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d:\scratch\p4\sunrise_rc\forza2\exe\Win64\Release_Final_Dx12\forzahorizon4.pdb

shlwapi

ord12 PathFileExistsA

ole32

CoGetApartmentType CoWaitForMultipleHandles CoCreateInstance CreateStreamOnHGlobal CoCreateInstanceEx PropVariantClear CoCreateGuid CoInitializeEx CoTaskMemFree CoTaskMemAlloc CoUninitialize StringFromGUID2 CLSIDFromString

commoneventlogginglibrary_release

?DestroyCellInternal@CellGlobal@CELL@i343@@CAXPEAVICell@details@23@@Z ?get_GlobalEventCreators@CELL@i343@@YAPEAPEAVIEventsCreator@12@XZ ?Get@CellGlobalAssertHandle@details@CELL@i343@@SAPEAVICellAssertHandle@34@XZ ?get_GlobalCellCategorySettings@CELL@i343@@YAPEA_KXZ ?get_GlobalCellPriorities@CELL@i343@@YAPEAEXZ ?Destroy@IEventsIterator@details@CELL@i343@@CAXPEAV1234@@Z ?CreateCellInternal@CellGlobal@CELL@i343@@CAPEAVICell@details@23@XZ ?Initialize@CellGlobal@CELL@i343@@SAXAEBUCellGlobalConfig@23@@Z ?Get@CellGlobalAllocator@details@CELL@i343@@SAPEAVICellAllocator@34@XZ

kernel32

GetModuleHandleA InitializeSListHead GetCurrentProcessId FormatMessageW LocalAlloc GetSystemDirectoryW GetUserDefaultLocaleName GetModuleFileNameW CreateProcessW SleepEx SetFileTime CreateThreadpoolWait SetThreadpoolWait WaitForThreadpoolWaitCallbacks CloseThreadpoolWait DisassociateCurrentThreadFromCallback CreateThreadpoolWork SubmitThreadpoolWork WaitForThreadpoolWorkCallbacks GetDateFormatEx CreateThreadpoolTimer SetThreadpoolTimer WaitForThreadpoolTimerCallbacks CloseThreadpoolTimer OutputDebugStringA GlobalFree VerSetConditionMask SetLastError CreateIoCompletionPort GetQueuedCompletionStatus PostQueuedCompletionStatus SetWaitableTimer CreateWaitableTimerW QueueUserAPC TerminateThread TlsAlloc TlsGetValue TlsSetValue TlsFree LocalFree FormatMessageA VerifyVersionInfoW CloseThreadpoolWork RtlLookupFunctionEntry RtlCaptureContext GetProcAddress GetModuleHandleW CreateEventW WaitForSingleObjectEx ResetEvent GetFileSizeEx GetFileSize DeleteFileW GetCurrentDirectoryW FindNextFileW InitializeCriticalSectionAndSpinCount CreateDirectoryW MultiByteToWideChar GetVersionExW GetSystemDefaultLocaleName GetStdHandle GetFileType GetModuleHandleExW FreeLibrary LoadLibraryA LoadLibraryW SwitchToFiber DeleteFiber CreateFiber ConvertFiberToThread ConvertThreadToFiber GetEnvironmentVariableW GetConsoleMode SetConsoleMode ReadConsoleA ReadConsoleW WideCharToMultiByte OutputDebugStringW CreateFileW