agenttesla | MagicCFGWin_v1[.]2[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

MagicCFGWin_v1.2.zip
Size

149.1MB
MD5

b191f7089641b5a0dcad30b3601f06ab
SHA1

04fbcce7633c4c9f70cbc5dcb28a99b151f52d06
SHA256

d4588a9b383a87cb4f974d622130e28c192e5b66f18d32dcde49dafac4e807be
SHA512

bfb622504a15570cfba5b1eba71f4604cf60251b44e47e4cb758e553e0866cb103800fdd9ef56b767a98aedf938715e75bce751f3b8860bbb5c0894f4c7652c0
SSDEEP

3145728:6MNQ+3IS3ID6QAJTdQAqZVcRVcIkUfGdI4U78gfWHY:jNTI0ID6QSdQHCP2tXY

Score

10^/10

agenttesla

Malware Config

Signatures

AgentTesla payload 1 IoCs

resource	yara_rule
static1/unpack001/MagicCFGWin_v1.2/Guna.UI2.dll	family_agenttesla

Agenttesla family
agenttesla

Unsigned PE 52 IoCs

Checks for missing Authenticode signature.

resource
unpack001/MagicCFGWin_v1.2/LibUsbDotNet.LibUsbDotNet.dll
unpack001/MagicCFGWin_v1.2/MagicCFG.exe
unpack001/MagicCFGWin_v1.2/resources/drivers/install_x64.exe
unpack001/MagicCFGWin_v1.2/resources/drivers/install_x86.exe
unpack001/MagicCFGWin_v1.2/resources/drivers/libusbK/amd64/libusb0_x86.dll
unpack001/MagicCFGWin_v1.2/resources/drivers/libusbK/amd64/libusbK.dll
unpack001/MagicCFGWin_v1.2/resources/drivers/libusbK/amd64/libusbK_x86.dll
unpack001/MagicCFGWin_v1.2/resources/drivers/libusbK/x86/libusb0.dll
unpack001/MagicCFGWin_v1.2/resources/drivers/libusbK/x86/libusbK.dll
unpack001/MagicCFGWin_v1.2/resources/drivers/usb/serial/inf-wizard.exe
unpack001/MagicCFGWin_v1.2/resources/drivers/usb/serial/install-filter-win.exe
unpack001/MagicCFGWin_v1.2/resources/drivers/usb/serial/install-filter.exe
unpack001/MagicCFGWin_v1.2/resources/drivers/usb/serial/testlibusb-win.exe
unpack001/MagicCFGWin_v1.2/resources/drivers/usb/serial/testlibusb.exe
unpack001/MagicCFGWin_v1.2/resources/drivers/usb/serial/usbaapl64.sys
unpack001/MagicCFGWin_v1.2/resources/drivers/usb/serial/usbser.sys
unpack001/MagicCFGWin_v1.2/resources/drivers/usb/x64/usbaapl64.sys
unpack001/MagicCFGWin_v1.2/resources/drivers/usb/x86/usbaapl.sys
unpack001/MagicCFGWin_v1.2/resources/import/LibUsbDotNet.dll
unpack001/MagicCFGWin_v1.2/resources/import/iproxy.exe
unpack001/MagicCFGWin_v1.2/resources/import/irecovery.exe
unpack001/MagicCFGWin_v1.2/resources/import/libimobiledevice-1.0.dll
unpack001/MagicCFGWin_v1.2/resources/import/libimobiledevice-glue-1.0.dll
unpack001/MagicCFGWin_v1.2/resources/import/libirecovery-1.0.dll
unpack001/MagicCFGWin_v1.2/resources/import/libplist++-2.0.dll
unpack001/MagicCFGWin_v1.2/resources/import/libplist-2.0.dll
unpack001/MagicCFGWin_v1.2/resources/import/libreadline8.dll
unpack001/MagicCFGWin_v1.2/resources/import/libtermcap-0.dll
unpack001/MagicCFGWin_v1.2/resources/import/libusb-1.0.dll
unpack001/MagicCFGWin_v1.2/resources/import/libusbmuxd-2.0.dll
unpack001/MagicCFGWin_v1.2/resources/utils/idevicecheck.dll
unpack001/MagicCFGWin_v1.2/resources/utils/idevicerecovery.exe
unpack001/MagicCFGWin_v1.2/resources/utils/imobiledevice-net-lighthouse.dll
unpack001/MagicCFGWin_v1.2/resources/utils/imobiledevice.dll
unpack001/MagicCFGWin_v1.2/resources/utils/libcrypto-1_1-x64.dll
unpack001/MagicCFGWin_v1.2/resources/utils/libimobiledevice-1.0.dll
unpack001/MagicCFGWin_v1.2/resources/utils/libimobiledevice-glue-1.0.dll
unpack001/MagicCFGWin_v1.2/resources/utils/libimobiledevice.dll
unpack001/MagicCFGWin_v1.2/resources/utils/libimobileinfo-1.0.dll
unpack001/MagicCFGWin_v1.2/resources/utils/libirecovery-1.0-dev.dll
unpack001/MagicCFGWin_v1.2/resources/utils/libirecovery-1.0.dll
unpack001/MagicCFGWin_v1.2/resources/utils/libplist++-2.0.dll
unpack001/MagicCFGWin_v1.2/resources/utils/libplist-2.0.dll
unpack001/MagicCFGWin_v1.2/resources/utils/libreadline8.dll
unpack001/MagicCFGWin_v1.2/resources/utils/libssl-1_1-x64.dll
unpack001/MagicCFGWin_v1.2/resources/utils/libssl-1_1-x86.dll
unpack001/MagicCFGWin_v1.2/resources/utils/libtermcap-0.dll
unpack001/MagicCFGWin_v1.2/resources/utils/libusb-1.0.dll
unpack001/MagicCFGWin_v1.2/resources/utils/libusbmuxd-2.0.dll
unpack001/MagicCFGWin_v1.2/resources/utils/openssh-1_0-dev.dll
unpack001/MagicCFGWin_v1.2/resources/utils/plist.dll
unpack001/MagicCFGWin_v1.2/resources/utils/usbmuxd.dll

