toutpourTF2[.]rar | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
toutpourTF2.rar
Size 1.5MB
Sample260712-mrrbcaas2w
SHA256 814b68e864b75bdf7edfa5428f5265aaf029080667f8b877b62adb018974ed95
MD5 0a8692172a2230951ea2c95bb976adb7
SHA1 afeee62f672257340ee0fbc9d6b6375be2f106d7
SHA512 0e356526f3b78e2ab0b71871023b17d777dcce024715a05dbf82014d3a4a3cfca79b3887f957e0cc1182fcfafb15e5853cd3377173e881c6182e6f6c789b8084
SSDEEP 24576:q0gTjoahnBmXiP7BwWRxqbJIRVXPKEUNN9dV1IsRnVuOlNy92m3/7YCX7:qVjlnBeijdKSXQznpnlNc3fL
TLSH
T1877533A829C73B371AA647C8E945905DEEB4162AB8FFB3D4C1FE390050F121ED39B591
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Asuna.dll
unpack001/TF2dx64.exe

File Explorer

toutpourTF2.rar

.rar 1.5MB
Asuna.dll

.dll 2.9MB
TF2dx.log

6KB
TF2dx64.exe

.exe 937KB
TF2dxCurrentProfile.xpr

485B
asu triggerbot only (main).json

37KB
asuna smooth.json

36KB
injprofilesettings.xpr64

485B

toutpourTF2.rar

SHA256 814b68e864b75bdf7edfa5428f5265aaf029080667f8b877b62adb018974ed95
MD5 0a8692172a2230951ea2c95bb976adb7
SHA1 afeee62f672257340ee0fbc9d6b6375be2f106d7
SHA512 0e356526f3b78e2ab0b71871023b17d777dcce024715a05dbf82014d3a4a3cfca79b3887f957e0cc1182fcfafb15e5853cd3377173e881c6182e6f6c789b8084
SSDEEP 24576:q0gTjoahnBmXiP7BwWRxqbJIRVXPKEUNN9dV1IsRnVuOlNy92m3/7YCX7:qVjlnBeijdKSXQznpnlNc3fL
TLSH
T1877533A829C73B371AA647C8E945905DEEB4162AB8FFB3D4C1FE390050F121ED39B591
MD5 SHA1 SHA512 SSDEEP TLSH

Asuna.dll

IMPHASH b87b05f7592634ee5be53e9b6edd66c2
SHA256 700711af3c7892df25bdd71b1ba8eeaf217fd19e080705cf2ba462461aa8f6ca
MD5 5380e58fb0c63a97ec2df853b29345fc
SHA1 0f243ecc859c0bf13df025a58b66b641163da4c3
SHA512 95f60e4f325244d6ce1d126ac7dcd5397b07ccd7bf8d1fd8af001db09053789f3839a0c240bbe92414e74d78d9f1d1fd19f7a5abb08b58fc958033dcb4dc152c
SSDEEP 49152:TjwfAgzKpBIGscW8nf4FbRjHnJyLoeRohOCBAAE5bBcnwDVJ7:gYVTC
TLSH
T19BE5BF22E29800CDC93AD0B4C63BEB12F67A744193366FDB2558696A1F37BE5177E700
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2071696

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\dxliv\Desktop\Amalgam-master\output\x64\ReleaseAVX2\Amalgamx64ReleaseAVX2.pdb

kernel32

LoadLibraryA QueryPerformanceFrequency IsDBCSLeadByte GetProcAddress QueryPerformanceCounter VirtualFree VirtualAlloc GetSystemInfo VirtualQuery HeapCreate VirtualProtect HeapFree GetCurrentProcess Thread32Next Thread32First GetCurrentThreadId SuspendThread ResumeThread CreateToolhelp32Snapshot Sleep GetLastError HeapReAlloc CloseHandle HeapAlloc HeapDestroy GetThreadContext GetCurrentProcessId FlushInstructionCache SetThreadContext OpenThread OpenProcess K32GetModuleBaseNameA FreeLibraryAndExitThread CreateThread RemoveVectoredExceptionHandler GetCurrentThread AddVectoredExceptionHandler GetLocaleInfoA K32GetModuleInformation OutputDebugStringA InitOnceBeginInitialize InitOnceComplete GetLocaleInfoEx FormatMessageA LocalFree CreateSymbolicLinkW GetFileInformationByHandleEx CopyFile2 DeviceIoControl AreFileApisANSI CreateFile2 SetFileInformationByHandle GetFileInformationByHandle GetFileAttributesExW FindNextFileW FindFirstFileExW FindFirstFileW FindClose CreateDirectoryW GetCurrentDirectoryW InitializeSListHead GetSystemTimeAsFileTime SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive GetModuleHandleA GlobalUnlock WideCharToMultiByte GlobalLock ReleaseSRWLockExclusive GlobalFree GlobalAlloc MultiByteToWideChar GetModuleHandleExA