WriteFile GetStartupInfoW GetFileAttributesA GetCurrentThread GetSystemWindowsDirectoryA VirtualQuery GetModuleFileNameA GetSystemDirectoryA K32GetModuleBaseNameA PackageIdFromFullName GetPackagePath SuspendThread FileTimeToLocalFileTime GetThreadContext SetThreadContext FlushInstructionCache VirtualAlloc VirtualProtect VirtualFree LoadLibraryExW SetThreadPriority GetThreadPriority DuplicateHandle CreateMutexA CreateEventExA OpenThread SetThreadPriorityBoost GetExitCodeThread GetThreadId GetThreadTimes GetSystemCpuSetInformation SetThreadSelectedCpuSets SetThreadAffinityMask CreateSemaphoreA CreateToolhelp32Snapshot Module32FirstW Module32NextW CreateFileA DeleteFileA FindFirstFileA FindFirstFileExA FindClose GetCommandLineW GetCurrentThreadId SetEvent GetLastError CreateMutexW ReleaseMutex SetUnhandledExceptionFilter K32GetProcessMemoryInfo FileTimeToSystemTime GetSystemTimeAsFileTime DeleteCriticalSection SystemTimeToFileTime CreateThread CloseHandle TryEnterCriticalSection GetSystemTime InitializeCriticalSection TerminateProcess CloseThreadpoolIo WaitForThreadpoolIoCallbacks CancelThreadpoolIo StartThreadpoolIo CreateThreadpoolIo FlsGetValue FlsAlloc GetSystemInfo GlobalMemoryStatusEx GetUserGeoID LocaleNameToLCID TryAcquireSRWLockShared TryAcquireSRWLockExclusive RemoveDirectoryW RemoveDirectoryA GetFileAttributesW GetDiskFreeSpaceExW CreateDirectoryA GetProcessHeap HeapFree HeapAlloc GetLargePageMinimum AcquireSRWLockShared ReleaseSRWLockShared WerRegisterFile IsProcessorFeaturePresent UnhandledExceptionFilter GetTimeFormatEx GetCurrentProcess GetLocalTime Sleep IsDebuggerPresent GetTickCount64 WaitForSingleObject ReleaseSemaphore SwitchToThread LeaveCriticalSection EnterCriticalSection RtlCaptureStackBackTrace ConvertThreadToFiberEx CreateFiberEx K32GetModuleInformation AcquireSRWLockExclusive GetTickCount WaitForMultipleObjectsEx CompareFileTime MoveFileExW CopyFile2 GetOverlappedResult CreateFile2 SetFilePointerEx SetFilePointer SetEndOfFile ReadFile GetFullPathNameW GetFileAttributesExA ReleaseSRWLockExclusive InitializeSRWLock QueryPerformanceFrequency QueryPerformanceCounter GetFileAttributesExW CopyFileW FlushFileBuffers FindNextFileA RtlVirtualUnwind ResumeThread CreateEventA SetFileAttributesW WaitForMultipleObjects CancelIo ReadDirectoryChangesW SetHandleInformation CreateSemaphoreW FindFirstFileW AddVectoredExceptionHandler RemoveVectoredExceptionHandler