Files

MagicCFGWin_v1.2.zip
.zip
MagicCFGWin_v1.2/Guna.UI2.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Certificate

Issuer

CN=Sobatdata Root CA

Not Before

23/10/2019, 05:22

Not After

22/10/2025, 17:00

Subject

CN=Sobatdata Software

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

58:f7:61:2a:89:fd:07:27:00:87:bc:4a:ed:f1:dd:3f:c5:e9:29:c2
Signer

Actual PE Digest

58:f7:61:2a:89:fd:07:27:00:87:bc:4a:ed:f1:dd:3f:c5:e9:29:c2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/LibUsbDotNet.LibUsbDotNet.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\1\s\stage\LibUsbDotNet\obj\Release\net45\LibUsbDotNet.LibUsbDotNet.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/MagicCFG.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

~Tv Y
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

~Tv Y
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 748KB - Virtual size: 747KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/Microsoft.Bcl.AsyncInterfaces.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/08/2022, 20:23

Not After

03/08/2023, 20:23

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

dd:e4:54:0c:99:60:4b:1c:d7:75:bb:9f:7d:c3:a0:52:66:42:53:8a:ea:76:a1:ad:88:a1:38:83:d6:18:e7:a0
Signer

Actual PE Digest

dd:e4:54:0c:99:60:4b:1c:d7:75:bb:9f:7d:c3:a0:52:66:42:53:8a:ea:76:a1:ad:88:a1:38:83:d6:18:e7:a0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.Bcl.AsyncInterfaces/Release/net462/Microsoft.Bcl.AsyncInterfaces.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/System.Buffers.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:37

