b59ae6016a70ec029a0b849d4c63e8dfe8b07111cc951337bad3757e3c48a52f

Sharing

Copy URL Twitter E-mail

General

Target

b59ae6016a70ec029a0b849d4c63e8dfe8b07111cc951337bad3757e3c48a52f
Size

2.2MB
MD5

21207641ff654a61a57c3c8cccaf7ae6
SHA1

40515145a516631d3e994eea8026812e50cf5eca
SHA256

b59ae6016a70ec029a0b849d4c63e8dfe8b07111cc951337bad3757e3c48a52f
SHA512

c6de0eb5b2445690f1f90776f45bb1d116f50f1835061c562d235030fcd66f4c8c2724a57ca527e27cb74568acee7546ebb0b8b7afa3f0b2c9bc243ff2a72df3
SSDEEP

24576:TMyns5EHSiFNRoaKhxt+N5c5PqRueqrH+hpJS+X5M7tnyEiz1ojwnjWftYxFEL/P:TMKOCRs55Paukte7tD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b59ae6016a70ec029a0b849d4c63e8dfe8b07111cc951337bad3757e3c48a52f

Files

b59ae6016a70ec029a0b849d4c63e8dfe8b07111cc951337bad3757e3c48a52f
.exe windows:6 windows x86

4bbb8761d76d1b07ceb6e78c304590a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

utilities

?Replace@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QAEHPB_W0@Z
??0SCriticalSection@SOUI@@QAE@XZ
??1SCriticalSection@SOUI@@UAE@XZ
?Find@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QBEHPB_WH@Z
?Format@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QAA?AV12@PB_WZZ
?CvtW2A@SStrCpCvt@SOUI@@SA?AV?$TStringT@DUchar_traits@SOUI@@@2@ABV?$TStringT@_WUwchar_traits@SOUI@@@2@I@Z
?Insert@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QAEHHPB_W@Z
?Append@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QAEABV12@PB_W@Z
?GetBuffer@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QAEPA_WH@Z
?DefAttributeProc@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEJABV?$TStringT@_WUwchar_traits@SOUI@@@2@0H@Z
?InitFromXml@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEHVxml_node@pugi@@@Z
?AfterAttribute@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEJABV?$TStringT@_WUwchar_traits@SOUI@@@2@0HJ@Z
?SetAttribute@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEJABV?$TStringT@_WUwchar_traits@SOUI@@@2@0H@Z
?GetAttribute@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UBE?AV?$TStringT@_WUwchar_traits@SOUI@@@2@ABV32@@Z
??1SAutoLock@SOUI@@QAE@XZ
?IsEmpty@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QBE_NXZ
?CvtA2W@SStrCpCvt@SOUI@@SA?AV?$TStringT@_WUwchar_traits@SOUI@@@2@ABV?$TStringT@DUchar_traits@SOUI@@@2@II@Z
?Compare@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QBEHPB_W@Z
?SafeStrlen@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@SAHPB_W@Z
?ConcatCopy@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@IAE_NHPB_WH0@Z
??0?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QAE@ABV01@@Z
?GetClassType@IObject@SOUI@@SAHXZ
?attribute@xml_node@pugi@@QBE?AVxml_attribute@2@PB_W_N@Z
?child@xml_node@pugi@@QBE?AV12@PB_W_N@Z
?text@xml_node@pugi@@QBE?AVxml_text@2@XZ
??7xml_node@pugi@@QBE_NXZ
??Bxml_node@pugi@@QBEP6AXPAPAPAV01@@ZXZ
?Find@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QBEH_WH@Z
?Left@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QBE?AV12@H@Z
?value@xml_attribute@pugi@@QBEPB_WXZ
?get@xml_text@pugi@@QBEPB_WXZ
?Right@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QBE?AV12@H@Z
??1xml_document@pugi@@QAE@XZ
??0xml_document@pugi@@QAE@XZ
?TrimBlank@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QAEXXZ
?SouiCalloc@soui_mem_wrapper@SOUI@@SAPAXII@Z
?Delete@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QAEHHH@Z
??0SAutoLock@SOUI@@QAE@AAVSCriticalSection@1@@Z
?GetLength@?$TStringT@DUchar_traits@SOUI@@@SOUI@@QBEHXZ
??A?$TStringT@DUchar_traits@SOUI@@@SOUI@@QBEDH@Z
??B?$TStringT@DUchar_traits@SOUI@@@SOUI@@QBEPBDXZ
?Mid@?$TStringT@DUchar_traits@SOUI@@@SOUI@@QBE?AV12@HH@Z
??A?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QBE_WH@Z
?Mid@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QBE?AV12@HH@Z
?OnInitFinished@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEXVxml_node@pugi@@@Z
?GetData@?$TStringT@DUchar_traits@SOUI@@@SOUI@@IBEPAUTStringData@2@XZ
?GetData@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@IBEPAUTStringData@2@XZ
??0?$TStringT@DUchar_traits@SOUI@@@SOUI@@QAE@PBD@Z
??1?$TStringT@DUchar_traits@SOUI@@@SOUI@@QAE@XZ
??0?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QAE@PB_W@Z
??1?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QAE@XZ
?GetLength@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QBEHXZ
??B?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QBEPB_WXZ
?STraceW@SOUI@@YAXPB_WZZ
?GetObjectType@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UBEHXZ
?SetAttribute@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEJPBD0H@Z
??0?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QAE@XZ
??4?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QAEAAV01@PB_W@Z
??4?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QAEAAV01@ABV01@@Z
?CvtW2W@SStrCpCvt@SOUI@@SA?AV?$TStringT@_WUwchar_traits@SOUI@@@2@ABV32@I@Z
?CompareNoCase@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QBEHPB_W@Z
?SetAttribute@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEJABV?$TStringT@DUchar_traits@SOUI@@@2@0H@Z
?SouiFree@soui_mem_wrapper@SOUI@@SAXPAX@Z