user32

LoadImageW MonitorFromRect MonitorFromWindow GetMonitorInfoW RegisterClassW UpdateWindow CopyRect SetRect ClientToScreen GetCursor GetDC ReleaseDC GetDesktopWindow LoadBitmapW GetKeyNameTextW MapVirtualKeyW GetSystemMetrics GetRawInputDeviceList EnumDisplaySettingsW MonitorFromPoint GetDoubleClickTime GetActiveWindow GetKeyState SetCapture ReleaseCapture PeekMessageW AdjustWindowRectExForDpi GetClassLongPtrW GetDpiForWindow SetCursor ShowCursor GetWindowRect GetClientRect SetWindowTextW SetForegroundWindow GetAsyncKeyState IsZoomed IsIconic SetWindowPos ShowWindow DestroyWindow CreateWindowExW RegisterClassExW UnregisterClassW PostQuitMessage DefWindowProcW PostMessageW SendMessageTimeoutW SendMessageW DispatchMessageW TranslateMessage GetMessageW TrackMouseEvent MessageBoxW GetUserObjectInformationW GetProcessWindowStation LoadCursorW SystemParametersInfoW SetWindowLongW

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateString WindowsGetStringRawBuffer WindowsDeleteString

api-ms-win-gaming-tcui-l1-1-0

ShowProfileCardUI ShowPlayerPickerUI ProcessPendingGameUI

msvcp140

?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A ?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z ?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z ?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z ?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z ?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z ?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z ??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z ?toupper@?$ctype@D@std@@QEBADD@Z ?_Throw_Cpp_error@std@@YAXH@Z _Cnd_do_broadcast_at_thread_exit _Cnd_unregister_at_thread_exit _Cnd_register_at_thread_exit _Cnd_signal _Cnd_timedwait _Cnd_destroy _Cnd_init _Mtx_current_owns _Mtx_destroy _Mtx_init _Thrd_id _Thrd_join _Thrd_start ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAG@Z ?swap@?$basic_ostream@DU?$char_traits@D@std@@@std@@IEAAXAEAV12@@Z ?swap@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXAEAV12@@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z ?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_K@Z ?setf@ios_base@std@@QEAAHH@Z ?id@?$collate@_W@std@@2V0locale@2@A ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ ?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ ?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ _Lock_shared_ptr_spin_lock _Unlock_shared_ptr_spin_lock ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@F@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAF@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAJ@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAK@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_J@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z ?toupper@?$ctype@_W@std@@QEBA_W_W@Z ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAN@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAH@Z ??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ ??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@N@Z ?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?uncaught_exception@std@@YA_NXZ _Thrd_hardware_concurrency ?bad@ios_base@std@@QEBA_NXZ ?fail@ios_base@std@@QEBA_NXZ ?eof@ios_base@std@@QEBA_NXZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Xbad_alloc@std@@YAXXZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z ?tolower@?$ctype@_W@std@@QEBA_W_W@Z ?is@?$ctype@_W@std@@QEBA_NF_W@Z ?always_noconv@codecvt_base@std@@QEBA_NXZ ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?_BADOFF@std@@3_JB ?_Random_device@std@@YAIXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z ?__ExceptionPtrCreate@@YAXPEAX@Z ?__ExceptionPtrDestroy@@YAXPEAX@Z ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z ?__ExceptionPtrToBool@@YA_NPEBX@Z ?__ExceptionPtrCurrentException@@YAXPEAX@Z ?__ExceptionPtrRethrow@@YAXPEBX@Z ?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z _Mtx_init_in_situ _Mtx_destroy_in_situ _Mtx_lock _Mtx_unlock _Cnd_init_in_situ _Cnd_destroy_in_situ _Cnd_wait _Cnd_broadcast ?_Throw_C_error@std@@YAXH@Z ?_XGetLastError@std@@YAXXZ ?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z ?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z ?_ReportUnobservedException@details@Concurrency@@YAXXZ ?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ ?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z ?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ ?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ ?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ ??0task_continuation_context@Concurrency@@AEAA@XZ ?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z ?_Xlength_error@std@@YAXPEBD@Z ?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ??0_Lockit@std@@QEAA@H@Z ??1_Lockit@std@@QEAA@XZ ??Bid@locale@std@@QEAA_KXZ ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?widen@?$ctype@_W@std@@QEBA_WD@Z ?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z ?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ ?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ ?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z ?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z ?id@?$ctype@_W@std@@2V0locale@2@A ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z _Xtime_get_ticks ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z _Query_perf_counter _Query_perf_frequency ??Bios_base@std@@QEBA_NXZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z ?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z ??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z ??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?classic@locale@std@@SAAEBV12@XZ ?_Syserror_map@std@@YAPEBDH@Z ?_Winerror_map@std@@YAHH@Z ?_Winerror_message@std@@YAKKPEADK@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ ?_Incref@facet@locale@std@@UEAAXXZ ?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A _Thrd_sleep ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z ?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ ?tellp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z _Strcoll _Strxfrm ??0_Locinfo@std@@QEAA@PEBD@Z ??1_Locinfo@std@@QEAA@XZ ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ ?c_str@?$_Yarn@D@std@@QEBAPEBDXZ ??0facet@locale@std@@IEAA@_K@Z ??1facet@locale@std@@MEAA@XZ ?is@?$ctype@D@std@@QEBA_NFD@Z ?tolower@?$ctype@D@std@@QEBADD@Z ?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z ?id@?$ctype@D@std@@2V0locale@2@A ?_Xbad_function_call@std@@YAXXZ ?_Xout_of_range@std@@YAXPEBD@Z ?_Xinvalid_argument@std@@YAXPEBD@Z ?uncaught_exceptions@std@@YAHXZ ?good@ios_base@std@@QEBA_NXZ ?flags@ios_base@std@@QEBAHXZ ?width@ios_base@std@@QEBA_JXZ ?width@ios_base@std@@QEAA_J_J@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ _Wcsxfrm _Wcscoll ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@G@Z ?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z ?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z ?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ ?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ?setf@ios_base@std@@QEAAHHH@Z ?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z ?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z ?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z ?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ ?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ ?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ ?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z ?id@?$collate@D@std@@2V0locale@2@A