Not After

02/05/2020, 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d4:65:dc:35:86:93:2f:fb:0d:d0:c1:ac:2f:31:92:bd:28:75:14:21:57:3f:3b:7d:55:33:05:32:59:3d:d4:62
Signer

Actual PE Digest

d4:65:dc:35:86:93:2f:fb:0d:d0:c1:ac:2f:31:92:bd:28:75:14:21:57:3f:3b:7d:55:33:05:32:59:3d:d4:62

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Buffers\netfx\System.Buffers.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/System.Memory.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:32

Not After

01/09/2022, 18:32

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a4:6c:07:cf:a9:38:ad:dd:05:7b:ae:24:e4:ad:78:9e:fa:07:82:fb:e0:b3:ea:d5:f5:bc:8e:78:ff:71:9b:27
Signer

Actual PE Digest

a4:6c:07:cf:a9:38:ad:dd:05:7b:ae:24:e4:ad:78:9e:fa:07:82:fb:e0:b3:ea:d5:f5:bc:8e:78:ff:71:9b:27

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Memory\netfx\System.Memory.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/System.Numerics.Vectors.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:c2:a0:09:c5:37:76:e9:f6:cd:00:00:00:00:00:c2
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:C3B0-0F6A-4111,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:20

Not After

11/08/2018, 20:20

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

99:0e:22:c8:fb:bc:e4:62:63:f1:99:41:db:03:50:70:a9:f7:d6:99:5f:43:9a:3b:2d:d5:4b:9c:fc:3d:7c:e6
Signer

Actual PE Digest

99:0e:22:c8:fb:bc:e4:62:63:f1:99:41:db:03:50:70:a9:f7:d6:99:5f:43:9a:3b:2d:d5:4b:9c:fc:3d:7c:e6

Digest Algorithm

sha256

PE Digest Matches

true

12:57:a0:40:75:36:a1:51:f8:dd:f2:97:bc:f9:16:a8:2c:bd:f3:8d
Signer

Actual PE Digest

12:57:a0:40:75:36:a1:51:f8:dd:f2:97:bc:f9:16:a8:2c:bd:f3:8d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\A\_work\39\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.Numerics.Vectors/net46\System.Numerics.Vectors.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/System.Runtime.CompilerServices.Unsafe.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/02/2021, 20:09

Not After

10/02/2022, 20:09

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a0:70:99:f3:f5:b7:ef:fb:27:e6:01:6f:08:b5:3a:37:53:0b:75:67:14:d0:60:c5:7a:94:ea:2c:97:22:88:f7
Signer

Actual PE Digest

a0:70:99:f3:f5:b7:ef:fb:27:e6:01:6f:08:b5:3a:37:53:0b:75:67:14:d0:60:c5:7a:94:ea:2c:97:22:88:f7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\artifacts\obj\System.Runtime.CompilerServices.Unsafe\net461-Release\System.Runtime.CompilerServices.Unsafe.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/System.Text.Encodings.Web.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/08/2022, 20:23

Not After

03/08/2023, 20:23

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e8:c3:5f:a8:e8:49:f6:6f:ce:7c:4e:41:6e:cd:0a:5b:2b:95:b7:d9:f0:22:47:29:d8:22:9f:86:e5:74:80:25
Signer

Actual PE Digest

e8:c3:5f:a8:e8:49:f6:6f:ce:7c:4e:41:6e:cd:0a:5b:2b:95:b7:d9:f0:22:47:29:d8:22:9f:86:e5:74:80:25

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/System.Text.Encodings.Web/Release/net462/System.Text.Encodings.Web.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/System.Text.Json.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:06:9c:9c:5d:25:e3:10:aa:47:00:00:00:00:03:06
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/08/2022, 20:23

Not After

03/08/2023, 20:23

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

91:12:30:a0:48:ab:bc:09:c9:76:c4:ce:77:50:81:fe:01:33:9c:80:9f:1e:5b:3f:3e:ec:b0:75:0c:29:9f:5a
Signer

