| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2023-Jan-24 13:58:23 |
| Debug artifacts |
C:\build\_work\sbox\sbox\src\game\client\Retailsbox\win64\unity\client.pdb
|
| Suspicious | PEiD Signature: | HQR data file |
| Info | Interesting strings found in the binary: |
Contains domain names:
|
| Info | The PE contains common functions which appear in legitimate applications. |
[!] The program may be hiding some of its imports:
|
| Suspicious | No VirusTotal score. | This file has never been scanned on VirusTotal. |
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x150 |
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections | 6 |
| TimeDateStamp | 2023-Jan-24 13:58:23 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xf0 |
| Characteristics |
IMAGE_FILE_DLL
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
| Magic | PE32+ |
|---|---|
| LinkerVersion | 14.0 |
| SizeOfCode | 0x49ce00 |
| SizeOfInitializedData | 0x255c00 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x000000000045D2B4 (Section: .text) |
| BaseOfCode | 0x1000 |
| ImageBase | 0x180000000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 6.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 6.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x6f7000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
| embree3.dll |
rtcSetSharedGeometryBuffer
rtcReleaseScene rtcNewScene rtcNewDevice rtcCommitGeometry rtcAttachGeometry rtcReleaseDevice rtcPointQuery rtcNewGeometry rtcJoinCommitScene |
|---|---|
| steam_api64.dll |
SteamAPI_Init
SteamAPI_SetTryCatchCallbacks SteamAPI_GetHSteamUser SteamInternal_FindOrCreateUserInterface SteamInternal_CreateInterface SteamInternal_ContextInit SteamAPI_UnregisterCallback SteamAPI_RunCallbacks SteamAPI_RegisterCallback |
| tier0.dll |
?GetPtr@KeyValues@@QEAAPEAXPEBDPEAX@Z
?GetFloat@KeyValues@@QEAAMPEBDM@Z ?GetUint64@KeyValues@@QEAA_KPEBD_K@Z ?GetNextKey@KeyValues@@QEBAPEAV1@XZ ?GetFirstSubKey@KeyValues@@QEBAPEAV1@XZ ?CheckGet@CUtlBuffer@@IEAA_NH@Z ?CheckPut@CUtlBuffer@@IEAA_NH@Z ?DevMsg@@YAXPEBDZZ V_atofloat64 V_atoi64 DevMsg ?V_SplitString@@YAXPEBD0AEAV?$CUtlVector@VCUtlString@@V?$CUtlMemory@VCUtlString@@H@@@@_N@Z V_tanf DevWarning Plat_NeedsLowFragmentation ?Concat@CBufferString@@QEAAPEBDPEBD0ZZ ?Format@CBufferString@@QEAAHPEBDZZ ??0CMemoryStack@@QEAA@XZ ?Init@CMemoryStack@@QEAA_NPEBDIIII@Z ?CommitTo@CMemoryStack@@AEIAA_NPEAE@Z ??1CMemoryStack@@QEAA@XZ ??0CUtlScratchMemoryPool@@QEAA@XZ ??1CUtlScratchMemoryPool@@QEAA@XZ ?Init@CUtlScratchMemoryPool@@QEAAXIIPEAX_N@Z V_PrettifyMem ??0CUtlBuffer@@QEAA@PEBXHH@Z ?FixSlashes@CUtlString@@QEAAXD@Z ?ToLowerFast@CUtlString@@QEAAXXZ ?StripFilename@CUtlString@@QEBA?AV1@XZ ?IsEqual_FastCaseInsensitive@CUtlString@@QEBA_NPEBD@Z ??HCUtlString@@QEBA?AV0@PEBD@Z V_strlower_fast ?GetLines@CGridStringPrinter@@QEBAXAEAV?