ws2_32

WSAGetLastError WSAIoctl WSARecv WSACleanup WSASocketW WSAAddressToStringW WSAStringToAddressW getaddrinfo freeaddrinfo gethostbyname WSAStartup shutdown ntohs ntohl htons htonl gethostname inet_ntop recv inet_addr gethostbyaddr recvfrom sendto WSARecvFrom WSASendTo inet_ntoa setsockopt send select listen getsockopt getsockname getpeername ioctlsocket connect closesocket WSASetLastError getnameinfo inet_pton socket accept WSASend bind __WSAFDIsSet

vcruntime140

_set_purecall_handler _purecall memmove __CxxFrameHandler3 memcpy memset __RTDynamicCast __std_terminate _CxxThrowException memchr __std_exception_copy __std_exception_destroy memcmp __std_type_info_compare wcschr strchr strstr wcsstr __vcrt_InitializeCriticalSectionEx __C_specific_handler wcsrchr __std_type_info_name __RTtypeid strrchr

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo _errno _endthreadex _configure_narrow_argv __sys_nerr strerror exit _initialize_narrow_environment _register_thread_local_exe_atexit_callback _c_exit _exit _set_invalid_parameter_handler _initterm_e _initterm _initialize_onexit_table _register_onexit_function strerror_s _get_narrow_winmain_command_line raise _set_app_type _wassert signal _beginthreadex _crt_atexit _cexit terminate _seh_filter_exe _invalid_parameter_noinfo_noreturn

api-ms-win-crt-string-l1-1-0

wcsnlen _stricmp strcpy_s wcsncpy_s towupper strpbrk isspace isdigit isalpha _isctype_l tolower strcspn _wcsupr wcscpy_s wcstok_s strcmp strnlen _wcsicmp _wcsnicmp isupper iswspace towlower strncpy strncmp iswascii _strnicmp isalnum strcat_s wcsncmp wcspbrk wcsncpy wcscat_s toupper strspn iswalnum iswalpha strncpy_s _strdup isxdigit

api-ms-win-crt-convert-l1-1-0

strtod _ui64toa_s _i64toa_s strtoll _ui64tow_s _i64tow_s _wtoi _atoi64 mbstowcs _wcstod_l strtoul _wcstoui64 wcstol strtoull wcstoull _itow_s _strtoui64_l atof _strtoui64 wcstombs strtof wcstoul atol atoi _strtoi64_l strtol _itoa_s _strtod_l

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s feof ferror fgets __stdio_common_vswprintf _set_fmode ftell _setmode __p__commode fseek _wfopen _fileno ungetc setvbuf fwrite _fseeki64 fsetpos fread fputc __stdio_common_vswscanf __stdio_common_vfwprintf fgetpos fgetc fopen fflush fputs __acrt_iob_func __stdio_common_vsprintf __stdio_common_vsprintf_s __stdio_common_vsscanf __stdio_common_vfprintf _get_stream_buffer_pointers fopen_s __stdio_common_vswprintf_s fclose __stdio_common_vsnwprintf_s

api-ms-win-crt-math-l1-1-0

tanf fmodf atan2f sin exp2f logf atan2 cos fmod cosf _finitef log2f _fdtest _isnan pow _finite atanf fmaxf asinf ceil log10 round fmin __setusermatherr roundf _dtest expf modff ldexp acosf sinf _isnanf acos powf log10f log tanhf sqrt