user32

GetKeyState DefWindowProcW CloseClipboard GetCapture GetKeyNameTextA ToUnicodeEx MapVirtualKeyExA GetWindowThreadProcessId GetWindowTextA EnumWindows wsprintfW GetMessageExtraInfo ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow SetCapture SetCursor GetClientRect GetAsyncKeyState SetWindowLongPtrA LoadCursorA IsWindowUnicode ReleaseCapture SetCursorPos GetCursorPos CallWindowProcA OpenClipboard ScreenToClient EmptyClipboard MessageBoxA SetClipboardData GetClipboardData

shell32

ShellExecuteW ShellExecuteA

imm32

ImmGetContext ImmReleaseContext ImmSetCandidateWindow ImmSetCompositionWindow

msvcp140

__crtLCMapStringA ?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ ?tolower@?$ctype@D@std@@QEBADD@Z _Strcoll ?_Xlength_error@std@@YAXPEBD@Z ?_Xbad_alloc@std@@YAXXZ ?_Xout_of_range@std@@YAXPEBD@Z ?_Xbad_function_call@std@@YAXXZ _Xtime_get_ticks ?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z ?_Id_cnt@id@locale@std@@0HA ?id@?$numpunct@D@std@@2V0locale@2@A ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1facet@locale@std@@MEAA@XZ ??0facet@locale@std@@IEAA@_K@Z ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ ?_Incref@facet@locale@std@@UEAAXXZ ?_Gettrue@_Locinfo@std@@QEBAPEBDXZ ?_Getfalse@_Locinfo@std@@QEBAPEBDXZ ?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ ??1_Locinfo@std@@QEAA@XZ ??0_Locinfo@std@@QEAA@PEBD@Z ?uncaught_exceptions@std@@YAHXZ ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z _Mtx_init_in_situ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?good@ios_base@std@@QEBA_NXZ ?always_noconv@codecvt_base@std@@QEBA_NXZ ?_Xinvalid_argument@std@@YAXPEBD@Z ?_Winerror_map@std@@YAHH@Z ?id@?$ctype@D@std@@2V0locale@2@A ?_Syserror_map@std@@YAPEBDH@Z ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_N@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ ?bad@ios_base@std@@QEBA_NXZ ?fail@ios_base@std@@QEBA_NXZ ?eof@ios_base@std@@QEBA_NXZ ??7ios_base@std@@QEBA_NXZ ??Bios_base@std@@QEBA_NXZ ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?_Throw_Cpp_error@std@@YAXH@Z _Mtx_lock _Mtx_unlock _Strxfrm ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z ?id@?$collate@D@std@@2V0locale@2@A

imagehlp

SymFunctionTableAccess64 SymInitialize SymGetModuleBase64 SymCleanup SymGetSymFromAddr64 StackWalk64 SymSetOptions SymGetLineFromAddr64

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_type_info_compare memset memmove memcpy memcmp memchr __std_terminate __std_type_info_destroy_list _CxxThrowException __std_exception_destroy __std_exception_copy __current_exception_context __current_exception __RTtypeid __C_specific_handler strstr __std_type_info_hash _purecall strchr

api-ms-win-crt-stdio-l1-1-0

ftell __acrt_iob_func fflush fclose fseek __stdio_common_vfprintf fwrite _wfopen __stdio_common_vsprintf fread __stdio_common_vsprintf_s _get_stream_buffer_pointers _fseeki64 fsetpos ungetc setvbuf fgetpos fgetc fputc __stdio_common_vsscanf