$CUtlVector@VCUtlString@@V?$CUtlMemory@VCUtlString@@H@@@@@Z ?Acquire@CUtlString@@QEAAXPEAVCBufferString@@_N@Z ?Trim@CUtlString@@QEAAXPEBD@Z ?Clear@CGridStringPrinter@@QEAAXXZ ?SetColumnJustification@CGridStringPrinter@@QEAAXH_N@Z ?SetMaxStringLengthAllColumns@CGridStringPrinter@@QEAAXH@Z ?SetWordWrapColumn@CGridStringPrinter@@QEAAXH_N0@Z ??HCUtlString@@QEBA?AV0@AEBV0@@Z V_PrettifyNum ?Append@CUtlString@@QEAAXPEBDH@Z ?DevWarning@@YAXPEBDZZ ?GetStringID@CStringRegistry@@QEAAHPEBD@Z nexttoken ??0CStringRegistry@@QEAA@XZ ?AddString@CStringRegistry@@QEAAGPEBDHW4ERBTreeInsertBehavior@@@Z ??1CStringRegistry@@QEAA@XZ ?SetPtr@KeyValues@@QEAAXPEBDPEAX@Z ?IsEmpty@KeyValues@@QEAA_NPEBD@Z ?GetName@KeyValues@@QEBAPEBDXZ ?ConMsg@@YAXPEBDZZ ?AppendFormat@CBufferString@@QEAAHPEBDZZ ?FixSlashes@CBufferString@@QEAAPEBDD@Z ?StripTrailingSlash@CUtlString@@QEAAXXZ ?LoadFromFile@KeyValues@@QEAA_NPEAVIBaseFileSystem@@PEBD1P6A_N1PEAX@Z21@Z ?IsEqual@KeyValues@@QEAA_NPEAV1@@Z ?BeginEvent@PerformanceTrace@@SAXPEBD0I@Z ?EndEvent@PerformanceTrace@@SAXXZ ?TrimLeft@CUtlString@@QEAAXPEBD@Z ?FreeInts@CVariableBitStringBase@@AEAAXXZ ?Purge@CUtlMemoryBlockAllocator@@QEAAXXZ ??1CUtlMemoryBlockAllocator@@QEAA@XZ ??0CUtlMemoryBlockAllocator@@QEAA@HI@Z ?AllocCopy@CUtlMemoryBlockAllocator@@QEAAIPEBDI@Z ?Resize@CVariableBitStringBase@@QEAAXH@Z ?MurmurHash2LowerCase@@YAIPEBDHI@Z V_acosf V_sincosf CRC32_ProcessBuffer Plat_GetClockStart ??YCUtlString@@QEAAAEAV0@AEBVCBufferString@@@Z ??0KeyValues@@QEAA@PEBD00@Z ConDMsg MD5_PseudoRandom ??0CUniformRandomStream@@QEAA@XZ ??0CUtlScratchMemoryPool@@QEAA@IIPEAX_N@Z ?RegisterEventListener_Base@CEventDispatcher_Base@@IEAAXAEBVCUtlAbstractDelegate@@I_NAEAV?$CUtlVector@UEventListenerInfo_t@CEventDispatcher_Base@@V?$CUtlMemory@UEventListenerInfo_t@CEventDispatcher_Base@@H@@@@HPEBD@Z _V_SetExtension ?Allocate@CManagedHandle@@QEAAXAEBVCUtlStringToken@@PEAX@Z ?Free@CManagedHandle@@QEAAXXZ ??0CThreadEvent@@QEAA@_N@Z ??1CThreadEvent@@QEAA@XZ ?Set@CThreadEvent@@QEAA_NXZ ?Wait@CThreadSyncObject@@QEAA_NI@Z ?AssignNextTimespanId@CVProfile@@QEAAHXZ ?SimpleSpew@CGridStringPrinter@@QEBAXHPEBD@Z V_powf ??0CGaussianRandomStream@@QEAA@PEAVIUniformRandomStream@@@Z ?AttachToStream@CGaussianRandomStream@@QEAAXPEAVIUniformRandomStream@@@Z ?Clear@CUtlMemoryPoolBase@@QEAAXXZ ?Clear@CStrAutoEncode@@QEAAXXZ ?InitEmpty@CStrAutoEncode@@AEAAXXZ ?PopulateUTF32@CStrAutoEncode@@AEBAXXZ ?SetCopy@CStrAutoEncode@@QEAAXPEBDH@Z ??0CThreadRWLock_FastRead@@QEAA@_N@Z ??1CThreadSemaphore@@QEAA@XZ ?EncounteredComplexReadLockOperation@CThreadRWLock_FastRead@@IEAA_NI_NPEBDH@Z ?UnlockReadAccounting@CThreadRWLock_FastRead@@IEAAXPEBDHI@Z ?HandleFirstWriteLockTransition@CThreadRWLock_FastRead@@IEAAXXZ ?UnlockWrite@CThreadRWLock_FastRead@@QEAAXPEBDH@Z ??YCUtlString@@QEAAAEAV0@AEBV0@@Z ?RemoveAll@CUtlSymbolTable@@QEAAXXZ LoggingSystem_GetChannelColor LoggingSystem_FindChannel Plat_DebugPrint V_expf V_logf ?FormatNumberInternal64@CFormatNumber_DontUseDirectly_UseFormatNumberMacro@@QEAAX_J@Z g_Mathlib_GammaToLinearByteTable V_strtoui64 ?SeekGet@CUtlBuffer@@QEAAXW4SeekType_t@1@H@Z ?CheckArbitraryPeekGet@CUtlBuffer@@IEAA_NHAEAH@Z V_strtoi64 Plat_GetModuleProcAddress Plat_LoadModule V_atan2f V_fmodf CharacterSetBuild g_TSPointerListNodes Plat_CreateUUIDImpl ?SetLength@CBufferString@@QEAAPEADH_NPEAH@Z RandomInt ?AllocAligned@CUtlScratchMemoryPool@@QEAAPEAXHH@Z ?GetCurrentAllocPoint@CUtlScratchMemoryPool@@QEBA?AUUtlScratchMemoryPoolMark_t@@XZ ?FreeToAllocPoint@CUtlScratchMemoryPool@@QEAAXUUtlScratchMemoryPoolMark_t@@@Z ?FreeAll@CMemoryStack@@QEAAX_N@Z V_CompareNameWithWildcards ?FreeAll@CUtlScratchMemoryPool@@QEAAXXZ ?PeekStringLength@CUtlBuffer@@QEAAHXZ ??0IStack_Annotation@@QEAA@AEBVCCallStackMarkerBase@@@Z ??1IStack_Annotation@@UEAA@XZ V_fpclassify V_isnan ?Construct@CSplitString@@AEAAXPEBDPEAPEBDH@Z GetJSONCharConversion ?PutDelimitedString@CUtlBuffer@@QEAAXPEAVCUtlCharConversion@@PEBD@Z Plat_UUIDFromString V_UTF16ToUTF8 ?Trim@CBufferString@@QEAAPEBDPEBD@Z ?AssumeMemory@CUtlBuffer@@QEAAXPEAXHHH@Z Plat_UUIDToString GetCStringCharConversion ?Replace@CUtlString@@QEBA?AV1@PEBD0_N@Z ?FastDecompress@CBlockCompress@@SAIPEBEIPEAEI@Z ?Swap@CUtlBuffer@@QEAAXAEAV1@@Z ??1CThreadSyncObject@@QEAA@XZ ?StartsWith@CBufferString@@QEAA_NPEBD@Z Plat_SetDenormalsAreZero GetCPUInformation V_atanf ThreadSleep DestroyThreadPool ?LoggingSystem_Log@@YA?AW4LoggingResponse_t@@HW4LoggingSeverity_t@@AEBULeafCodeInfo_t@@PEBULoggingMetaData_t@@PEBDZZ ?Reset@CThreadMultiWaitEvent@@QEAAXXZ V_RemoveDotSlashes V_IsAbsolutePath ?RemoveAt@CBufferString@@QEAAPEBDHH@Z ?ToLowerFast@CBufferString@@QEAAXH@Z ?FixupPathName@CBufferString@@QEAAPEBDD@Z MurmurHash64 ?ExtractFilePath@CBufferString@@QEAAPEBDPEBD_N@Z ?SetInt@KeyValues@@QEAAXPEBDH@Z ?SafeUncompress@CLZSS@@QEAAIPEAE0I@Z ?GetActualSize@CLZSS@@QEAAIPEAE@Z ?SetUint64@KeyValues@@QEAAXPEBD_K@Z ?Left@CUtlString@@QEBA?AV1@H@Z V_atoui64 ?SetFloat@KeyValues@@QEAAXPEBDM@Z ?GetDataType@KeyValues@@QEAA?AW4types_t@CKeyValues_Data@@PEBD@Z V_strtod _V_strnicmp_fast _V_strncmp V_log2_uint ??4CUtlBinaryBlock@@QEAAAEAV0@AEBV0@@Z ?UnregisterEventListener_Base@CEventDispatcher_Base@@IEAA_NAEBVCUtlAbstractDelegate@@AEAV?$CUtlVector@UEventListenerInfo_t@CEventDispatcher_Base@@V?$CUtlMemory@UEventListenerInfo_t@CEventDispatcher_Base@@H@@@@@Z ??0CEventDispatcher_Base@@IEAA@XZ g_pThreadPool ?Abort@CThreadedJob@@QEAAH_N@Z ?UnlockWrite@CThreadSpinRWLock@@QEAAXPEBDH@Z ?SpinLockForWrite@CThreadSpinRWLock@@AEAAXPEBDHI@Z ?Alloc@CUtlMemoryPoolBase@@QEAAPEAXXZ ?Free@CUtlMemoryPoolBase@@QEAAXPEAX@Z ?IterateListeners_End@CEventDispatcher_Base@@IEAAXAEAUDelegateIterator_Base_t@1@@Z ?IterateListeners_Start@CEventDispatcher_Base@@IEAA_NAEAUDelegateIterator_Base_t@1@_N@Z ?ClearDestruct@CUtlMemoryPoolBase@@IEAAXP6AXPEAX@Z@Z V_qsort ??0CUtlMemoryPoolBase@@QEAA@HHHW4MemoryPoolGrowType_t@@PEBD@Z ?IterateListener@CEventDispatcher_Base@@IEAAPEBUEventListenerInfo_t@1@AEAUDelegateIterator_Base_t@1@@Z ??1CUtlMemoryPoolBase@@QEAA@XZ V_AreFileNamesEqual ?ParallelCallQueued@CCallQueue@@QEAAXPEBDPEAVIThreadPool@@@Z Plat_GetCPUFrequency ?FindOrCreateCounter@CVProfile@@QEAAPEA_KPEBDW4CounterGroup_t@@@Z ?GetBaseFilename@CUtlString@@QEBA?AV1@XZ ?ExitScope@CVProfile@@QEAAXXZ ?EnterScope@CVProfile@@QEAAXPEBDH0_NH@Z LoggingSystem_GetChannelVerbosity ?V_stristr_fast@@YAPEBDPEBD0@Z ?FormatV@CUtlString@@QEAAHPEBDPEAD@Z ?Set@CThreadMultiWaitEvent@@QEAAXXZ ??1CThreadMultiWaitEvent@@QEAA@XZ ??0CThreadMultiWaitEvent@@QEAA@_N@Z V_frexpf ?Find@CUtlSymbolTable@@QEBA?AVCUtlSymbol@@PEBD@Z ?Put@CUtlBuffer@@QEAAXPEBXH@Z V_URLDecode ?IsEqual_CaseSensitive@CUtlString@@QEBA_NPEBD@Z ??YCUtlString@@QEAAAEAV0@PEBD@Z Plat_RelativeTicks Plat_TickDiffMilliSecF ??2KeyValues@@SAPEAX_K@Z ??3KeyValues@@SAXPEAX@Z ?WriteAsBinary@KeyValues@@QEAA_NAEAVCUtlBuffer@@@Z ?ReadAsBinary@KeyValues@@QEAA_NAEAVCUtlBuffer@@@Z ?MakeCopy@KeyValues@@QEBAPEAV1@XZ COM_TimestampedLog FindOrCreateQuantizedFloatEncoder GetQuantizedFloatEncoderByIndex ??1KeyValues@@QEAA@XZ ??0KeyValues@@QEAA@PEBD@Z MurmurHash2 V_atof V_StringToColor ?GetString@CUtlBuffer@@QEAAXPEADH@Z _V_ExtractFilePath V_vsnprintf _V_FileBase _V_StripLastDir _V_ComposeFileName _V_FixupPathName _V_StripExtension _V_strncat V_sscanf ?Lock@CThreadMutex@@QEAAXPEBDH@Z ?Unlock@CThreadMutex@@QEAAXPEBDH@Z ?Get@CUtlBuffer@@QEAA_NPEAXH@Z ?StripExtension@CBufferString@@QEAAPEBDXZ Plat_GetLocalTime V_StringToVector _V_strEndsWith V_FixSlashes V_StripTrailingSlash V_GetFileExtensionSafe ?SetPtr@CBufferString@@QEAAXPEADHH_N1@Z ?PutString@CUtlBuffer@@QEAAXPEBD@Z V_UnqualifiedFileName LoggingSystem_RegisterLoggingChannel ?V_SplitString@@YAXPEBD0AEAV?$CUtlVector@PEADV?$CUtlMemory@PEADH@@@@@Z ?LoggingSystem_Log@@YA?AW4LoggingResponse_t@@HW4LoggingSeverity_t@@PEBULoggingMetaData_t@@PEBDZZ HangWatchdogInternal_EndScope HangWatchdogInternal_BeginScope ?GetString@KeyValues@@QEAAPEBDPEBD0PEAD_K@Z ?GetInt@KeyValues@@QEAAHPEBDH@Z ?FindKey@KeyValues@@QEAAPEAV1@PEBD_N@Z CommandLine _V_StringAfterPrefix V_cosf ??1CUtlSymbolTable@@QEAA@XZ ?AddString@CUtlSymbolTable@@QEAA?AVCUtlSymbol@@PEBD@Z ?String@CUtlSymbolTable@@QEBAPEBDVCUtlSymbol@@@Z ??0CUtlSymbolTable@@QEAA@HH_N@Z ThreadInMainThread ?SetExtension@CBufferString@@QEAAPEBDPEBD@Z V_GetFileExtension V_atofloat32 V_atoi LOG_CONSOLE ?LoggingSystem_Log@@YA?AW4LoggingResponse_t@@HW4LoggingSeverity_t@@PEBULoggingMetaData_t@@VColor@@PEBDZZ ?ParseToken@CUtlBuffer@@QEAAHPEBUcharacterset_t@@PEADH_N@Z g_BitBuf_BitWriteMasks Plat_TicksAfterMicroSecs MurmurHash3_32 V_strnlen ?Replace@CBufferString@@QEAAHPEBD0_N@Z Coroutine_Continue ?UnlockRead_LockForWrite@CThreadRWLock_FastRead@@QEAA?AW4RWLockTranstionResult_t@@PEBDH@Z V_FixDoubleSlashes ?AppendConcat@CBufferString@@QEAAPEBDHPEBQEBDPEBH_N@Z ?StripTrailingSlash@CBufferString@@QEAAPEBDXZ ?RemoveDotSlashes@CBufferString@@QEAAPEBDD@Z ?ComposeFileName@CBufferString@@QEAAPEBDPEBD0D@Z ?MakeAbsolutePath@CBufferString@@QEAAPEBDPEBD0@Z ?Purge@CBufferString@@QEAAXH@Z ?Relinquish@CBufferString@@QEAAPEADW4EAllocationOption_t@1@@Z ?ExtractFileBase@CBufferString@@QEAAPEBDPEBD@Z ?ExtractFileExtension@CBufferString@@QEAAPEBDPEBD@Z ?Slice@CUtlString@@QEBA?AV1@HH@Z ?Right@CUtlString@@QEBA?AV1@H@Z ?UnqualifiedFilenameAlloc@CUtlString@@QEBA?AV1@XZ ?DirName@CUtlString@@QEBA?AV1@XZ ?GetExtensionAlloc@CUtlString@@QEBA?AV1@XZ ?FioCreateFile@@YAHPEBDW4EFioAccessFlags@@W4EFioShareFlags@@W4EFioCreateMode@@IPEAPEAX@Z ?FioClose@@YAHPEAX@Z ?FioReadAt@@YAHPEAX_K0HPEAH@Z MD5_ProcessSingleBuffer Plat_FloatTime g_VProfCurrentProfile ?AddNullTermination@CUtlBuffer@@IEAAXXZ ?Printf@CUtlBuffer@@QEAAXPEBDZZ Plat_GetThreadIndex ??1CThreadMutex@@QEAA@XZ ??0CThreadMutex@@QEAA@PEBD@Z V_sinf ??0CUtlBuffer@@QEAA@HHH@Z RegisterGlobalObject ??8CUtlString@@QEBA_NAEBV0@@Z ?LoggingSystem_Log@@YA?AW4LoggingResponse_t@@HW4LoggingSeverity_t@@VColor@@PEBDZZ ?Insert@CBufferString@@QEAAPEBDHPEBDH_N@Z ?SetUnusable@CBufferString@@QEAAXXZ ?AppendFormatV@CBufferString@@QEAAHPEBDPEAD@Z LoggingSystem_Log Msg UtlMemory_CalcNewAllocationCount AssertMsg_ConditionFailed _V_strncpy V_snprintf Warning ?SetDirect@CUtlString@@QEAAXPEBDH@Z ?Set@CUtlString@@QEAAXPEBD@Z ?Lock@CThreadFastMutex@@AECAXPEBDHII@Z V_stricmp_fast LoggingSystem_IsChannelEnabled ?LoggingSystem_Log@@YA?AW4LoggingResponse_t@@HW4LoggingSeverity_t@@AEBULeafCodeInfo_t@@PEBDZZ LOG_GENERAL ?Breadcrumb@ErrorReports@@SAX_NPEBD1@Z Plat_ExitProcess ?Purge@CUtlString@@QEAAXXZ UtlMemory_Alloc Plat_IsInDebugSession g_bUpdateStringTokenDatabase RegisterStringToken CMemAllocSystemInitialize g_pMemAlloc ?MurmurHash2LowerCase@@YAIPEBDI@Z HashString ?Format@CUtlString@@QEAAHPEBDZZ ?FreeMemoryBlock@CUtlString@@AEAAXXZ ?SetString@KeyValues@@QEAAXPEBD0@Z MemAlloc_FreeFunc MemAlloc_AllocFunc V_qsort_s ?SetString@CGridStringPrinter@@QEAAXHHPEBD@Z ?SetColumnHeader@CGridStringPrinter@@QEAAXHPEBD@Z ?NumRows@CGridStringPrinter@@QEBAHXZ ?AllocZero@CUtlMemoryPoolBase@@QEAAPEAXXZ ?EnsureCapacity@CUtlBuffer@@QEAAXH@Z ?SeekPut@CUtlBuffer@@QEAAXW4SeekType_t@1@H@Z ?Compress@CLZSS@@QEAAPEAEPEAEHPEAI_N@Z ?TrimRight@CUtlString@@QEAAXPEBD@Z |
| SDL2.dll |
SDL_GetClipboardText
SDL_HasClipboardText SDL_SetClipboardText |
| ole32.dll |
CoGetObjectContext
CoGetApartmentType |
| KERNEL32.dll |
GetProcessHeap
GetCurrentThreadId GetTimeFormatA GetDateFormatA GetLocalTime TlsSetValue InitializeCriticalSectionAndSpinCount GetLastError FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose OutputDebugStringW GetFileSizeEx SetFilePointerEx SetStdHandle FlushFileBuffers LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW GetTimeZoneInformation WriteConsoleW GetModuleFileNameW GetStdHandle GetConsoleOutputCP WriteFile GetConsoleMode GetFileType CreateFileW SetEnvironmentVariableW ExitProcess RtlUnwind RtlUnwindEx InterlockedFlushSList InterlockedPushEntrySList TlsAlloc GetCurrentProcessId GetStartupInfoW IsDebuggerPresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext InitializeSListHead CreateEventW ResetEvent SetEvent GetCPInfo WaitForSingleObjectEx GetModuleHandleW GetSystemTimeAsFileTime FlsFree FlsSetValue FlsGetValue FlsAlloc DecodePointer EncodePointer InitializeCriticalSectionEx IsProcessorFeaturePresent GetModuleHandleExW CloseThreadpoolWork SubmitThreadpoolWork CreateThreadpoolWork FreeLibraryWhenCallbackReturns SleepConditionVariableSRW