api-ms-win-crt-utility-l1-1-0

qsort srand ldiv rand div

api-ms-win-crt-heap-l1-1-0

malloc realloc free _malloc_base _free_base _aligned_malloc _aligned_free _set_new_mode calloc

api-ms-win-crt-time-l1-1-0

_gmtime64_s _difftime64 clock _gmtime64 _localtime64_s _time64

api-ms-win-crt-filesystem-l1-1-0

_access remove _unlock_file _splitpath _lock_file _stat64i32 _splitpath_s _wremove _makepath_s _makepath _stat64

api-ms-win-crt-locale-l1-1-0

__pctype_func _create_locale _free_locale _configthreadlocale

concrt140

??0critical_section@Concurrency@@QEAA@XZ ??0scoped_lock@critical_section@Concurrency@@QEAA@AEAV12@@Z ??1scoped_lock@critical_section@Concurrency@@QEAA@XZ ?_Byte_reverse_table@details@Concurrency@@3QBEB ?_Internal_push@_Concurrent_queue_base_v4@details@Concurrency@@IEAAXPEBX@Z ??1critical_section@Concurrency@@QEAA@XZ ??1_Concurrent_queue_iterator_base_v4@details@Concurrency@@IEAA@XZ ?_Advance@_Concurrent_queue_iterator_base_v4@details@Concurrency@@IEAAXXZ ??0_Concurrent_queue_iterator_base_v4@details@Concurrency@@IEAA@AEBV_Concurrent_queue_base_v4@12@@Z ?_Internal_size@_Concurrent_queue_base_v4@details@Concurrency@@IEBA_KXZ ?_Internal_clear@_Concurrent_vector_base_v4@details@Concurrency@@IEAA_KP6AXPEAX_K@Z@Z ?_Internal_push_back@_Concurrent_vector_base_v4@details@Concurrency@@IEAAPEAX_KAEA_K@Z ?_Internal_capacity@_Concurrent_vector_base_v4@details@Concurrency@@IEBA_KXZ ?_Internal_reserve@_Concurrent_vector_base_v4@details@Concurrency@@IEAAX_K00@Z ?_Segment_index_of@_Concurrent_vector_base_v4@details@Concurrency@@KA_K_K@Z ??1_Concurrent_vector_base_v4@details@Concurrency@@IEAA@XZ ?_Internal_throw_exception@_Concurrent_queue_base_v4@details@Concurrency@@IEBAXXZ ?_Internal_finish_clear@_Concurrent_queue_base_v4@details@Concurrency@@IEAAXXZ ?_Internal_empty@_Concurrent_queue_base_v4@details@Concurrency@@IEBA_NXZ ?_Internal_pop_if_present@_Concurrent_queue_base_v4@details@Concurrency@@IEAA_NPEAX@Z ??1_Concurrent_queue_base_v4@details@Concurrency@@MEAA@XZ ??0_Concurrent_queue_base_v4@details@Concurrency@@IEAA@_K@Z ?_Internal_move_push@_Concurrent_queue_base_v4@details@Concurrency@@IEAAXPEAX@Z

shell32

ShellExecuteExW

steam_api64

SteamAPI_GetHSteamUser SteamAPI_UnregisterCallback SteamAPI_RegisterCallResult SteamInternal_CreateInterface SteamAPI_Init SteamInternal_FindOrCreateUserInterface SteamAPI_RegisterCallback SteamAPI_UnregisterCallResult SteamInternal_ContextInit SteamAPI_Shutdown SteamAPI_RestartAppIfNecessary SteamAPI_ReleaseCurrentThreadMemory SteamAPI_RunCallbacks

partywin

ord61 ord92 ord60 ord62 ord89 ord138 ord59 ord99 ord63 ord134 ord91 ord141 ord143 ord142 ord49 ord28 ord41 ord25 ord32 ord51 ord50 ord46 ord55 ord57 ord58 ord56 ord24 ord42 ord22 ord47 ord17 ord45 ord35 ord53 ord115 ord109 ord123 ord129 ord110 ord108 ord65 ord107 ord90