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

free _callnewh realloc malloc calloc

api-ms-win-crt-convert-l1-1-0

strtof strtol atof strtoul

api-ms-win-crt-string-l1-1-0

isblank strncpy_s tolower toupper isspace strncpy wcslen strncmp strlen strcmp

api-ms-win-crt-math-l1-1-0

fmaxf remainderf _ldsign _dsign fmodf log log10 logf roundf powf sinf sqrtf _hypotf fminf atanf acosf nextafterf tanf pow atan2f _fdsign cosf

api-ms-win-crt-filesystem-l1-1-0

_unlock_file _lock_file

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv abort _errno _initterm_e _initialize_narrow_environment _initterm terminate _cexit _crt_atexit _execute_onexit_table _register_onexit_function _initialize_onexit_table _seh_filter_dll

api-ms-win-crt-time-l1-1-0

_localtime64_s strftime _time64

api-ms-win-crt-locale-l1-1-0

___lc_collate_cp_func ___lc_codepage_func ___lc_locale_name_func

TF2dx64.exe

IMPHASH 67b317a1f05e091b185f43ccda61fb50
SHA256 7510c80d696c86413a693a8202fba2266037cfcdbda40edbbbbc64a3f9d1d471
MD5 b388f9b45f55115294b8237fa69e910c
SHA1 884105c576514054a0eac20cca1bfb2160b53422
SHA512 b6f06e3211dcca8979e3d2486430c6d45f6e0d08732089cdc99de2349047753508dcf2e70a247c243e2e4ccc2412685c4fd98addb94b9a34ce65eb52e26ca01d
SSDEEP 24576:KaocZBVUvIetBVyHb5sUo9v/tnW9YdlorMyj3:KadB2vIetzqJ8goox3
TLSH
T119159E15B6A841F8E177D2748E964A16EBB3BC46073197DB03D0966BAF37AE04E3D301
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

424880

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\dxliv\Desktop\Xenos-2.3.2\build\x64\Release\TF2dx64.pdb

shlwapi

SHDeleteKeyW SHSetValueW

dbghelp

MiniDumpWriteDump

kernel32

GetWindowsDirectoryW CreateProcessW GetCurrentProcess GetModuleFileNameW WaitForSingleObject GetCurrentThreadId Sleep CreateThread GetLocalTime ExitProcess GetCurrentProcessId SetUnhandledExceptionFilter FlushFileBuffers GetFileAttributesW ResumeThread GetCommandLineW GetNativeSystemInfo FindResourceW LoadResource CloseHandle DeleteFileW LockResource Wow64RevertWow64FsRedirection CreateFileW Wow64DisableWow64FsRedirection WriteFile VirtualProtect SetEndOfFile WriteConsoleW HeapSize SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA FindNextFileW FindFirstFileExW FindClose GetOEMCP GetACP IsValidCodePage HeapReAlloc GetTimeZoneInformation ReadConsoleW EnumSystemLocalesW SizeofResource GetModuleHandleW TerminateThread GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW EnterCriticalSection LeaveCriticalSection InitializeCriticalSection MultiByteToWideChar FormatMessageW LocalFree DeleteCriticalSection WideCharToMultiByte DeviceIoControl GetSystemTimeAsFileTime QueryPerformanceCounter VirtualFree VirtualAlloc TerminateProcess CreateToolhelp32Snapshot Process32NextW Process32FirstW GetExitCodeProcess Thread32Next Thread32First CreateActCtxW GetTempPathW UnmapViewOfFile GetTempFileNameW CreateFileMappingW ReleaseActCtx MapViewOfFile DuplicateHandle GetCurrentThread ResetEvent GetTickCount GetLastError GetProcAddress GetSystemInfo VirtualAllocEx VirtualFreeEx ActivateActCtx GetEnvironmentVariableW GetSystemDirectoryW DeactivateActCtx GetSystemWow64DirectoryW Module32FirstW GetCurrentDirectoryW ReadFile CreateNamedPipeW RtlUnwind GetExitCodeThread OpenProcess IsWow64Process SuspendThread GetThreadTimes OpenThread WriteProcessMemory VirtualProtectEx GetThreadContext ReadProcessMemory CreateRemoteThread SetThreadContext VirtualQueryEx InitializeCriticalSectionEx LoadLibraryW GetStringTypeW WaitForSingleObjectEx ReleaseSRWLockExclusive AcquireSRWLockExclusive EncodePointer DecodePointer LCMapStringEx WakeAllConditionVariable SleepConditionVariableSRW GetCPInfo GetStartupInfoW InitializeSListHead RtlLookupFunctionEntry RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree ExitThread FreeLibrary FreeLibraryAndExitThread GetModuleHandleExW IsProcessorFeaturePresent GetStdHandle RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter GetFileSizeEx SetFilePointerEx GetFileType HeapAlloc GetConsoleOutputCP GetConsoleMode HeapFree LoadLibraryExW

