00b67356582a4f3d900db855224ba9379f9980dcccff3c89c3558cf0eefb11cb

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-Oct-29 06:21:54
Detected languages English - United States
Debug artifacts W:\BuildAgent\work\swamp2_p4\Code\.build\shrek\win64\retailsteam\shrek.pdb

Plugin Output

Info Matching compiler(s): MASM/TASM - sig1(h)
Suspicious Strings found in the binary may indicate undesirable behavior: Contains references to security software:
  • Monitor.exe
Info Cryptographic algorithms detected in the binary: Uses constants related to CRC32
Suspicious The PE contains functions most legitimate programs don't use. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryA
  • LoadLibraryExW
  • LoadLibraryExA
 Functions which can be used for anti-debugging purposes:
  • SwitchToThread
 Can access the registry:
  • RegQueryValueExW
  • RegOpenKeyExW
  • RegCloseKey
 Possibly launches other programs:
  • CreateProcessW
 Can create temporary files:
  • GetTempPathA
  • CreateFileA
  • CreateFileW
  • GetTempPathW
 Enumerates local disk drives:
  • GetDriveTypeW
Safe VirusTotal score: 0/71 (Scanned on 2026-11-10 17:49:59) All the AVs think this file is safe.

Hashes

MD5 e8986347cd895596da3f23c12586531f 🔍
SHA1 ab3e1a37473f2f262fbbc3b3faaa391b4e07464a 🔍
SHA256 00b67356582a4f3d900db855224ba9379f9980dcccff3c89c3558cf0eefb11cb 🔍
SHA3 89747945f4f16023e371728463b071735162f0fcc24289b41c267356ebd3a09e 🔍
SSDeep 49152:qfmm7+M34O/3tmoghA1yJiLg2UGwQB1hnguiq39205O2sJkgAyL0Nr+JrskoUyT:soGsqgOUwVzqcX1c 🔍
Imports Hash feaee5e460e286bca85940e7403a1ff9 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x168

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 7
TimeDateStamp 2026-Oct-29 06:21:54
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x44aa00
SizeOfInitializedData 0x1886e400
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000000000037E26C (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x18cbd000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 3b10379644dfd15e877e7c4fb87ec928 🔍
SHA1 61ea42de4b3b1d6f7c39767c21edfee082f3ed25 🔍
SHA256 7a3cff7feff2a7f52846c3522aaaa869fd8afd711ea06a61096cd73b8ee894b4 🔍
SHA3 3817b07082fc87d9e353a1b29d7400ab56d5891787c4f1007b302213d0518871 🔍
VirtualSize 0x44a8c0
VirtualAddress 0x1000
SizeOfRawData 0x44aa00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.497

.rdata

MD5 484f4b61c62edf74fd3db6fa93e81a9f 🔍
SHA1 98d87bbfe8806ac47c6592c216b4ca02492109c8 🔍
SHA256 add2f65ac828a42356fd2c84f182aa11cf80641638bd2bbdae1da7dd53d30c3e 🔍
SHA3 afc8d662a9f0bb87eda4c5dc37a3bbc5df782ff6319ffc1ad79b9babb59d78f1 🔍
VirtualSize 0x15eb0c
VirtualAddress 0x44c000
SizeOfRawData 0x15ec00
PointerToRawData 0x44ae00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.87836

.data

MD5 5f14a98a018a699ea82410c200d344ec 🔍
SHA1 d6739129889b73f61ebf419705759465e2884054 🔍
SHA256 249bc35dbe5032e5b318908bd5b138126266f342c84fa0cf010b183bdc67df6e 🔍
SHA3 20b12859f0da8f835be4bd0f66425b7fc061a0c2fa41bc2f98056da71b7a8ea9 🔍
VirtualSize 0x18676dd4
VirtualAddress 0x5ab000
SizeOfRawData 0x69a00
PointerToRawData 0x5a9a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 1.58771

.pdata

MD5 0ed828fac4336f9e02f495205d752c0b 🔍
SHA1 7f3c2e829a7d07a5b31fba87b68b10935b2be9b7 🔍
SHA256 7be85db966a0462e6b972563b4f19e2d77e29508b019cf3f71a864f36cff6214 🔍
SHA3 44dd85a38f11cb041a214517d2dde8477c698389240c32856ba7350f79a0c3b9 🔍
VirtualSize 0x31ba8
VirtualAddress 0x18c22000
SizeOfRawData 0x31c00
PointerToRawData 0x613400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.42952