partyxboxlive

PartyXblGetEntityIdsFromXboxLiveUserIds PartyXblLoginToPlayFab PartyXblGetChatUsers PartyXblDestroyChatUser PartyXblCreateRemoteChatUser PartyXblCreateLocalChatUser PartyXblCompleteGetTokenAndSignatureRequest PartyXblFinishProcessingStateChanges PartyXblStartProcessingStateChanges PartyXblCleanup PartyXblInitialize PartyXblGetErrorMessage PartyXblLocalChatUserGetRequiredChatPermissionInfo PartyXblLocalChatUserGetAccessibilitySettings PartyXblChatUserGetCustomContext PartyXblChatUserSetCustomContext PartyXblChatUserGetXboxUserId

bcrypt

BCryptHashData BCryptFinishHash BCryptDestroyHash BCryptGetProperty BCryptSetProperty BCryptEncrypt BCryptSignHash BCryptGenerateSymmetricKey BCryptCreateHash BCryptFinalizeKeyPair BCryptImportKeyPair BCryptDecrypt BCryptExportKey BCryptGenerateKeyPair BCryptOpenAlgorithmProvider BCryptCloseAlgorithmProvider BCryptGenRandom BCryptDestroyKey

winhttp

WinHttpQueryHeaders WinHttpReceiveResponse WinHttpSendRequest WinHttpAddRequestHeaders WinHttpOpenRequest WinHttpSetTimeouts WinHttpSetOption WinHttpQueryOption WinHttpQueryDataAvailable WinHttpWriteData WinHttpReadData WinHttpConnect WinHttpCloseHandle WinHttpOpen WinHttpSetStatusCallback WinHttpGetProxyForUrl WinHttpGetIEProxyConfigForCurrentUser

crypt32

CertCreateCertificateContext CertAddCertificateContextToStore CertFreeCertificateChainEngine CertCreateCertificateChainEngine CryptQueryObject CertGetNameStringA CertCloseStore CertOpenSystemStoreW CertFreeCertificateChain CertFindChainInStore CertFreeCertificateContext CertGetCertificateChain CertOpenStore CertEnumCertificatesInStore CertFindCertificateInStore CertDuplicateCertificateContext CertGetCertificateContextProperty CryptStringToBinaryA

bink2w64

BinkUtilMalloc BinkGetRealtime BinkSetWillLoop BinkGetFrameBuffersInfo BinkWaitStopAsyncThread BinkRequestStopAsyncThread BinkClose BinkWait BinkPause BinkGetPlatformInfo BinkNextFrame BinkSetOSFileCallbacks BinkOpen BinkSetSpeakerVolumes BinkUtilFree BinkDoFrameAsyncWait BinkOpenXAudio2 BinkRegisterFrameBuffers BinkSetSoundSystem2 BinkStartAsyncThread BinkShouldSkip BinkDoFrameAsync BinkSetSoundTrack

xinput1_3

ord4 ord3 ord2

amd_ags_x64

agsDriverExtensionsDX12_CreateDevice agsInit

advapi32

RegGetValueA RegGetValueW CryptEnumProvidersW CryptSignHashW CryptDecrypt CryptExportKey CryptGetUserKey CryptGetProvParam CryptSetHashParam CryptDestroyKey ReportEventW RegisterEventSourceW RegQueryValueExA RegQueryInfoKeyA RegOpenKeyExA DeregisterEventSource CryptDestroyHash CryptHashData CryptCreateHash CryptGetHashParam CryptReleaseContext LookupAccountSidW IsValidSid GetTokenInformation OpenProcessToken RegQueryValueExW RegOpenKeyExW RegCloseKey CredFree CredDeleteW RegEnumKeyExA CredEnumerateW CredWriteW EventSetInformation EventUnregister EventRegister CryptGenRandom CryptAcquireContextW