soui

?IsClipClient@SWindow@SOUI@@UAEHXZ
?OnUpdateFloatPosition@SWindow@SOUI@@UAEXABVCRect@2@@Z
?SwndProc@SWindow@SOUI@@MAEHIIJAAJ@Z
?ProcessSwndMessage@SWindow@SOUI@@MAEHIIJAAJ@Z
?SetAttribute@SWindow@SOUI@@UAEJABV?$TStringT@_WUwchar_traits@SOUI@@@2@0H@Z
?OnFinalRelease@?$TObjRefImpl2@UIObjRef@@VSWindow@SOUI@@@SOUI@@UAEXXZ
?getSingleton@?$SSingleton2@VSSkinPoolMgr@SOUI@@@SOUI@@SAAAVSSkinPoolMgr@2@XZ
?Release@?$TObjRefImpl@UIObjRef@@@SOUI@@UAEJXZ
?AddRef@?$TObjRefImpl@UIObjRef@@@SOUI@@UAEJXZ
??0SWindow@SOUI@@QAE@XZ
??1SWindow@SOUI@@UAE@XZ
?GetWindowTextW@SWindow@SOUI@@UAE?AV?$TStringT@_WUwchar_traits@SOUI@@@2@H@Z
?SetWindowTextW@SWindow@SOUI@@UAEXPB_W@Z
?SetToolTipText@SWindow@SOUI@@UAEXPB_W@Z
?GetToolTipText@SWindow@SOUI@@UAE?AV?$TStringT@_WUwchar_traits@SOUI@@@2@XZ
?IsVisible@SWindow@SOUI@@QAEHH@Z
?GetContainer@SWindow@SOUI@@QAEPAUISwndContainer@2@XZ
?GetClientRect@SWindow@SOUI@@UBE?AVCRect@2@XZ
?GetSelectedSiblingInGroup@SWindow@SOUI@@UAEPAV12@XZ
?IsContainPoint@SWindow@SOUI@@UBEHABUtagPOINT@@H@Z
?OnColorize@SWindow@SOUI@@MAEXK@Z
?GetParent@SWindow@SOUI@@QBEPAV12@XZ
?CreateChildren@SWindow@SOUI@@UAEHVxml_node@pugi@@@Z
?Invalidate@SWindow@SOUI@@QAEXXZ
?GetScale@SWindow@SOUI@@UBEHXZ
?GetSelectedChildInGroup@SWindow@SOUI@@UAEPAV12@XZ
?OnSetCursor@SWindow@SOUI@@UAEHABVCPoint@2@@Z
?OnUpdateToolTip@SWindow@SOUI@@UAEHVCPoint@2@AAUSwndToolTipInfo@2@@Z
?OnStateChanging@SWindow@SOUI@@UAEXKK@Z
?OnStateChanged@SWindow@SOUI@@UAEXKK@Z
?InitFromXml@SWindow@SOUI@@UAEHVxml_node@pugi@@@Z
?RequestRelayout@SWindow@SOUI@@UAEXKH@Z
?UpdateLayout@SWindow@SOUI@@UAEXXZ
?OnGetRenderTarget@SHostWnd@SOUI@@MAEPAUIRenderTarget@2@ABVCRect@2@K@Z
?tr@SWindow@SOUI@@UAE?AV?$TStringT@_WUwchar_traits@SOUI@@@2@ABV32@@Z
?SwndFromPoint@SWindow@SOUI@@UAEKVCPoint@2@H@Z
?FireEvent@SWindow@SOUI@@UAEHAAVEventArgs@2@@Z
?IsSiblingsAutoGroupped@SWindow@SOUI@@UAEHXZ
?GetWindowRect@SWindow@SOUI@@QAE?AVCRect@2@XZ
?GetID@SWindow@SOUI@@UBEHXZ
?GetName@SWindow@SOUI@@UBEPB_WXZ
?GetClientRect@SWindow@SOUI@@UBEXPAUtagRECT@@@Z
?GetLayoutParam@SWindow@SOUI@@UBEPAUILayoutParam@2@XZ
?OnGetDlgCode@SWindow@SOUI@@UAEIXZ
?IsFocusable@SWindow@SOUI@@UAEHXZ
?IsClass@SWindow@SOUI@@UBEHPB_W@Z
?GetTranslatorContext@SHostWnd@SOUI@@MBEABV?$TStringT@_WUwchar_traits@SOUI@@@2@XZ
?GetHostHwnd@SHostWnd@SOUI@@MAEPAUHWND__@@XZ
?GetContainerRect@SHostWnd@SOUI@@MAE?AVCRect@2@XZ
?OnFireEvent@SHostWnd@SOUI@@MAEHAAVEventArgs@2@@Z
?GetClientRect@SHostWnd@SOUI@@UBE?AVCRect@2@XZ
?InitFromXml@SHostWnd@SOUI@@UAEHVxml_node@pugi@@@Z
?ProcessWindowMessage@SHostDialog@SOUI@@UAEHPAUHWND__@@IIJAAJK@Z
?_HandleEvent@SHostDialog@SOUI@@UAEHPAVEventArgs@2@@Z
?GetMsgLoop@SHostDialog@SOUI@@MAEPAVSMessageLoop@2@XZ
?IsClass@SHostDialog@SOUI@@UBEHPB_W@Z
?GetObjectType@SHostDialog@SOUI@@UBEHXZ
?IsLayeredWindow@SHostWnd@SOUI@@MBEHXZ
?GetObjectType@SHostWnd@SOUI@@UBEHXZ
?GetAcceleratorMgr@SwndContainerImpl@SOUI@@MAEPAUIAcceleratorMgr@2@XZ
?FrameToHost@SwndContainerImpl@SOUI@@MAEXAAUtagRECT@@@Z
?GetObjectType@SwndContainerImpl@SOUI@@UBEHXZ
?OnCancel@SHostDialog@SOUI@@IAEXXZ
?GetWindowRect@SHostWnd@SOUI@@QBE?AVCRect@2@XZ
?SetWindowPos@CSimpleWnd@SOUI@@QAEHPAUHWND__@@HHHHI@Z
?FindChildByName@SWindow@SOUI@@QAEPAV12@PBDH@Z
?GetLogManager@SApplication@SOUI@@QAEPAUILog4zManager@2@XZ
?FindChildByName@SWindow@SOUI@@QAEPAV12@PB_WH@Z
?SetValue@SProgress@SOUI@@QAEHH@Z
?KillTimer@SHostWnd@SOUI@@QAEHI@Z
?SetTimer@SHostWnd@SOUI@@QAEIII@Z
?GetValue@SProgress@SOUI@@QAEHXZ
?GetClassNameW@SProgress@SOUI@@SAPB_WXZ
?SetVisible@SWindow@SOUI@@QAEXHH@Z
?GetChild@SWindow@SOUI@@QAEPAV12@H@Z
?FindChildByID@SWindow@SOUI@@QAEPAV12@HH@Z
?OnOK@SHostDialog@SOUI@@IAEXXZ