Actual PE Digest

91:12:30:a0:48:ab:bc:09:c9:76:c4:ce:77:50:81:fe:01:33:9c:80:9f:1e:5b:3f:3e:ec:b0:75:0c:29:9f:5a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/System.Text.Json/Release/net462/System.Text.Json.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 555KB - Virtual size: 554KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/System.Threading.Tasks.Extensions.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:37

Not After

02/05/2020, 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

da:fb:83:40:c8:c2:8e:cb:07:b8:6a:f1:de:5f:60:bf:04:02:39:30:51:4d:e3:8a:90:db:7a:5d:d3:4f:71:f0
Signer

Actual PE Digest

da:fb:83:40:c8:c2:8e:cb:07:b8:6a:f1:de:5f:60:bf:04:02:39:30:51:4d:e3:8a:90:db:7a:5d:d3:4f:71:f0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Threading.Tasks.Extensions\netfx\System.Threading.Tasks.Extensions.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/System.ValueTuple.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:c0:de:2c:3d:07:94:e4:49:79:00:00:00:00:00:c0
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:7AB5-2DF2-DA3F,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:20

Not After

11/08/2018, 20:20

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d4:37:69:30:cf:c4:bf:17:93:07:4e:1a:10:f5:a8:79:e8:8f:5f:58:7c:25:a7:a1:5a:95:50:d7:24:03:73:42
Signer

Actual PE Digest

d4:37:69:30:cf:c4:bf:17:93:07:4e:1a:10:f5:a8:79:e8:8f:5f:58:7c:25:a7:a1:5a:95:50:d7:24:03:73:42

Digest Algorithm

sha256

PE Digest Matches

true

78:b3:c4:5e:5b:a3:f6:32:6e:9b:44:3e:33:4f:0e:39:8c:1c:4a:00
Signer

Actual PE Digest

78:b3:c4:5e:5b:a3:f6:32:6e:9b:44:3e:33:4f:0e:39:8c:1c:4a:00

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\A\_work\39\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.ValueTuple/net47\System.ValueTuple.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/diags/iPad5,3.CFG
MagicCFGWin_v1.2/resources/diags/iPad5,4.CFG
MagicCFGWin_v1.2/resources/diags/iPad6,11-8003.CFG
MagicCFGWin_v1.2/resources/diags/iPad6,11.CFG
MagicCFGWin_v1.2/resources/diags/iPad6,3.CFG
MagicCFGWin_v1.2/resources/diags/iPad6,4.CFG
MagicCFGWin_v1.2/resources/diags/iPad7,1.CFG
MagicCFGWin_v1.2/resources/diags/iPad7,1.zip
.zip
iPad7,1/diag
iPad7,1/ibec.img4
iPad7,1/ibss.img4
MagicCFGWin_v1.2/resources/diags/iPad7,11.CFG
MagicCFGWin_v1.2/resources/diags/iPad7,12.CFG
MagicCFGWin_v1.2/resources/diags/iPad7,5.CFG
MagicCFGWin_v1.2/resources/diags/iPad7,6.CFG
MagicCFGWin_v1.2/resources/diags/iPhone10,1.CFG
MagicCFGWin_v1.2/resources/diags/iPhone10,2.CFG
MagicCFGWin_v1.2/resources/diags/iPhone10,3.CFG
MagicCFGWin_v1.2/resources/diags/iPhone10,4.CFG
MagicCFGWin_v1.2/resources/diags/iPhone10,5.CFG
MagicCFGWin_v1.2/resources/diags/iPhone10,6.CFG
MagicCFGWin_v1.2/resources/diags/iPhone8,1-8003.CFG
MagicCFGWin_v1.2/resources/diags/iPhone8,1.CFG
MagicCFGWin_v1.2/resources/diags/iPhone8,2-8003.CFG
MagicCFGWin_v1.2/resources/diags/iPhone8,2.CFG
MagicCFGWin_v1.2/resources/diags/iPhone9,1.CFG
MagicCFGWin_v1.2/resources/diags/iPhone9,2.CFG
MagicCFGWin_v1.2/resources/diags/iPhone9,3.CFG
MagicCFGWin_v1.2/resources/diags/iPhone9,4.CFG
MagicCFGWin_v1.2/resources/drivers/install_x64.exe
.exe windows:6 windows x64 arch:x64

c1d7b465bf67ea67303b298be80317ca

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\sandrock\Desktop\45635865libusb-win32-src-1.2.6.0\libusb-win32-src-1.2.6.0\projects\x64\Debug\install-filter\install-filter.pdb