user32

CreateWindowExW DestroyIcon LoadIconW ChangeWindowMessageFilterEx EnableMenuItem wsprintfW GetMessageW CreateDialogParamW CallWindowProcW GetMenu MessageBoxW SetWindowLongPtrW SendMessageW EndDialog SetWindowTextW LoadAcceleratorsW ShowWindow IsWindow DispatchMessageW IsDialogMessageW TranslateAcceleratorW TranslateMessage SendMessageA GetDlgItem DialogBoxParamW EnableWindow GetWindowTextW DestroyWindow

comdlg32

GetOpenFileNameW GetSaveFileNameW

shell32

DragQueryFileW CommandLineToArgvW

ole32

CoUninitialize CoCreateInstance CoInitialize

advapi32

RegCreateKeyW RegOpenKeyExW RegEnumValueW LookupPrivilegeValueW AdjustTokenPrivileges OpenThreadToken RegOpenKeyW OpenProcessToken RegSetValueExW RegCloseKey ConvertStringSecurityDescriptorToSecurityDescriptorW RegQueryValueExW

oleaut32

SysFreeString

??0Assembler@asmjit@@QEAA@PEAURuntime@1@@Z ??0CodeGen@asmjit@@QEAA@PEAURuntime@1@@Z ??0HostRuntime@asmjit@@QEAA@XZ ??0JitRuntime@asmjit@@QEAA@XZ ??0Runtime@asmjit@@QEAA@XZ ??0StaticRuntime@asmjit@@QEAA@PEAX_K@Z ??0VMemMgr@asmjit@@QEAA@PEAX@Z ??0X86Assembler@asmjit@@QEAA@PEAURuntime@1@I@Z ??0Zone@asmjit@@QEAA@_K@Z ??1Assembler@asmjit@@UEAA@XZ ??1CodeGen@asmjit@@UEAA@XZ ??1HostRuntime@asmjit@@UEAA@XZ ??1JitRuntime@asmjit@@UEAA@XZ ??1Runtime@asmjit@@UEAA@XZ ??1StaticRuntime@asmjit@@UEAA@XZ ??1VMemMgr@asmjit@@QEAA@XZ ??1X86Assembler@asmjit@@UEAA@XZ ??1Zone@asmjit@@QEAA@XZ ??_FVMemMgr@asmjit@@QEAAXXZ ?_alloc@Zone@asmjit@@QEAAPEAX_K@Z ?_emit@X86Assembler@asmjit@@UEAAIIAEBUOperand@2@000@Z ?_grow@Assembler@asmjit@@QEAAI_K@Z ?_grow@PodVectorBase@asmjit@@IEAAI_K0@Z ?_newLabel@Assembler@asmjit@@QEAAIPEAULabel@2@@Z ?_newLabelLink@Assembler@asmjit@@QEAAPEAULabelLink@2@XZ ?_nullData@PodVectorBase@asmjit@@2UPodVectorData@2@B ?_registerIndexedLabels@Assembler@asmjit@@QEAAI_K@Z ?_relocCode@X86Assembler@asmjit@@UEBA_KPEAX_K@Z ?_reserve@Assembler@asmjit@@QEAAI_K@Z ?_reserve@PodVectorBase@asmjit@@IEAAI_K0@Z ?_x86CondToCmovcc@asmjit@@3QBIB ?_x86CondToJcc@asmjit@@3QBIB ?_x86CondToSetcc@asmjit@@3QBIB ?_x86InstExtendedInfo@asmjit@@3QBUX86InstExtendedInfo@1@B ?_x86InstInfo@asmjit@@3QBUX86InstInfo@1@B ?