?GetClassNameW@SEdit@SOUI@@SAPB_WXZ
?GetClassNameW@SStatic@SOUI@@SAPB_WXZ
?TrackPopupMenu@SMenuEx@SOUI@@QAEIIHHPAUHWND__@@H@Z
?GetClassNameW@SCheckBox@SOUI@@SAPB_WXZ
?LoadMenuW@SMenuEx@SOUI@@QAEHPB_WPAUHWND__@@@Z
??1SMenuEx@SOUI@@UAE@XZ
??0SMenuEx@SOUI@@QAE@XZ
?removeEvent@SEventSet@SOUI@@QAEXK@Z
?addEvent@SEventSet@SOUI@@QAEXKPB_W@Z
?SetFocus@SWindow@SOUI@@QAEXXZ
?EnableWindow@SWindow@SOUI@@QAEXHH@Z
?SetCheck@SWindow@SOUI@@QAEXH@Z
?IsChecked@SWindow@SOUI@@QAEHXZ
?GetMsgLoop@SHostWnd@SOUI@@MAEPAVSMessageLoop@2@XZ
??1SHostWnd@SOUI@@UAE@XZ
??0SHostWnd@SOUI@@QAE@PB_W@Z
?UnregisterEventMap@SNotifyCenter@SOUI@@QAE_NABUISlotFunctor@2@@Z
?RegisterEventMap@SNotifyCenter@SOUI@@QAE_NABUISlotFunctor@2@@Z
?FireEventAsync@SNotifyCenter@SOUI@@QAEXPAVEventArgs@2@@Z
?GetObjectType@SWindow@SOUI@@UBEHXZ
?SetMsgHandled@SMsgHandleState@SOUI@@QAEXH@Z
?IsMsgHandled@SMsgHandleState@SOUI@@QBEHXZ
?GetRawBuffer@SResProviderMgr@SOUI@@QAEHPB_W0PAXI@Z
?GetRawBufferSize@SResProviderMgr@SOUI@@QAEIPB_W0@Z
?GetRenderFactory@SApplication@SOUI@@QAEPAUIRenderFactory@2@XZ
?getSingletonPtr@?$SSingleton@VSApplication@SOUI@@@SOUI@@SAPAVSApplication@2@XZ
?OnFinalMessage@CSimpleWnd@SOUI@@MAEXPAUHWND__@@@Z
?ReflectNotifications@CSimpleWnd@SOUI@@QAEJIIJAAH@Z
?OnNextFrame@SwndContainerImpl@SOUI@@UAEXXZ
?BuildWndTreeZorder@SwndContainerImpl@SOUI@@MAEXXZ
?MarkWndTreeZorderDirty@SwndContainerImpl@SOUI@@MAEXXZ
?UnregisterTrackMouseEvent@SwndContainerImpl@SOUI@@MAEHK@Z
?RegisterTrackMouseEvent@SwndContainerImpl@SOUI@@MAEHK@Z
?GetHover@SwndContainerImpl@SOUI@@MAEKXZ
?GetFocus@SwndContainerImpl@SOUI@@MAEKXZ
?OnGetSwndCapture@SwndContainerImpl@SOUI@@MAEKXZ
?OnSetSwndFocus@SwndContainerImpl@SOUI@@MAEXK@Z
?DoFrameEvent@SwndContainerImpl@SOUI@@MAEJIIJ@Z
?RevokeDragDrop@SwndContainerImpl@SOUI@@MAEHK@Z
?RegisterDragDrop@SwndContainerImpl@SOUI@@MAEHKPAUIDropTarget@@@Z
?GetDesiredSize@SWindow@SOUI@@UAE?AVCSize@2@PBUtagRECT@@@Z
?EndDialog@SHostDialog@SOUI@@UAEXH@Z
?DoModal@SHostDialog@SOUI@@UAEHPAUHWND__@@@Z
?OnReleaseRenderTarget@SHostWnd@SOUI@@MAEXPAUIRenderTarget@2@ABVCRect@2@K@Z
??1SHostDialog@SOUI@@UAE@XZ
??0SHostDialog@SOUI@@QAE@PB_W@Z
?onRootResize@SHostWnd@SOUI@@UAE_NPAVEventArgs@2@@Z
?RequestRelayout@SHostWnd@SOUI@@UAEXKH@Z
?OnScaleChanged@SHostWnd@SOUI@@MAEXH@Z
?OnLanguageChanged@SHostWnd@SOUI@@MAEJXZ
?UpdateLayout@SHostWnd@SOUI@@MAEXXZ
?AfterPaint@SHostWnd@SOUI@@MAEXPAUIRenderTarget@2@AAVSPainter@2@@Z
?BeforePaint@SHostWnd@SOUI@@MAEXPAUIRenderTarget@2@AAVSPainter@2@@Z
?GetScale@SHostWnd@SOUI@@MBEHXZ
?GetScriptModule@SHostWnd@SOUI@@MAEPAUIScriptModule@2@XZ
?UnregisterTimelineHandler@SHostWnd@SOUI@@MAEHPAUITimelineHandler@2@@Z
?RegisterTimelineHandler@SHostWnd@SOUI@@MAEHPAUITimelineHandler@2@@Z
?UpdateTooltip@SHostWnd@SOUI@@MAEXXZ
?UpdateWindow@SHostWnd@SOUI@@MAEHXZ
?OnSetCaretPos@SHostWnd@SOUI@@MAEHHH@Z
?OnShowCaret@SHostWnd@SOUI@@MAEHH@Z
?OnCreateCaret@SHostWnd@SOUI@@MAEHKPAUHBITMAP__@@HH@Z
?IsSendWheel2Hover@SHostWnd@SOUI@@MBEHXZ
?IsTranslucent@SHostWnd@SOUI@@MBEHXZ
?OnSetSwndCapture@SHostWnd@SOUI@@MAEKK@Z
?OnReleaseSwndCapture@SHostWnd@SOUI@@MAEHXZ
?OnRedraw@SHostWnd@SOUI@@MAEXABVCRect@2@@Z
?OnNcHitTest@SWindow@SOUI@@UAEHVCPoint@2@@Z
?FireEventSync@SNotifyCenter@SOUI@@QAEXPAVEventArgs@2@@Z
?OnFinalRelease@?$TObjRefImpl@UIObjRef@@@SOUI@@UAEXXZ
?getSingleton@?$SSingleton@VSNotifyCenter@SOUI@@@SOUI@@SAAAVSNotifyCenter@2@XZ
?DeleteString@SComboBox@SOUI@@QAEHI@Z
?InsertItem@SComboBox@SOUI@@QAEHIPB_WHJ@Z
?GetClassNameW@SComboBox@SOUI@@SAPB_WXZ
?ProcessWindowMessage@SHostWnd@SOUI@@UAEHPAUHWND__@@IIJAAJK@Z
?_HandleEvent@SHostWnd@SOUI@@UAEHPAVEventArgs@2@@Z
?IsClass@SHostWnd@SOUI@@UBEHPB_W@Z