Imports

setupapi

SetupOpenInfFileA
SetupFindFirstLineA
SetupFindNextLine
SetupGetStringFieldA
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiRemoveDevice
SetupDiGetDeviceRegistryPropertyA
SetupDiSetDeviceRegistryPropertyA
SetupDiGetDeviceInstallParamsA
CM_Get_DevNode_Status
CM_Get_Device_IDA
SetupDiCallClassInstaller
SetupDiOpenDevRegKey
SetupDiSetClassInstallParamsA
SetupCloseInfFile

kernel32

GetLastError
FormatMessageA
GetStdHandle
SetEnvironmentVariableA
GetFullPathNameA
WriteFile
CloseHandle
ReleaseSemaphore
WaitForSingleObject
Sleep
GetCurrentProcess
GetVersionExA
FreeLibrary
GetModuleHandleA
GetProcAddress
LoadResource
LockResource
SizeofResource
LocalFree
CreateSemaphoreA
LoadLibraryA
FindResourceA
GetCommandLineW
GetVersion
HeapAlloc
HeapQueryInformation
HeapReAlloc
HeapFree
WriteConsoleW
FlushFileBuffers
LCMapStringW
OutputDebugStringW
SetConsoleCtrlHandler
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetProcessHeap
CreateFileW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
LoadLibraryW
lstrlenA
LoadLibraryExW
RaiseException
GetFileType
RtlUnwindEx
AreFileApisANSI
ExitProcess
FatalAppExitA
DeleteCriticalSection
GetSystemInfo
HeapValidate
HeapSize
GetModuleHandleExW
GetModuleFileNameW
GetCurrentThreadId
GetConsoleCP
SetFilePointerEx
VirtualQuery
GetStringTypeW
GetDateFormatW
GetTimeFormatW
OutputDebugStringA
CompareStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetStdHandle
SetEndOfFile
ReadFile
ReadConsoleW
RtlPcToFileHeader
WaitForSingleObjectEx
IsDebuggerPresent
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
WideCharToMultiByte
CreateThread
ExitThread
ResumeThread
GetConsoleMode
GetNumberOfConsoleInputEvents
PeekConsoleInputA
ReadConsoleInputA
SetConsoleMode
GetCommandLineA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
EncodePointer
DecodePointer
GetCurrentThread

user32

InvalidateRect
UpdateWindow
GetSystemMetrics
EnableWindow
SetTimer
GetDlgItem
SetWindowPos
DestroyWindow
CreateWindowExA
RedrawWindow
RegisterClassExA
PostQuitMessage
DefWindowProcA
PostMessageA
SendMessageA
DispatchMessageA
TranslateMessage
GetMessageA
DrawEdge
SetWindowTextA
GetWindowTextLengthA
GetClientRect
GetWindowRect
MessageBoxA
GetSysColor
GetSysColorBrush
FillRect
InflateRect
OffsetRect
GetWindowLongPtrA
SetWindowLongPtrA
GetDesktopWindow
GetParent
LoadCursorA
LoadIconA
GetClassInfoExA

gdi32

DeleteObject
DeleteDC
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
SelectObject

advapi32

RegEnumKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegCloseKey
FreeSid
CheckTokenMembership
AllocateAndInitializeSid

Sections

.text
Size: 595KB - Virtual size: 594KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/install_x86.exe
.exe windows:4 windows x64 arch:x64