.fptable

MD5 bf619eac0cdf3f68d496ea9344137e8b 🔍
SHA1 5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5 🔍
SHA256 076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560 🔍
SHA3 622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59 🔍
VirtualSize 0x100
VirtualAddress 0x18c54000
SizeOfRawData 0x200
PointerToRawData 0x645000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0

.rsrc

MD5 5892c341c125389ab1e8f224155914b9 🔍
SHA1 6a8c73a04d3eb873f952bb84289818937be361c7 🔍
SHA256 52d7a631afcce91a0134d60ae9c3f181d93b05893491706e347b36f5cdeda3d9 🔍
SHA3 d11b5ee03c3e9f9daaed8ddd28db7be5da28006a1327c64cc288d22fe59e64b2 🔍
VirtualSize 0x5a9a8
VirtualAddress 0x18c55000
SizeOfRawData 0x5aa00
PointerToRawData 0x645200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.64157

.reloc

MD5 1315b459005210bbd9b66bd6b1e206ae 🔍
SHA1 d312f6ada09255bcdfff065499ba11b118c1610a 🔍
SHA256 532e8aabd6847b82c3ee8e465ed5bc311a70d03424b527275d7f08ea8661ddd0 🔍
SHA3 8d29e100ed650ea6ee9e7a5269a05637139cbf4421ecb9805c066cbfa8f8a76d 🔍
VirtualSize 0xc16c
VirtualAddress 0x18cb0000
SizeOfRawData 0xc200
PointerToRawData 0x69fc00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 5.45235