_x86ReverseCond@asmjit@@3QBIB ?add@JitRuntime@asmjit@@UEAAIPEAPEAXPEAUAssembler@2@@Z ?add@StaticRuntime@asmjit@@UEAAIPEAPEAXPEAUAssembler@2@@Z ?align@X86Assembler@asmjit@@UEAAIII@Z ?alloc@VMemMgr@asmjit@@QEAAPEAX_KI@Z ?alloc@VMemUtil@asmjit@@SAPEAX_KPEA_KI@Z ?allocProcessMemory@VMemUtil@asmjit@@SAPEAXPEAX_KPEA_KI@Z ?allocZeroed@Zone@asmjit@@QEAAPEAX_K@Z ?bind@Assembler@asmjit@@UEAAIAEBULabel@2@@Z ?callCpuId@X86CpuUtil@asmjit@@SAXIIPEATX86CpuId@2@@Z ?detect@X86CpuUtil@asmjit@@SAXPEAUX86CpuInfo@2@@Z ?detectHwThreadsCount@CpuInfo@asmjit@@SAIXZ ?dup@Zone@asmjit@@QEAAPEAXPEBX_K@Z ?embed@Assembler@asmjit@@UEAAIPEBXI@Z ?embedLabel@X86Assembler@asmjit@@QEAAIAEBULabel@2@@Z ?emit@Assembler@asmjit@@QEAAII@Z ?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@00@Z ?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@00H@Z ?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@00_K@Z ?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@0@Z ?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@0H@Z ?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@0_K@Z ?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@@Z ?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@H@Z ?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@_K@Z ?emit@Assembler@asmjit@@QEAAIIH@Z ?emit@Assembler@asmjit@@QEAAII_K@Z ?flush@HostRuntime@asmjit@@UEAAXPEAX_K@Z ?getCpuInfo@HostRuntime@asmjit@@UEAAPEBUCpuInfo@2@XZ ?getHost@CpuInfo@asmjit@@SAPEBU12@XZ ?getPageGranularity@VMemUtil@asmjit@@SA_KXZ ?getPageSize@VMemUtil@asmjit@@SA_KXZ ?getStackAlignment@HostRuntime@asmjit@@UEAAIXZ ?make@Assembler@asmjit@@UEAAPEAXXZ ?noOperand@asmjit@@3UOperand@1@B ?ptr_abs@x86@asmjit@@YA?AUX86Mem@2@_KAEBUX86Reg@2@IHI@Z ?ptr_abs@x86@asmjit@@YA?AUX86Mem@2@_KHI@Z ?release@JitRuntime@asmjit@@UEAAIPEAX@Z ?release@StaticRuntime@asmjit@@UEAAIPEAX@Z ?release@VMemMgr@asmjit@@QEAAIPEAX@Z ?release@VMemUtil@asmjit@@SAIPEAX_K@Z ?releaseProcessMemory@VMemUtil@asmjit@@SAIPEAX0_K@Z ?relocCode@Assembler@asmjit@@QEBA_KPEAX_K@Z ?reset@Assembler@asmjit@@QEAAX_N@Z ?reset@PodVectorBase@asmjit@@QEAAX_N@Z ?reset@VMemMgr@asmjit@@QEAAXXZ ?reset@Zone@asmjit@@QEAAX_N@Z ?sdup@Zone@asmjit@@QEAAPEADPEBD@Z ?setArch@X86Assembler@asmjit@@QEAAII@Z ?setError@CodeGen@asmjit@@QEAAIIPEBD@Z ?setErrorHandler@CodeGen@asmjit@@QEAAIPEAUErrorHandler@2@@Z ?sformat@Zone@asmjit@@QEAAPEADPEBDZZ ?shrink@VMemMgr@asmjit@@QEAAIPEAX_K@Z ?x86RegData@asmjit@@3UX86RegData@1@B

toutpourTF2.rar

Asuna.dll

kernel32

user32

shell32

imm32

msvcp140

imagehlp

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic

TF2dx.log

TF2dx64.exe

shlwapi

dbghelp

kernel32

user32

comdlg32

shell32

ole32

advapi32

oleaut32

generic

TF2dxCurrentProfile.xpr

asu triggerbot only (main).json

asuna smooth.json

injprofilesettings.xpr64