59da0a590bebb821bfdeed92f2ad09c9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

libcrypto-1_1-x64

EVP_CIPHER_CTX_free
EVP_CIPHER_CTX_new
EVP_CIPHER_CTX_set_padding
EVP_DecryptFinal
EVP_DecryptInit
EVP_DecryptUpdate
EVP_aes_256_cbc

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
GetStartupInfoA
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_errno
_fmode
_initterm
_lock
_onexit
_unlock
abort
calloc
exit
fclose
fopen
fprintf
fputc
fread
free
fseek
ftell
fwrite
getc
getenv
islower
isspace
isupper
isxdigit
localeconv
malloc
memcmp
memcpy
memset
puts
realloc
rewind
signal
strcmp
strcpy
strerror
strlen
strncmp
strstr
strtol
strtoul
tolower
ungetc
vfprintf
wcslen

libusb-1.0

libusb_alloc_transfer
libusb_bulk_transfer
libusb_cancel_transfer
libusb_claim_interface
libusb_close
libusb_control_transfer
libusb_exit
libusb_free_transfer
libusb_get_configuration
libusb_handle_events_timeout_completed
libusb_init
libusb_open_device_with_vid_pid
libusb_release_interface
libusb_reset_device
libusb_set_configuration
libusb_submit_transfer

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/97
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/113
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/libusbK/Apple_Mobile_Device_(DFU_Mode).cat
MagicCFGWin_v1.2/resources/drivers/libusbK/Apple_Mobile_Device_(DFU_Mode).inf
MagicCFGWin_v1.2/resources/drivers/libusbK/amd64/WdfCoInstaller01011.dll
.dll windows:6 windows x64 arch:x64

553dfc6cd5891a057991f0695d243342

Code Sign

61:02:92:4a:00:00:00:00:00:20
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

09/01/2012, 22:25

Not After

09/04/2013, 22:25

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:05:dd:42:00:00:00:00:00:14
Certificate

Issuer

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

26/03/2012, 21:37

Not After

26/06/2013, 21:37

Subject

CN=Microsoft Windows,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:07:02:dc:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

15/09/2005, 21:55

Not After

15/03/2016, 22:05

Subject

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

3c:aa:50:ed:7a:7b:75:89:86:2f:97:5d:01:74:0e:5b:fe:6f:ba:ea
Signer

Actual PE Digest

3c:aa:50:ed:7a:7b:75:89:86:2f:97:5d:01:74:0e:5b:fe:6f:ba:ea

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

WdfCoInstaller01011.pdb

Imports

msvcrt

free
_wtoi
_wcsnicmp
_amsg_exit
malloc
_ultow
_XcptFilter
_initterm
_wcsicmp
__C_specific_handler
_vsnwprintf
memcpy
memset

setupapi

SetupDiGetActualSectionToInstallW
SetupLogErrorW
SetupDiGetDeviceInstallParamsW
CM_Set_DevNode_Problem_Ex
SetupCloseInfFile
SetupOpenInfFileW
SetupCloseLog
SetupDiSetDeviceInstallParamsW
SetupOpenLog
SetupDiGetDriverInfoDetailW
SetupDiGetSelectedDriverW
SetupGetStringFieldW
SetupPromptReboot
SetupFindFirstLineW
SetupGetLineCountW
SetupFindNextMatchLineW

kernel32

FindClose
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetTickCount
GetSystemTimeAsFileTime
VerSetConditionMask
GetModuleHandleW
GetVersionExW
GetModuleFileNameW
VerifyVersionInfoW
GetLastError
GetProcAddress
GlobalFree
LocalAlloc
GetWindowsDirectoryW
LocalFree
FreeLibrary
LoadLibraryW
FindFirstFileW
FindResourceW
LoadResource
CreateProcessW
CreateDirectoryW
WaitForSingleObject
OutputDebugStringW
WriteFile
SizeofResource
FormatMessageW
GetExitCodeProcess
TerminateProcess
CreateFileW
SetLastError
GetCurrentThreadId
GetLocalTime
LockResource
RemoveDirectoryW
FindNextFileW
CloseHandle
DeleteFileW
ExpandEnvironmentStringsW
LoadLibraryExW
Sleep
QueryPerformanceCounter
GetCurrentProcessId