?GetObjectClass@SHostWnd@SOUI@@UBEPB_WXZ
?SendMessageW@CSimpleWnd@SOUI@@QAEJIIJ@Z
?DestroyWindow@CSimpleWnd@SOUI@@QAEHXZ
?SetTimer@SWindow@SOUI@@QAEHDI@Z
??0SMatrix@SOUI@@QAE@ABV01@@Z
??0SMatrix@SOUI@@QAE@XZ
?translate@SMatrix@SOUI@@QAEAAV12@MM@Z
?rotate@SMatrix@SOUI@@QAEAAV12@M@Z
?LoadImage2@SResProviderMgr@SOUI@@QAEPAUIBitmap@2@ABV?$TStringT@_WUwchar_traits@SOUI@@@2@@Z
?SetID@SWindow@SOUI@@QAEXH@Z
?GetClassNameW@STabCtrl@SOUI@@SAPB_WXZ
?GetObjectClass@SHostDialog@SOUI@@UBEPB_WXZ
?_HandleEvent@SMessageBoxImpl@SOUI@@UAEHPAVEventArgs@2@@Z
?ProcessWindowMessage@SMessageBoxImpl@SOUI@@UAEHPAUHWND__@@IIJAAJK@Z
??1SMessageBoxImpl@SOUI@@UAE@XZ
?toPixelSize@SLayoutSize@SOUI@@QBEHH@Z
?fromString@SLayoutSize@SOUI@@SA?AV12@ABV?$TStringT@_WUwchar_traits@SOUI@@@2@@Z
??0SMessageBoxImpl@SOUI@@QAE@XZ
?OnGetButtonText@SMessageBoxImpl@SOUI@@MBE?AV?$TStringT@_WUwchar_traits@SOUI@@@2@H@Z
?UpdateChildrenPosition@SWindow@SOUI@@UAEXXZ
?OnRelayout@SWindow@SOUI@@UAEHABVCRect@2@@Z
?GetChildrenLayoutRect@SWindow@SOUI@@UAE?AVCRect@2@XZ
?GetDesiredSize@SWindow@SOUI@@UAE?AVCSize@2@HH@Z
?NeedRedrawWhenStateChange@SWindow@SOUI@@UAEHXZ
?GetTextRect@SWindow@SOUI@@UAEXPAUtagRECT@@@Z
?DrawTextW@SWindow@SOUI@@UAEXPAUIRenderTarget@2@PB_WHPAUtagRECT@@I@Z
?DrawFocus@SWindow@SOUI@@UAEXPAUIRenderTarget@2@@Z
?LoadXmlDocment@SApplication@SOUI@@QAEHAAVxml_document@pugi@@PB_W1@Z
?tr@SApplication@SOUI@@QBE?AV?$TStringT@_WUwchar_traits@SOUI@@@2@ABV32@0@Z
?SetCurSel@STabCtrl@SOUI@@QAEHH@Z
?GetItem@STabCtrl@SOUI@@QAEPAVSTabPage@2@H@Z
?GetObjectType@SImageButton@SOUI@@UBEHXZ
?IsClass@SImageButton@SOUI@@UBEHPB_W@Z
??1SImageButton@SOUI@@UAE@XZ
??0SImageButton@SOUI@@QAE@XZ
?GetDesiredSize@SImageButton@SOUI@@MAE?AVCSize@2@HH@Z
??0SPainter@SOUI@@QAE@XZ
?GetObjectType@SButton@SOUI@@UBEHXZ
?IsClass@SButton@SOUI@@UBEHPB_W@Z
?NeedRedrawWhenStateChange@SButton@SOUI@@MAEHXZ
?OnGetDlgCode@SButton@SOUI@@MAEIXZ
?SetAttribute@SButton@SOUI@@UAEJABV?$TStringT@_WUwchar_traits@SOUI@@@2@0H@Z
?ProcessSwndMessage@SButton@SOUI@@MAEHIIJAAJ@Z
??1SButton@SOUI@@UAE@XZ
??1SPainter@SOUI@@QAE@XZ
?GetStyle@SWindow@SOUI@@QAEAAVSwndStyle@2@XZ
?GetState@SWindow@SOUI@@QAEKXZ
?BeforePaintEx@SWindow@SOUI@@QAEXPAUIRenderTarget@2@@Z
??0SButton@SOUI@@QAE@XZ
?OnAcceleratorPressed@SButton@SOUI@@MAE_NABVCAccelerator@2@@Z
?InitFromXml@SButton@SOUI@@MAEHVxml_node@pugi@@@Z
?OnStateChanged@SButton@SOUI@@MAEXKK@Z
?BeforePaint@SWindow@SOUI@@UAEXPAUIRenderTarget@2@AAVSPainter@2@@Z
?AfterPaint@SWindow@SOUI@@UAEXPAUIRenderTarget@2@AAVSPainter@2@@Z
?GetTrCtx@SWindow@SOUI@@UBEABV?$TStringT@_WUwchar_traits@SOUI@@@2@XZ
?CreateCaret@SWindow@SOUI@@UAEHPAUHBITMAP__@@HH@Z
?ShowCaret@SWindow@SOUI@@UAEXH@Z
?SetCaretPos@SWindow@SOUI@@UAEXHH@Z
?OnNextFrame@SButton@SOUI@@MAEXXZ
?GetPadding@SwndStyle@SOUI@@QBE?AVCRect@2@XZ
?IsDrawToCache@SWindow@SOUI@@MBE_NXZ
?IsLayeredWindow@SWindow@SOUI@@MBEHXZ
?OnDestroy@SWindow@SOUI@@IAEXXZ
?OnPaint@SWindow@SOUI@@IAEXPAUIRenderTarget@2@@Z
?OnShowWindow@SWindow@SOUI@@IAEXHI@Z
?DefAttributeProc@SWindow@SOUI@@MAEJABV?$TStringT@_WUwchar_traits@SOUI@@@2@0H@Z
?AfterAttribute@SWindow@SOUI@@MAEJABV?$TStringT@_WUwchar_traits@SOUI@@@2@0HJ@Z
?GetAttribute@SWindow@SOUI@@MBE?AV?$TStringT@_WUwchar_traits@SOUI@@@2@ABV32@@Z
?OnLanguageChanged@SWindow@SOUI@@UAEJXZ
?OnScaleChanged@SWindow@SOUI@@UAEXH@Z
?GetSkin@SSkinPoolMgr@SOUI@@QAEPAVISkinObj@2@ABV?$TStringT@_WUwchar_traits@SOUI@@@2@H@Z
?getSingleton@?$SSingleton@VSApplication@SOUI@@@SOUI@@SAAAVSApplication@2@XZ
?GetString@SResProviderMgr@SOUI@@QAE?AV?$TStringT@_WUwchar_traits@SOUI@@@2@ABV32@@Z
?OnColorize@ISkinObj@SOUI@@UAEXK@Z
??0SObjectInfo@SOUI@@QAE@ABV?$TStringT@_WUwchar_traits@SOUI@@@1@H@Z