Imports

bink2w64.dll BinkSetMemory
BinkOpenXAudio2
BinkSetSoundSystem2
BinkShouldSkip
BinkCopyToBuffer
BinkDoFrame
BinkNextFrame
BinkWait
BinkClose
BinkOpen
D3DCOMPILER_47.dll D3DCompile
dxcompiler.dll DxcCreateInstance
dxgi.dll CreateDXGIFactory1
CreateDXGIFactory2
EOSSDK-Win64-Shipping.dll EOS_EpicAccountId_ToString
EOS_UI_RemoveNotifyDisplaySettingsUpdated
EOS_UI_AddNotifyDisplaySettingsUpdated
EOS_ProductUserId_FromString
EOS_ProductUserId_ToString
EOS_EpicAccountId_FromString
EOS_Platform_GetNetworkStatus
EOS_Platform_SetNetworkStatus
EOS_Presence_CopyPresence
EOS_Presence_QueryPresence
EOS_UserInfo_CopyBestDisplayNameWithPlatform
EOS_EResult_ToString
EOS_EResult_IsOperationComplete
EOS_Auth_Token_Release
EOS_Connect_Login
EOS_Connect_CreateUser
EOS_Connect_GetLoggedInUsersCount
EOS_Connect_GetLoggedInUserByIndex
EOS_Connect_GetLoginStatus
EOS_Connect_AddNotifyAuthExpiration
EOS_Connect_RemoveNotifyAuthExpiration
EOS_Platform_GetAuthInterface
EOS_Platform_GetConnectInterface
EOS_Auth_Login
EOS_Auth_Logout
EOS_Auth_LinkAccount
EOS_Auth_DeletePersistentAuth
EOS_Auth_GetLoggedInAccountsCount
EOS_Auth_GetLoggedInAccountByIndex
EOS_Auth_GetLoginStatus
EOS_Auth_CopyUserAuthToken
EOS_Auth_AddNotifyLoginStatusChanged
EOS_Auth_RemoveNotifyLoginStatusChanged
EOS_EpicAccountId_IsValid
EOS_Initialize
EOS_Shutdown
EOS_Platform_Release
EOS_Logging_SetCallback
EOS_Logging_SetLogLevel
EOS_IntegratedPlatform_CreateIntegratedPlatformOptionsContainer
EOS_IntegratedPlatformOptionsContainer_Release
EOS_Platform_Create
EOS_Platform_Tick
EOS_PresenceModification_Release
EOS_Platform_GetPresenceInterface
EOS_Platform_GetActiveLocaleCode
EOS_Platform_SetOverrideLocaleCode
EOS_Presence_CreatePresenceModification
EOS_Presence_SetPresence
EOS_PresenceModification_SetRawRichText
EOS_ProductUserId_IsValid
EOS_Platform_GetFriendsInterface
EOS_Friends_QueryFriends
EOS_Friends_GetFriendsCount
EOS_Friends_GetFriendAtIndex
EOS_Friends_GetStatus
EOS_Friends_AddNotifyFriendsUpdate
EOS_Friends_RemoveNotifyFriendsUpdate
EOS_Presence_AddNotifyOnPresenceChanged
EOS_Presence_RemoveNotifyOnPresenceChanged
EOS_LobbyModification_Release
EOS_LobbyDetails_Release
EOS_LobbySearch_Release
EOS_LobbyDetails_Info_Release
EOS_Lobby_Attribute_Release
EOS_Platform_GetLobbyInterface
EOS_Platform_GetRTCInterface
EOS_Lobby_CreateLobby
EOS_Lobby_DestroyLobby
EOS_Lobby_JoinLobby
EOS_Lobby_LeaveLobby
EOS_Lobby_UpdateLobbyModification
EOS_Lobby_UpdateLobby
EOS_Lobby_KickMember
EOS_Lobby_AddNotifyLobbyUpdateReceived
EOS_Lobby_RemoveNotifyLobbyUpdateReceived
EOS_Lobby_AddNotifyLobbyMemberUpdateReceived
EOS_Lobby_RemoveNotifyLobbyMemberUpdateReceived
EOS_Lobby_AddNotifyLobbyMemberStatusReceived
EOS_Lobby_RemoveNotifyLobbyMemberStatusReceived
EOS_Lobby_SendInvite
EOS_Lobby_CreateLobbySearch
EOS_Lobby_AddNotifyLobbyInviteReceived
EOS_Lobby_RemoveNotifyLobbyInviteReceived
EOS_Lobby_AddNotifyLobbyInviteAccepted
EOS_Lobby_RemoveNotifyLobbyInviteAccepted
EOS_Lobby_AddNotifyJoinLobbyAccepted
EOS_Lobby_RemoveNotifyJoinLobbyAccepted
EOS_Lobby_CopyLobbyDetailsHandleByInviteId
EOS_Lobby_CopyLobbyDetailsHandleByUiEventId
EOS_Lobby_CopyLobbyDetailsHandle
EOS_Lobby_GetRTCRoomName
EOS_Lobby_IsRTCRoomConnected
EOS_Lobby_AddNotifyRTCRoomConnectionChanged
EOS_Lobby_RemoveNotifyRTCRoomConnectionChanged
EOS_Lobby_AddNotifyLeaveLobbyRequested
EOS_Lobby_RemoveNotifyLeaveLobbyRequested
EOS_LobbyModification_SetBucketId
EOS_LobbyModification_SetPermissionLevel
EOS_LobbyModification_SetMaxMembers
EOS_LobbyModification_SetInvitesAllowed
EOS_LobbyModification_AddAttribute
EOS_LobbyDetails_GetLobbyOwner
EOS_LobbyDetails_CopyInfo
EOS_LobbyDetails_GetAttributeCount
EOS_LobbyDetails_CopyAttributeByIndex
EOS_LobbyDetails_GetMemberCount
EOS_LobbyDetails_GetMemberByIndex
EOS_LobbyDetails_GetMemberAttributeCount
EOS_LobbyDetails_CopyMemberAttributeByIndex
EOS_LobbySearch_Find
EOS_LobbySearch_SetLobbyId
EOS_LobbySearch_SetTargetUserId
EOS_LobbySearch_SetParameter
EOS_LobbySearch_GetSearchResultCount
EOS_LobbySearch_CopySearchResultByIndex
EOS_RTC_GetAudioInterface
EOS_RTC_GetDataInterface
EOS_RTC_AddNotifyParticipantStatusChanged
EOS_RTC_RemoveNotifyParticipantStatusChanged
EOS_RTCAudio_AddNotifyParticipantUpdated
EOS_RTCAudio_RemoveNotifyParticipantUpdated
EOS_RTCData_AddNotifyDataReceived
EOS_RTCData_RemoveNotifyDataReceived
EOS_Platform_GetP2PInterface
EOS_P2P_SendPacket
EOS_P2P_ReceivePacket
EOS_P2P_AddNotifyPeerConnectionRequest
EOS_P2P_RemoveNotifyPeerConnectionRequest