advapi32

EventUnregister
EventRegister
QueryServiceConfigW
ChangeServiceConfigW
RegFlushKey
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
EventWrite
QueryServiceStatusEx
RegQueryValueExW
OpenServiceW
OpenSCManagerW
DeleteService
CloseServiceHandle

shell32

CommandLineToArgvW

user32

IsCharAlphaNumericW
LoadStringW
IsCharAlphaW

shlwapi

PathFileExistsW

Exports

Exports

WdfCoInstaller
WdfPostDeviceInstall
WdfPostDeviceRemove
WdfPreDeviceInstall
WdfPreDeviceInstallEx
WdfPreDeviceRemove

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/libusbK/amd64/libusb0.dll
.dll windows:6 windows x64 arch:x64

eae5e3d8124867fcc1b4265dbecb5d87

Code Sign

04:00:00:00:00:01:23:9e:0f:ac:b3
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

28/01/1999, 13:00

Not After

27/01/2017, 12:00

Subject

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:20:19:c1:90:66
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18/03/2009, 11:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:00:00:00:00:01:25:b0:b4:cc:01
Certificate

Issuer

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Not Before

21/12/2009, 09:32

Not After

22/12/2020, 09:32

Subject

CN=GlobalSign Time Stamping Authority,O=GlobalSign NV,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:00:00:00:00:01:2f:73:8c:af:ed
Certificate

Issuer

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Not Before

20/04/2011, 14:45

Not After

20/04/2014, 14:45

Subject

CN=Travis Lee Robinson,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:23:9e:0f:af:24
Certificate

Issuer

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Not Before

22/01/2004, 10:00

Not After

27/01/2017, 10:00

Subject

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0b:7f:6b:00:00:00:00:00:19
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:00

Not After

23/05/2016, 17:10

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1b:71:60:84:eb:be:37:10:49:89:4a:8e:f2:01:03:8e:10:09:73:bb
Signer

Actual PE Digest

1b:71:60:84:eb:be:37:10:49:89:4a:8e:f2:01:03:8e:10:09:73:bb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

z:\projects\libusb-win32-stage\ddk_make\output\amd64\libusb0.pdb

Imports

msvcrt

memcpy
__C_specific_handler
_amsg_exit
_initterm
_XcptFilter
memmove
_stricmp
realloc
_iob
memset
_getch
fclose
wcstombs
fputws
_strdup
fopen
printf
wcsstr
fgets
fgetws
_beginthread
fputs
_wcsnicmp
_endthread
_strlwr
strncmp
sscanf
mbstowcs
sprintf
_wcsicmp
_vsnprintf
fprintf
strncpy
strerror
getenv
atoi
_snprintf
strstr
malloc
free

setupapi

SetupDiOpenDevRegKey
SetupDiCallClassInstaller
SetupDiSetClassInstallParamsA
CM_Get_Device_IDA
SetupFindNextLine
SetupDiGetDeviceRegistryPropertyA
SetupOpenInfFileA
SetupDiGetDeviceInstallParamsA
SetupDiRemoveDevice
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupCloseInfFile
CM_Get_DevNode_Status
SetupDiSetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupFindFirstLineA
SetupGetStringFieldA