?RegisterSystemObjects@SApplication@SOUI@@MAEXXZ
??0SObjectDefaultRegister@SOUI@@QAE@XZ
?GetClassType@SSkinObjBase@SOUI@@SAHXZ
?GetObjectType@SSkinObjBase@SOUI@@UBEHXZ
?IsClass@SSkinObjBase@SOUI@@UBEHPB_W@Z
??0SSkinObjBase@SOUI@@QAE@XZ
?GetAlpha@SSkinObjBase@SOUI@@UBEEXZ
?SetAlpha@SSkinObjBase@SOUI@@UAEXE@Z
?Draw@SSkinObjBase@SOUI@@UAEXPAUIRenderTarget@2@PBUtagRECT@@KE@Z
?Draw@SSkinObjBase@SOUI@@UAEXPAUIRenderTarget@2@PBUtagRECT@@K@Z
?IgnoreState@SSkinObjBase@SOUI@@UAEHXZ
?GetScale@SSkinObjBase@SOUI@@UBEHXZ
?Scale@SSkinObjBase@SOUI@@UAEPAVISkinObj@2@H@Z
?GetName@SSkinObjBase@SOUI@@UBEPB_WXZ
?SetAttribute@SSkinObjBase@SOUI@@UAEJABV?$TStringT@_WUwchar_traits@SOUI@@@2@0H@Z
?_Scale@SSkinObjBase@SOUI@@MAEXPAVISkinObj@2@H@Z
??1SSkinObjBase@SOUI@@UAE@XZ
?GetClassType@SWindow@SOUI@@SAHXZ
?GetClassType@SButton@SOUI@@SAHXZ
?GetClassType@SImageButton@SOUI@@SAHXZ
?ShowWindow@CSimpleWnd@SOUI@@QAEHH@Z
?getSingletonPtr@?$SSingleton@VSNotifyCenter@SOUI@@@SOUI@@SAPAVSNotifyCenter@2@XZ
?OnFinalRelease@?$TObjRefImpl@V?$SObjectImpl@VISkinObj@SOUI@@@SOUI@@@SOUI@@UAEXXZ
?Release@?$TObjRefImpl@V?$SObjectImpl@VISkinObj@SOUI@@@SOUI@@@SOUI@@UAEJXZ
?AddRef@?$TObjRefImpl@V?$SObjectImpl@VISkinObj@SOUI@@@SOUI@@@SOUI@@UAEJXZ
?OnInitFinished@?$SObjectImpl@VISkinObj@SOUI@@@SOUI@@UAEXVxml_node@pugi@@@Z
?GetAttribute@?$SObjectImpl@VISkinObj@SOUI@@@SOUI@@UBE?AV?$TStringT@_WUwchar_traits@SOUI@@@2@ABV32@@Z
?GetObjectType@?$SObjectImpl@VISkinObj@SOUI@@@SOUI@@UBEHXZ
?SetAttribute@?$SObjectImpl@VISkinObj@SOUI@@@SOUI@@UAEJPBD0H@Z
?SetAttribute@?$SObjectImpl@VISkinObj@SOUI@@@SOUI@@UAEJABV?$TStringT@DUchar_traits@SOUI@@@2@0H@Z
?AfterAttribute@?$SObjectImpl@VISkinObj@SOUI@@@SOUI@@UAEJABV?$TStringT@_WUwchar_traits@SOUI@@@2@0HJ@Z
?GetID@?$SObjectImpl@VISkinObj@SOUI@@@SOUI@@UBEHXZ
?InitFromXml@?$SObjectImpl@VISkinObj@SOUI@@@SOUI@@UAEHVxml_node@pugi@@@Z
?DefAttributeProc@?$SObjectImpl@VISkinObj@SOUI@@@SOUI@@UAEJABV?$TStringT@_WUwchar_traits@SOUI@@@2@0H@Z
??1SObjectInfo@SOUI@@QAE@XZ
??0SNotifyCenter@SOUI@@QAE@XZ
??1SNotifyCenter@SOUI@@UAE@XZ
?CreateResProvider@SOUI@@YAHW4BUILTIN_RESTYPE@1@PAPAUIObjRef@@@Z
?Create@SHostWnd@SOUI@@QAEPAUHWND__@@PAU3@HHHH@Z
?RegisterFactory@SObjectFactoryMgr@SOUI@@QAE_NAAVSObjectFactory@2@_N@Z
?CreateObject@SObjectFactoryMgr@SOUI@@UBEPAUIObject@2@ABVSObjectInfo@2@@Z
??0SApplication@SOUI@@QAE@PAUIRenderFactory@1@PAUHINSTANCE__@@PB_WABUISystemObjectRegister@1@H@Z
??1SApplication@SOUI@@UAE@XZ
?InitXmlNamedID@SApplication@SOUI@@QAEXPBU?$TNAMEDVALUE@H@2@HH@Z
?LoadSystemNamedResource@SApplication@SOUI@@QAEIPAUIResProvider@2@@Z
?SetLogManager@SApplication@SOUI@@QAEXPAUILog4zManager@2@@Z
?Run@SApplication@SOUI@@QAEHPAUHWND__@@@Z
?CreateWindowByName@SApplication@SOUI@@UBEPAVSWindow@2@PB_W@Z
?CreateSkinByName@SApplication@SOUI@@UBEPAVISkinObj@2@PB_W@Z
?CreateInterpolatorByName@SApplication@SOUI@@UBEPAUIInterpolator@2@PB_W@Z
?CreateAccProxy@SApplication@SOUI@@UBEPAUIAccProxy@2@PAVSWindow@2@@Z
?CreateAccessible@SApplication@SOUI@@UBEPAUIAccessible@@PAVSWindow@2@@Z
?AddResProvider@SResProviderMgr@SOUI@@QAEXPAUIResProvider@2@PB_W@Z
?CenterWindow@CSimpleWnd@SOUI@@QAEHPAUHWND__@@@Z
?GetObjectClass@EventArgs@SOUI@@UBEPB_WXZ
?GetObjectType@EventArgs@SOUI@@UBEHXZ
?IsClass@EventArgs@SOUI@@UBEHPB_W@Z
??0EventArgs@SOUI@@QAE@PAV?$SObjectImpl@UIObject@SOUI@@@1@@Z
??1EventArgs@SOUI@@UAE@XZ
??1ISlotFunctor@SOUI@@UAE@XZ
??0ISlotFunctor@SOUI@@QAE@XZ
?GetClassNameW@SWindow@SOUI@@SAPB_WXZ
?GetClassNameW@SButton@SOUI@@SAPB_WXZ
?GetClassNameW@SImageButton@SOUI@@SAPB_WXZ
?GetClassNameW@SAnimateImgWnd@SOUI@@SAPB_WXZ
?OnContentChanged@SWindow@SOUI@@UAEXXZ