EOS_P2P_AddNotifyPeerConnectionEstablished
EOS_P2P_RemoveNotifyPeerConnectionEstablished
EOS_P2P_AddNotifyPeerConnectionInterrupted
EOS_P2P_RemoveNotifyPeerConnectionInterrupted
EOS_P2P_AddNotifyPeerConnectionClosed
EOS_P2P_RemoveNotifyPeerConnectionClosed
EOS_P2P_AcceptConnection
EOS_P2P_CloseConnections
EOS_P2P_QueryNATType
EOS_P2P_GetPacketQueueInfo
EOS_ActiveSession_Release
EOS_SessionDetails_Release
EOS_SessionSearch_Release
EOS_SessionDetails_Attribute_Release
EOS_SessionDetails_Info_Release
EOS_ActiveSession_Info_Release
EOS_Platform_GetUIInterface
EOS_Platform_GetSessionsInterface
EOS_Platform_GetCustomInvitesInterface
EOS_Sessions_DestroySession
EOS_Sessions_JoinSession
EOS_Sessions_CreateSessionSearch
EOS_Sessions_CopyActiveSessionHandle
EOS_Sessions_AddNotifySessionInviteReceived
EOS_Sessions_RemoveNotifySessionInviteReceived
EOS_Sessions_AddNotifySessionInviteAccepted
EOS_Sessions_RemoveNotifySessionInviteAccepted
EOS_Sessions_AddNotifySessionInviteRejected
EOS_Sessions_RemoveNotifySessionInviteRejected
EOS_Sessions_AddNotifyJoinSessionAccepted
EOS_Sessions_RemoveNotifyJoinSessionAccepted
EOS_Sessions_CopySessionHandleByInviteId
EOS_Sessions_CopySessionHandleByUiEventId
EOS_Sessions_CopySessionHandleForPresence
EOS_Sessions_RemoveNotifyLeaveSessionRequested
EOS_ActiveSession_CopyInfo
EOS_SessionDetails_CopyInfo
EOS_SessionDetails_GetSessionAttributeCount
EOS_SessionDetails_CopySessionAttributeByIndex
EOS_SessionSearch_SetSessionId
EOS_SessionSearch_Find
EOS_SessionSearch_GetSearchResultCount
EOS_SessionSearch_CopySearchResultByIndex
EOS_Presence_AddNotifyJoinGameAccepted
EOS_Presence_RemoveNotifyJoinGameAccepted
EOS_UI_AcknowledgeEventId
EOS_CustomInvites_AddNotifyRequestToJoinReceived
EOS_CustomInvites_RejectRequestToJoin
EOS_Presence_Info_Release
EOS_UserInfo_BestDisplayName_Release
EOS_Connect_QueryExternalAccountMappings
EOS_Connect_QueryProductUserIdMappings
EOS_Connect_GetExternalAccountMapping
EOS_Connect_GetProductUserIdMapping
EOS_Platform_GetUserInfoInterface
EOS_UserInfo_QueryUserInfo
fmod.dll ?getPaused@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@PEA_N@Z
FMOD_Memory_Initialize
FMOD_Debug_Initialize
FMOD_System_Create
?release@System@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
?getSoftwareFormat@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEAHPEAW4FMOD_SPEAKERMODE@@0@Z
?init@System@FMOD@@QEAA?AW4FMOD_RESULT@@HIPEAX@Z
?close@System@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
?update@System@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
?set3DSettings@System@FMOD@@QEAA?AW4FMOD_RESULT@@MMM@Z
?set3DListenerAttributes@System@FMOD@@QEAA?AW4FMOD_RESULT@@HPEBUFMOD_VECTOR@@000@Z
?createSound@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEBDIPEAUFMOD_CREATESOUNDEXINFO@@PEAPEAVSound@2@@Z
?createStream@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEBDIPEAUFMOD_CREATESOUNDEXINFO@@PEAPEAVSound@2@@Z
?createChannelGroup@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEBDPEAPEAVChannelGroup@2@@Z
?playSound@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEAVSound@2@PEAVChannelGroup@2@_NPEAPEAVChannel@2@@Z
?release@ChannelGroup@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
?getIndex@Channel@FMOD@@QEAA?AW4FMOD_RESULT@@PEAH@Z
?getCurrentSound@Channel@FMOD@@QEAA?AW4FMOD_RESULT@@PEAPEAVSound@2@@Z
?getPosition@Channel@FMOD@@QEAA?AW4FMOD_RESULT@@PEAII@Z
?set3DCustomRolloff@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@PEAUFMOD_VECTOR@@H@Z
?set3DAttributes@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@PEBUFMOD_VECTOR@@0@Z
?getFadePoints@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@PEAIPEA_KPEAM@Z
?removeFadePoints@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@_K0@Z
?addFadePoint@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@_KM@Z
?setDelay@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@_K0_N@Z
?getMasterChannelGroup@System@FMOD@@QEAA?AW4FMOD_RESULT@@PEAPEAVChannelGroup@2@@Z
?isPlaying@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@PEA_N@Z
?setMode@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@I@Z
?setMute@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@_N@Z
?setPitch@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@M@Z
?setVolume@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@M@Z
?getDSPClock@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@PEA_K0@Z
?setPaused@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@_N@Z