api-ms-win-shcore-scaling-l1-1-1

GetProcessDpiAwareness

api-ms-win-core-version-l1-1-0

GetFileVersionInfoSizeExW GetFileVersionInfoExW VerQueryValueW

d3d12

D3D12SerializeVersionedRootSignature ord101

dxgi

CreateDXGIFactory2 CreateDXGIFactory1

api-ms-win-core-memory-l1-1-3

VirtualAllocFromApp

iphlpapi

GetAdaptersInfo

api-ms-win-core-synch-l1-1-0

InitializeCriticalSectionEx

api-ms-win-core-kernel32-legacy-l1-1-2

VerifyVersionInfoA

api-ms-win-security-cryptoapi-l1-1-0

CryptAcquireContextA

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsA

dinput8

DirectInput8Create

winmm

waveInUnprepareHeader waveInAddBuffer waveInStart waveInReset timeGetTime waveOutGetDevCapsW waveOutOpen waveOutClose waveOutPrepareHeader waveInClose waveOutUnprepareHeader waveOutWrite waveOutReset waveOutGetPosition waveInGetNumDevs waveInGetDevCapsW waveInPrepareHeader waveOutGetNumDevs waveInOpen

msacm32

acmStreamPrepareHeader acmStreamConvert acmStreamSize acmStreamOpen acmFormatSuggest acmStreamUnprepareHeader

api-ms-win-crt-environment-l1-1-0

getenv

gdi32

BitBlt CreateCompatibleDC GetStockObject GetObjectW SelectObject DeleteObject DeleteDC

libcef

cef_string_utf16_set cef_string_utf16_clear cef_string_utf8_to_utf16 cef_string_multimap_free cef_string_multimap_alloc cef_string_map_free cef_string_map_alloc cef_log cef_string_list_alloc cef_string_list_free cef_cookie_manager_get_global_manager cef_browser_host_create_browser cef_string_userfree_utf16_free cef_currently_on cef_post_task cef_initialize cef_shutdown cef_enable_highdpi_support cef_api_hash cef_string_utf16_cmp cef_string_list_size cef_string_list_value cef_string_list_append cef_string_map_size cef_string_map_key cef_string_map_value cef_string_map_append cef_string_multimap_size cef_string_multimap_key cef_string_multimap_value cef_string_multimap_append

xrnm

XrnmGetEvent XrnmSend XrnmDenyInboundLink XrnmCreateInboundLink XrnmAllowInboundLinkRequests XrnmConvertStringToAddress XrnmReturnEvent XrnmCloseHandle XrnmTerminateLink XrnmCreateOutboundLink

Name

.text

Size

75.7MB

Virtual Size

75.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

39.9MB

Virtual Size

39.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

10.7MB

Virtual Size

13.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4.5MB

Virtual Size

4.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

38KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.detourc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.detourd

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

582KB

Virtual Size

582KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

52KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

18.9MB

Virtual Size

18.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

generic

count=124, id=261, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=7, id=260, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=28, id=260, productName=VS2015 UPD1 build 23506, version=23506,

count=2, id=257, version=25711,

count=493, id=261, version=25019,

count=2, id=257, version=24245,

count=2, id=257, version=27043,

count=122, id=261, version=27043,

count=2, productName=Unmarked objects (old),

count=565, id=260, version=27040,

count=228, id=261, version=27040,

count=2, id=257, productName=VS2017 v15.7.1 build 26428, version=26428,

count=1, id=263, version=26715,

count=3, id=260, version=26715,

count=6, id=265, version=25830,

count=246, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,

count=36, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,

count=1, id=261, version=26715,

count=6, id=257, version=25810,

count=6, id=199, version=41118,

count=20, id=259, version=25810,

count=34, id=261, version=25810,

count=13, id=260, version=25810,

count=11, id=170, productName=VS2010 SP1 build 40219, version=40219,

count=122, id=261, version=24234,

count=72, id=260, version=27032,

count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=11, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,

count=2, id=156, productName=VS2010 build 30319, version=30319,

count=50, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=2, id=257, productName=VS2015 UPD2 build 23918, version=23918,

count=2, id=262, version=26715,

count=29, id=257, version=26715,

count=1452, id=1, productName=Unmarked objects,

count=637, id=261, version=25830,

count=1, id=256, version=25830,

count=1, id=255, version=25830,

count=2, id=151,

count=1, id=258, version=25830,