ws2_32

ntohs
socket
send
htons
getsockname
WSAStartup
getsockopt
WSAAddressToStringW
shutdown
ntohl
select
closesocket
bind
accept
freeaddrinfo
connect
listen
recv
ioctlsocket
setsockopt
getaddrinfo
WSAGetLastError

iphlpapi

GetAdaptersAddresses
ConvertLengthToIpv4Mask

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList

kernel32

RemoveDirectoryW
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
HeapSize
MultiByteToWideChar
GetLastError
OutputDebugStringW
LockResource
DeleteFileW
HeapReAlloc
RaiseException
FindResourceExW
LoadResource
FindResourceW
HeapAlloc
DecodePointer
HeapDestroy
DeleteCriticalSection
GetProcessHeap
WideCharToMultiByte
CreateDirectoryW
ReadFile
WriteFile
CreateFileW
CloseHandle
GlobalAlloc
GlobalLock
GlobalUnlock
GetModuleFileNameA
WritePrivateProfileStringW
OutputDebugStringA
InitializeCriticalSectionEx
GetPrivateProfileStringW
CreateProcessW
GetTickCount
FindFirstFileExW
GetFullPathNameW
FindNextFileW
Sleep
UnhandledExceptionFilter
RemoveDirectoryA
GetDiskFreeSpaceExA
lstrlenW
CreatePipe
GetTempPathW
IsDebuggerPresent
WaitForSingleObject
GetLogicalDriveStringsW
CreateToolhelp32Snapshot
GetFileAttributesExW
Process32NextW
SetEvent
GetDiskFreeSpaceExW
TerminateThread
lstrcpyA
Process32FirstW
lstrcmpW
LoadLibraryW
SetCurrentDirectoryW
GetProcAddress
FreeLibrary
GetCurrentProcess
GetModuleHandleW
CreateEventW
ResetEvent
FormatMessageW
ExitProcess
EnterCriticalSection
ReleaseSemaphore
LeaveCriticalSection
InitializeCriticalSection
CreateThread
CreateSemaphoreW
UnlockFileEx
CreateFileA
LockFileEx
GetPrivateProfileStringA
GetFullPathNameA
GetCurrentThreadId
GetCurrentProcessId
SystemTimeToFileTime
GetSystemTime
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
VirtualQuery
SizeofResource
HeapFree
CreateMutexW
WaitForSingleObjectEx
DeleteFileA
FindClose
CancelIo
SetLastError
DeviceIoControl
GetOverlappedResult
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
GetStdHandle
SetConsoleMode
GetConsoleMode

user32

MessageBoxW
OffsetRect
DestroyIcon
SendMessageW
wsprintfW
UnregisterClassW

comdlg32

GetOpenFileNameW

advapi32

OpenServiceA
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
CloseServiceHandle
QueryServiceStatusEx
ChangeServiceConfigW
StartServiceW
OpenSCManagerA

shell32

SHGetPathFromIDListW
SHGetSpecialFolderLocation
ShellExecuteW
SHBrowseForFolderW

ole32

OleInitialize
OleUninitialize
CoCreateGuid
CreateStreamOnHGlobal
CoTaskMemFree

oleaut32

SystemTimeToVariantTime
VariantTimeToSystemTime

getopt

optarg_a
optind
getopt_long_a

libcrypto-3

ASN1_INTEGER_new
BIO_ctrl
X509V3_EXT_conf_nid
PEM_write_bio_X509
X509_set_version
ASN1_TIME_free
EVP_PKEY_new
X509_set_pubkey
RSA_new
X509_add_ext
X509_new
BN_free
BN_set_word
ASN1_INTEGER_free
BIO_s_mem
EVP_PKEY_assign
X509_set1_notBefore
ASN1_TIME_new
X509_set1_notAfter
EVP_sha1
RSA_generate_key_ex
X509V3_set_ctx
X509V3_EXT_cleanup
ASN1_INTEGER_set
PEM_write_bio_PrivateKey
X509_set_serialNumber
X509_sign
BIO_new
BIO_get_callback_arg
BIO_set_callback_arg
PEM_read_bio_X509
PEM_read_bio_PrivateKey
EVP_PKEY_free
BIO_s_null
BIO_free
BIO_set_callback_ex
X509_free
BIO_new_mem_buf
SHA1_Update
SHA1_Init
SHA1_Final
X509_EXTENSION_free
PEM_read_bio_RSAPublicKey
SHA384
BN_new
ASN1_TIME_set

libcurl

curl_easy_pause
curl_easy_perform
curl_easy_init
curl_easy_cleanup
curl_easy_setopt
curl_formadd
curl_formfree
curl_slist_append
curl_slist_free_all
curl_global_init
curl_global_cleanup

libssl-3

SSL_do_handshake
TLS_method
SSL_free
SSL_CTX_set_options
SSL_set_connect_state
SSL_get_error
SSL_set_shutdown
SSL_CTX_set_security_level
SSL_shutdown
SSL_set_verify
SSL_read
SSL_set_bio
SSL_write
SSL_CTX_new
SSL_CTX_use_PrivateKey
SSL_CTX_ctrl
SSL_CTX_free
SSL_new
SSL_CTX_use_certificate

libxml2

xmlStrlen
xmlBufferCreate
xmlBufferFree
xmlFreeDoc
xmlGetProp
xmlNodeListGetString
xmlStrcmp
xmlReadMemory
xmlXPathFreeObject
xmlXPathNewContext
xmlXPathFreeContext
xmlXPathEvalExpression
htmlNodeDump
xmlFree
xmlNodeGetContent