?stop@ChannelControl@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
?setMode@Sound@FMOD@@QEAA?AW4FMOD_RESULT@@I@Z
?getLength@Sound@FMOD@@QEAA?AW4FMOD_RESULT@@PEAII@Z
?getSubSound@Sound@FMOD@@QEAA?AW4FMOD_RESULT@@HPEAPEAV12@@Z
?release@Sound@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
?unlockDSP@System@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
?lockDSP@System@FMOD@@QEAA?AW4FMOD_RESULT@@XZ
GameInput.dll #1
steam_api64.dll SteamInternal_SteamAPI_Init
SteamAPI_IsSteamRunning
SteamInternal_FindOrCreateUserInterface
SteamInternal_CreateInterface
SteamInternal_ContextInit
SteamAPI_RunCallbacks
SteamAPI_GetHSteamUser
XINPUT1_4.dll #2
#3
KERNEL32.dll GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
HeapQueryInformation
HeapSize
SetStdHandle
GetCurrentDirectoryW
GetTimeZoneInformation
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetConsoleCtrlHandler
FreeLibraryAndExitThread
ExitThread
CreateThread
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileInformationByHandle
GetDriveTypeW
WriteConsoleW
GetFileType
GetStdHandle
TlsFree
TlsSetValue
HeapReAlloc
FreeEnvironmentStringsW
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RtlUnwindEx
InitializeSListHead
GetStartupInfoW
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
UnhandledExceptionFilter
GetLocaleInfoA
QueryPerformanceCounter
QueryPerformanceFrequency
GetTempPathA
GetSystemTimeAsFileTime
FileTimeToSystemTime
CreateDirectoryA
OutputDebugStringA
GetCommandLineW
GetCurrentThread
SetThreadDescription
LocalFree
SetThreadAffinityMask
WideCharToMultiByte
RtlCaptureStackBackTrace
GetCurrentProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
CreateFileA
FindClose
FindFirstFileA
GetFileSize
ReadFile
CloseHandle
ExitProcess
DeleteFileA
GetDiskFreeSpaceExA
GetFileAttributesA
GetFileAttributesExA
SetEndOfFile
WriteFile
FormatMessageA
GetLastError
WaitForSingleObject
WaitForSingleObjectEx
CreateEventA
GetModuleFileNameW
GetProcAddress
LoadLibraryA
HeapAlloc
HeapFree
GetProcessHeap
CreateEventExA
SetEnvironmentVariableW
FreeLibrary
GetModuleFileNameA
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetModuleHandleW
Sleep
LocalAlloc
GetSystemDirectoryW
GetFileAttributesW
CreateFileW
SetLastError
LoadLibraryExW
VerifyVersionInfoW
VerSetConditionMask
GetFullPathNameW
CreateProcessW
CreateDirectoryW
DeleteFileW
GetTempPathW
SetEvent
WaitForMultipleObjects
GetCurrentProcessId
TerminateProcess
GetCurrentThreadId
SetThreadStackGuarantee
FlushInstructionCache
VirtualProtect
WerRegisterRuntimeExceptionModule
WerUnregisterRuntimeExceptionModule
MultiByteToWideChar
CreateEventW
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
FlushFileBuffers
DeleteCriticalSection
GetLocalTime
FindNextFileW
InitOnceComplete
InitOnceBeginInitialize
GetLocaleInfoEx
RtlPcToFileHeader
WakeAllConditionVariable
WakeConditionVariable
SleepConditionVariableSRW
GetExitCodeThread
SwitchToThread
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
LoadLibraryExA
VirtualQuery
GetSystemInfo
RaiseException
CloseThreadpoolWork
GetModuleHandleExW
IsProcessorFeaturePresent
GetStringTypeW
InitializeCriticalSectionEx
EncodePointer
DecodePointer
CompareStringEx
GetCPInfo
LCMapStringEx
RtlUnwind
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SubmitThreadpoolWork
USER32.dll GetDC
EnumDisplayMonitors
GetMonitorInfoA
MonitorFromWindow
SetWindowLongA
SetRectEmpty
GetClientRect
EndPaint
BeginPaint
SetFocus
IsIconic
PostQuitMessage
SendMessageA
LoadCursorFromFileA
LoadCursorA
ScreenToClient
GetCursorPos
SetCursor
SetCursorPos
GetWindowRect
EnumDisplayDevicesA
MessageBoxA
GetDpiForWindow
SetWindowLongPtrA
GetWindowLongA
AdjustWindowRectExForDpi
SetWindowTextA
RedrawWindow
UpdateWindow
GetMenu
SetWindowPos
ShowWindow
CreateWindowExA
RegisterClassA
DefWindowProcA
PeekMessageA
DispatchMessageA
TranslateMessage
GetKeyState
ADVAPI32.dll ConvertStringSecurityDescriptorToSecurityDescriptorW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SHELL32.dll CommandLineToArgvW
ole32.dll CoInitializeEx
CoUninitialize
CoCreateInstance
CoInitialize
CoCreateGuid
gdiplus.dll GdipDisposeImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipCloneImage
GdipGetImageGraphicsContext
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
dbghelp.dll SymInitialize
SymFromAddr
SymGetLineFromAddr64
SymSetOptions
d3d12.dll (delay-loaded) #102
D3D12SerializeRootSignature
D3D12SerializeVersionedRootSignature
#101