WakeAllConditionVariable WakeConditionVariable InitializeConditionVariable TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive InitializeSRWLock QueryPerformanceFrequency QueryPerformanceCounter RaiseException RtlPcToFileHeader GetStringTypeW GetSystemInfo CloseHandle WideCharToMultiByte MultiByteToWideChar SetLastError Sleep DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection LoadLibraryExW TlsFree TlsGetValue FreeLibrary GetProcAddress |
| Ordinal | 1 |
|---|---|
| Address | 0x2a0580 |
| Ordinal | 2 |
|---|---|
| Address | 0x44ca90 |
| Ordinal | 3 |
|---|---|
| Address | 0x4522a0 |
| Ordinal | 4 |
|---|---|
| Address | 0x4522b0 |
| Ordinal | 5 |
|---|---|
| Address | 0x452500 |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2023-Jan-24 13:58:23 |
| Version | 0.0 |
| SizeofData | 99 |
| AddressOfRawData | 0x588034 |
| PointerToRawData | 0x587234 |
| Referenced File | C:\build\_work\sbox\sbox\src\game\client\Retailsbox\win64\unity\client.pdb |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2023-Jan-24 13:58:23 |
| Version | 0.0 |
| SizeofData | 20 |
| AddressOfRawData | 0x588098 |
| PointerToRawData | 0x587298 |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2023-Jan-24 13:58:23 |
| Version | 0.0 |
| SizeofData | 924 |
| AddressOfRawData | 0x5880ac |
| PointerToRawData | 0x5872ac |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2023-Jan-24 13:58:23 |
| Version | 0.0 |
| SizeofData | 0 |
| AddressOfRawData | 0 |
| PointerToRawData | 0 |
| StartAddressOfRawData | 0x180588468 |
|---|---|
| EndAddressOfRawData | 0x180588484 |
| AddressOfIndex | 0x1806888a4 |
| AddressOfCallbacks | 0x1804a11a0 |
| SizeOfZeroFill | 0 |
| Characteristics |
IMAGE_SCN_ALIGN_8BYTES
|
| Callbacks | (EMPTY) |
| Size | 0x140 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0x1805eae88 |
| XOR Key | 0xfec12325 |
|---|---|
| Unmarked objects | 0 |
| ASM objects (29395) | 21 |
| C++ objects (29395) | 192 |
| C objects (29395) | 37 |
| Imports (29395) | 4 |
| 253 (31823) | 2 |
| C objects (31823) | 17 |
| ASM objects (31823) | 12 |
| C++ objects (31823) | 87 |
| 221 (VS2013 UPD5 build 40629) | 2 |
| Imports (31935) | 2 |
| Imports (29918) | 2 |
| C objects (VS2015 UPD2 build 23918) | 10 |
| C objects (31935) | 77 |
| Imports (VS2017 v15.8.5-8 compiler 26730) | 3 |
| Total imports | 622 |
| C++ objects (31935) | 197 |
| C++ objects (VS2015 UPD3.1 build 24215) | 51 |
| C++ objects (LTCG) (31935) | 63 |
| Exports (31935) | 1 |
| Linker (31935) | 1 |