zip

zip_stat_init
zip_fseek
zip_fclose
zip_ftell
zip_close
zip_fopen_index
zip_get_num_entries
zip_open
zip_name_locate
zip_fread
zip_stat_index
zip_source_free
zip_delete
zip_get_num_files
zip_add
zip_get_name
zip_strerror
zip_replace
zip_source_buffer
zip_unchange_all
zip_file_get_external_attributes

zlib1

gzread
gzwrite
gzclose
gzeof
gzopen

msvcp140

?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z

shlwapi

PathIsDirectoryW
StrCpyNW
StrToIntExW
PathFileExistsW

gdiplus

GdipImageSelectActiveFrame
GdipFree
GdipDisposeImage
GdipCreateBitmapFromStreamICM
GdipAlloc
GdipCreateBitmapFromStream
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCloneImage
GdipImageGetFrameDimensionsCount
GdipGetImageHeight
GdiplusShutdown
GdiplusStartup
GdipImageGetFrameDimensionsList
GdipCreateBitmapFromFileICM
GdipImageGetFrameCount
GdipGetPropertyItemSize
GdipDrawImageI
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImageWidth
GdipDeleteGraphics
GdipGetPropertyItem
GdipGetImageGraphicsContext

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

wininet

DeleteUrlCacheEntryW

urlmon

URLDownloadToFileW

vcruntime140

__std_exception_destroy
__CxxFrameHandler3
__std_terminate
wcsrchr
wcschr
wcsstr
_purecall
strrchr
strchr
strstr
memcpy
memmove
memset
__current_exception
__current_exception_context
_CxxThrowException
_except_handler4_common
__std_type_info_destroy_list
__vcrt_GetModuleFileNameW
__vcrt_LoadLibraryExW
__std_exception_copy
memchr

api-ms-win-crt-string-l1-1-0

_strdup
strcspn
isprint
strtok
wmemcpy_s
_strnicmp
strlen
strcat_s
strcmp
isspace
isdigit
strncpy
wcsnlen
toupper
isxdigit
wcsncpy
strnlen
strcpy_s
iswspace
_stricmp
strncmp
tolower

api-ms-win-crt-stdio-l1-1-0

_fileno
__stdio_common_vsprintf
__stdio_common_vsprintf_s
fclose
fopen
feof
__stdio_common_vswscanf
_lseeki64
__stdio_common_vsnprintf_s
fseek
__stdio_common_vsnwprintf_s
_wfopen
_set_fmode
fread
__p__commode
__stdio_common_vsscanf
__stdio_common_vswprintf
__stdio_common_vfprintf
fputc
__acrt_iob_func
_close
__stdio_common_vswprintf_s
fputs
fwrite
_open
rewind
ftell
_isatty
fflush

api-ms-win-crt-filesystem-l1-1-0

_mkdir
_access
_fstat64i32
rename
_findnext64i32
_findfirst64i32
remove
_stat64i32
_findclose
_stat64
_splitpath
_wremove

api-ms-win-crt-runtime-l1-1-0

terminate
_seh_filter_exe
_set_app_type
_configure_wide_argv
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_cexit
exit
_initterm_e
strerror
signal
_exit
_c_exit
_register_thread_local_exe_atexit_callback
_crt_at_quick_exit
_controlfp_s
_execute_onexit_table
_set_errno
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_endthreadex
_invalid_parameter_noinfo
_errno
_invalid_parameter_noinfo_noreturn
_wassert
_crt_atexit
_beginthreadex
perror