Delayed Imports

Attributes 0x1
Name d3d12.dll
ModuleHandle 0x18c1fa28
DelayImportAddressTable 0x614818
DelayImportNameTable 0x5a5cf8
BoundDelayImportTable 0x5a5ef8
UnloadDelayImportTable 0
TimeStamp 1970-Jan-01 00:00:00

D3D12SDKPath

Ordinal 1
Address 0x60b0d8

D3D12SDKVersion

Ordinal 2
Address 0x5111c8

agsCheckDriverVersion

Ordinal 3
Address 0x367d50

agsDeInitialize

Ordinal 4
Address 0x365ab0

agsGetGPUInfo

Ordinal 5
Address 0x365c00

agsGetVersionNumber

Ordinal 6
Address 0x365c40

agsInitialize

Ordinal 7
Address 0x365c50

agsSetDisplayMode

Ordinal 8
Address 0x368520

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.32262
MD5 dc1d5d81e1a1fb9ed4b0fb85e11d086a 🔍
SHA1 80970b9adce7851c58e5a0d673695fd497c24fb2 🔍
SHA256 b60b23d122166f0a940b1e65dc3f5f94702b89882440e57c793b6e07474bea39 🔍
SHA3 d010b86fedd45dfabd480b5fb27bf91d70b8d02996e7e83d9e99c0f719fb671e 🔍

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.58341
MD5 33e4f4c899995fa4935b3082477f674c 🔍
SHA1 a424eaffffd47661c88eb1c79e48413f00e7f49d 🔍
SHA256 5dc07840432b6997b630aab89682ed79afd24347f4d5be0aed7cd8d29269757a 🔍
SHA3 00fcab81418ffbede4e6766e1a23d2351cf7e5617f8ae64b3f9edd78907589ec 🔍

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.5863
MD5 fcbbf64c4f868a59ff7d483216d3268f 🔍
SHA1 1e26c9eccc7f2eb087099a1af11e166705c2a395 🔍
SHA256 e094feedf7dc6adc1c09b1554b6e81b46f6823492600c4ace62fae27f9c700a7 🔍
SHA3 ab9790a8919502b142357c05c072c9c3998a65a5f1d9e7fb1ac731d90872b327 🔍