api-ms-win-crt-heap-l1-1-0

calloc
_recalloc
free
_set_new_mode
realloc
malloc
_callnewh

api-ms-win-crt-time-l1-1-0

_mktime64
strftime
_localtime64
_gmtime64
_localtime64_s
_time64

api-ms-win-crt-convert-l1-1-0

atol
strtoull
strtol
atof
_wtoi
wcstombs_s
mbstowcs_s
atoi
strtoul

api-ms-win-crt-utility-l1-1-0

rand
srand

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-multibyte-l1-1-0

_mbschr

api-ms-win-crt-math-l1-1-0

ceil
fmin
__setusermatherr
_except1
_libm_sse2_pow_precise
_dclass

api-ms-win-crt-conio-l1-1-0

_getch

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Exports

Exports

afc_client_free
afc_client_new
afc_client_new_with_service_client
afc_client_start_service
afc_dictionary_free
afc_file_close
afc_file_lock
afc_file_open
afc_file_read
afc_file_seek
afc_file_tell
afc_file_truncate
afc_file_write
afc_get_device_info
afc_get_device_info_key
afc_get_file_info
afc_make_directory
afc_make_link
afc_read_directory
afc_remove_path
afc_remove_path_and_contents
afc_rename_path
afc_set_file_time
afc_truncate
buffer_read_from_filename
buffer_write_to_filename
cfprintf
collection_add
collection_copy
collection_count
collection_free
collection_init
collection_remove
cond_destroy
cond_init
cond_signal
cond_wait
cond_wait_timeout
cprintf
cvfprintf
diagnostics_relay_client_free
diagnostics_relay_client_new
diagnostics_relay_client_start_service
diagnostics_relay_goodbye
diagnostics_relay_query_ioregistry_entry
diagnostics_relay_query_ioregistry_plane
diagnostics_relay_query_mobilegestalt
diagnostics_relay_request_diagnostics
diagnostics_relay_restart
diagnostics_relay_shutdown
diagnostics_relay_sleep
dirname_must_free
generate_uuid
idevice_activation_drm_handshake_request_new
idevice_activation_request_free
idevice_activation_request_get_field
idevice_activation_request_get_fields
idevice_activation_request_get_url
idevice_activation_request_new
idevice_activation_request_new_from_lockdownd
idevice_activation_request_set_field
idevice_activation_request_set_fields
idevice_activation_request_set_fields_from_response
idevice_activation_request_set_url
idevice_activation_response_field_requires_input
idevice_activation_response_field_secure_input
idevice_activation_response_free
idevice_activation_response_get_activation_record
idevice_activation_response_get_description
idevice_activation_response_get_field
idevice_activation_response_get_fields
idevice_activation_response_get_headers
idevice_activation_response_get_label
idevice_activation_response_get_placeholder
idevice_activation_response_get_title
idevice_activation_response_has_errors
idevice_activation_response_is_activation_acknowledged
idevice_activation_response_is_authentication_required
idevice_activation_response_new
idevice_activation_response_new_from_html
idevice_activation_response_to_buffer
idevice_activation_send_request
idevice_activation_set_debug_level
idevice_connect
idevice_connection_disable_bypass_ssl
idevice_connection_disable_ssl
idevice_connection_enable_ssl
idevice_connection_get_fd
idevice_connection_receive
idevice_connection_receive_timeout
idevice_connection_send
idevice_device_list_extended_free
idevice_device_list_free
idevice_disconnect
idevice_event_subscribe
idevice_event_unsubscribe
idevice_events_subscribe
idevice_events_unsubscribe
idevice_free
idevice_get_device_list
idevice_get_device_list_extended
idevice_get_handle
idevice_get_udid
idevice_new
idevice_new_with_options
idevice_set_debug_level
instproxy_archive
instproxy_browse
instproxy_browse_with_callback
instproxy_check_capabilities_match
instproxy_client_free
instproxy_client_get_path_for_bundle_identifier
instproxy_client_new
instproxy_client_options_add
instproxy_client_options_free
instproxy_client_options_new
instproxy_client_options_set_return_attributes
instproxy_client_start_service
instproxy_command_get_name
instproxy_install
instproxy_lookup
instproxy_lookup_archives
instproxy_remove_archive
instproxy_restore
instproxy_status_get_current_list
instproxy_status_get_error
instproxy_status_get_name
instproxy_status_get_percent_complete
instproxy_uninstall
instproxy_upgrade
libusbmuxd_set_debug_level
libusbmuxd_set_use_inotify
lockdownd_activate
lockdownd_client_free
lockdownd_client_new
lockdownd_client_new_with_handshake
lockdownd_client_set_label
lockdownd_data_classes_free
lockdownd_deactivate
lockdownd_enter_recovery
lockdownd_get_device_name
lockdownd_get_device_udid
lockdownd_get_sync_data_classes
lockdownd_get_value
lockdownd_goodbye
lockdownd_pair
lockdownd_pair_with_options
lockdownd_query_type
lockdownd_receive
lockdownd_remove_value
lockdownd_send
lockdownd_service_descriptor_free
lockdownd_set_value
lockdownd_start_service
lockdownd_start_service_with_escrow_bag
lockdownd_start_session
lockdownd_stop_session
lockdownd_strerror
lockdownd_unpair
lockdownd_validate_pair
mobileactivation_activate
mobileactivation_activate_with_session
mobileactivation_client_free
mobileactivation_client_new
mobileactivation_client_start_service
mobileactivation_create_activation_info
mobileactivation_create_activation_info_with_session
mobileactivation_create_activation_session_info
mobileactivation_deactivate
mobileactivation_get_activation_state
mobilebackup2_client_free
mobilebackup2_client_new
mobilebackup2_client_start_service
mobilebackup2_receive_message
mobilebackup2_receive_raw
mobilebackup2_send_message
mobilebackup2_send_raw
mobilebackup2_send_request
mobilebackup2_send_status_response
mobilebackup2_version_exchange
mutex_destroy
mutex_init
mutex_lock
mutex_unlock
np_client_free
np_client_new
np_client_start_service
np_observe_notification
np_observe_notifications
np_post_notification
np_set_notify_callback
pair_record_get_host_id
preboard_client_free
preboard_client_new
preboard_client_start_service
preboard_commit_stashbag
preboard_create_stashbag
preboard_receive
preboard_receive_with_timeout
preboard_send
property_list_service_client_free
property_list_service_client_new
property_list_service_disable_ssl
property_list_service_enable_ssl
property_list_service_get_service_client
property_list_service_receive_plist
property_list_service_receive_plist_with_timeout
property_list_service_send_binary_plist
property_list_service_send_xml_plist
restored_client_free
restored_client_new
restored_client_set_label
restored_get_value
restored_goodbye
restored_query_type
restored_query_value
restored_reboot
restored_receive
restored_send
restored_start_restore
sbservices_client_free
sbservices_client_new
sbservices_client_start_service
sbservices_get_home_screen_wallpaper_pngdata
sbservices_get_icon_pngdata
sbservices_get_icon_state
sbservices_get_interface_orientation
sbservices_set_icon_state
service_client_factory_start_service
service_client_free
service_client_new
service_disable_bypass_ssl
service_disable_ssl
service_enable_ssl
service_get_connection
service_receive
service_receive_with_timeout
service_send
string_append
string_build_path
string_concat
string_format_size
string_toupper
term_colors_init
term_colors_set_enabled
thread_alive
thread_cancel
thread_detach
thread_free
thread_join
thread_new
thread_once
usbmuxd_connect
usbmuxd_delete_pair_record
usbmuxd_device_list_free
usbmuxd_disconnect
usbmuxd_events_subscribe
usbmuxd_events_unsubscribe
usbmuxd_get_device
usbmuxd_get_device_by_udid
usbmuxd_get_device_list
usbmuxd_read_buid
usbmuxd_read_pair_record
usbmuxd_recv
usbmuxd_recv_timeout
usbmuxd_save_pair_record
usbmuxd_save_pair_record_with_device_id
usbmuxd_send
usbmuxd_subscribe
usbmuxd_unsubscribe
userpref_get_paired_udids
userpref_read_pair_record
userpref_read_system_buid

Sections

.text
Size: 739KB - Virtual size: 739KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 628KB - Virtual size: 628KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.msvcjmc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 854KB - Virtual size: 854KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4bbb8761d76d1b07ceb6e78c304590a1

Headers

DLL Characteristics

File Characteristics

Imports

utilities

soui

ws2_32

iphlpapi

setupapi

kernel32

user32

comdlg32

advapi32

shell32

ole32

oleaut32

getopt

libcrypto-3

libcurl

libssl-3

libxml2

zip

zlib1

msvcp140

shlwapi

gdiplus

version

wininet

urlmon

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-conio-l1-1-0

api-ms-win-crt-locale-l1-1-0

Exports

Exports

Sections

.text Size: 739KB - Virtual size: 739KB

.rdata Size: 628KB - Virtual size: 628KB

.data Size: 10KB - Virtual size: 144KB

.msvcjmc Size: 512B - Virtual size: 24B

.rsrc Size: 854KB - Virtual size: 854KB

.reloc Size: 54KB - Virtual size: 53KB

.text
Size: 739KB - Virtual size: 739KB

.rdata
Size: 628KB - Virtual size: 628KB

.data
Size: 10KB - Virtual size: 144KB

.msvcjmc
Size: 512B - Virtual size: 24B

.rsrc
Size: 854KB - Virtual size: 854KB

.reloc
Size: 54KB - Virtual size: 53KB