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.61785
MD5 21ef7e9cef7d34e11ba484dc6360a090 🔍
SHA1 290af33d04b61c510fb2f2e38b67f2ea0ea123a1 🔍
SHA256 6438528c8cac6b4e78d6b8d9e66cc990067c5f6c8ccba01796ddf21d710271f6 🔍
SHA3 23b07f440a4472ac7196bd85d93104098b3114d043906c11484c74b3c39ab4aa 🔍

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.63149
MD5 fe5dd941d99d297c5ae17ad2e5a108b0 🔍
SHA1 0086374beccff43f7dfd9c8a4d074bb10edc3e7e 🔍
SHA256 5dfef269264cf87c9ac358dcbc556e8f6f59ee8dd12753fc57af103cbcb60ea8 🔍
SHA3 b3df381569414c9341ee89725aa1a63a6b9688112b7224eb0eda285bac06fafe 🔍

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x42028
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.64237
MD5 9c34c7ffe43077c735950a8ec006a8a1 🔍
SHA1 b0c718ff6059044d7e4e4521db5605c7f726918a 🔍
SHA256 3a87fc473380968baea0f1269c0682b8a4ec77d3cc17a48dc069ac04098915ab 🔍
SHA3 f9efee2e76ee2f75f5c201ab160c1454b6042a113a7067349e44dbb677588860 🔍

IDI_ICON1

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x5a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.76511
Detected Filetype Icon file
MD5 61e58469fe660c213ebc6e2cc66cbafc 🔍
SHA1 c47479da87d8390f935b337e91bdbedcc739b3eb 🔍
SHA256 c369bebe3271775e43301281caa7efcd03938e3bc1f620212d6c5617edaad403 🔍
SHA3 7c04647ad931cbf1b5c005cebc686d11b461a50e14ba9aa560e6cc1749adcb2f 🔍

1 (#2)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x224
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.04378
MD5 245b863be176aab16ef1dbe168defe03 🔍
SHA1 c0a369f6f0e77b89c5d9d37fb94e1d5e2d431b5b 🔍
SHA256 59ba97d56a01766792386c3b379946bb613c8921e3daf8a878855a268ad5e4aa 🔍
SHA3 7efbe82f17422b353f747a146c1e8f1b9df37e90648150f2020442ff9477341e 🔍

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2026-Oct-29 06:21:54
Version 0.0
SizeofData 99
AddressOfRawData 0x569d5c
PointerToRawData 0x568b5c
Referenced File W:\BuildAgent\work\swamp2_p4\Code\.build\shrek\win64\retailsteam\shrek.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2026-Oct-29 06:21:54
Version 0.0
SizeofData 20
AddressOfRawData 0x569dc0
PointerToRawData 0x568bc0

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-Oct-29 06:21:54
Version 0.0
SizeofData 1204
AddressOfRawData 0x569dd4
PointerToRawData 0x568bd4

TLS Callbacks

StartAddressOfRawData 0x14056a2d0
EndAddressOfRawData 0x14056e2e4
AddressOfIndex 0x158c20238
AddressOfCallbacks 0x14044f0b0
SizeOfZeroFill 0
Characteristics IMAGE_SCN_ALIGN_16BYTES
Callbacks (EMPTY)

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x14060fa80

RICH Header

XOR Key 0x153f403a
Unmarked objects 0
ASM objects (33145) 23
C++ objects (33145) 204
253 (35207) 1
C objects (35207) 20
ASM objects (35207) 14
C++ objects (35207) 108
C objects (33145) 41
Imports (34435) 2
Imports (30795) 2
Imports (30159) 2
Imports (35225) 2
Imports (34808) 2
Imports (33145) 20
C++ objects (35228) 8
Imports (34810) 3
Total imports 593
C objects (VS2008 SP1 build 30729) 1
C++ objects (VS2008 SP1 build 30729) 1
C++ objects (34809) 5
C objects (35225) 37
C++ objects (35225) 458
Exports (35225) 1
Resource objects (35225) 1
151 1
Linker (35225) 1

Errors

Leave a comment

No comments yet.