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetVersion
LocalFree
GetVersionExA
GetModuleHandleA
SetEnvironmentVariableA
LockResource
LoadLibraryA
GetProcAddress
GetStdHandle
CreateSemaphoreA
SizeofResource
Sleep
WriteFile
GetCurrentProcess
LoadResource
FreeLibrary
FindResourceA
GetFullPathNameA
OutputDebugStringA
FormatMessageA
CloseHandle
DeviceIoControl
ResetEvent
GetLastError
GetOverlappedResult
CreateEventA
WaitForSingleObject
CreateFileA

advapi32

RegCloseKey
FreeSid
CheckTokenMembership
RegSetValueExA
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegDeleteValueA
AllocateAndInitializeSid

user32

GetMessageA
SetTimer
GetWindowRect
GetWindowLongPtrA
RegisterClassExA
PostQuitMessage
FillRect
GetClassInfoExA
GetParent
LoadIconA
GetClientRect
GetWindowTextLengthA
SendMessageA
DrawEdge
TranslateMessage
InflateRect
OffsetRect
MessageBoxA
InvalidateRect
CreateWindowExA
GetDlgItem
DefWindowProcA
RedrawWindow
GetDesktopWindow
GetSysColor
SetWindowPos
GetSysColorBrush
SetWindowLongPtrA
PostMessageA
DispatchMessageA
GetSystemMetrics
SetWindowTextA
UpdateWindow
EnableWindow
LoadCursorA
DestroyWindow

gdi32

CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
DeleteObject
DeleteDC
BitBlt
CreateSolidBrush

Exports

Exports

usb_bulk_read
usb_bulk_setup_async
usb_bulk_write
usb_cancel_async
usb_claim_interface
usb_clear_halt
usb_close
usb_control_msg
usb_device
usb_find_busses
usb_find_devices
usb_free_async
usb_get_busses
usb_get_descriptor
usb_get_descriptor_by_endpoint
usb_get_string
usb_get_string_simple
usb_get_version
usb_init
usb_install_driver_np
usb_install_driver_np_rundll
usb_install_needs_restart_np
usb_install_npA
usb_install_npW
usb_install_np_rundll
usb_install_service_np
usb_install_service_np_rundll
usb_interrupt_read
usb_interrupt_setup_async
usb_interrupt_write
usb_isochronous_setup_async
usb_open
usb_reap_async
usb_reap_async_nocancel
usb_release_interface
usb_reset
usb_reset_ex
usb_resetep
usb_set_altinterface
usb_set_configuration
usb_set_debug
usb_strerror
usb_submit_async
usb_touch_inf_file_np
usb_touch_inf_file_np_rundll
usb_uninstall_service_np
usb_uninstall_service_np_rundll

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/libusbK/amd64/libusb0.sys
.sys windows:6 windows x64 arch:x64

f771fcc2fe54680d21562f599db14975

Code Sign

04:00:00:00:00:01:23:9e:0f:ac:b3
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

28/01/1999, 13:00

Not After

27/01/2017, 12:00

Subject

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:20:19:c1:90:66
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18/03/2009, 11:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:00:00:00:00:01:25:b0:b4:cc:01
Certificate

Issuer

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Not Before

21/12/2009, 09:32

Not After

22/12/2020, 09:32

Subject

CN=GlobalSign Time Stamping Authority,O=GlobalSign NV,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:00:00:00:00:01:2f:73:8c:af:ed
Certificate

Issuer

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Not Before

20/04/2011, 14:45

Not After

20/04/2014, 14:45

Subject

CN=Travis Lee Robinson,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:23:9e:0f:af:24
Certificate

Issuer

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Not Before

22/01/2004, 10:00

Not After

27/01/2017, 10:00

Subject

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0b:7f:6b:00:00:00:00:00:19
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:00

Not After

23/05/2016, 17:10

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

28:55:7e:16:55:83:bb:28:b7:cb:c0:8b:c8:88:06:33:36:5a:48:4e
Signer

Actual PE Digest

28:55:7e:16:55:83:bb:28:b7:cb:c0:8b:c8:88:06:33:36:5a:48:4e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

z:\projects\libusb-win32-stage\ddk_make\output\amd64\libusb0.pdb

Imports

ntoskrnl.exe

_strlwr
RtlInitUnicodeString
IoOpenDeviceInterfaceRegistryKey
ZwSetValueKey
ObQueryNameString
ZwQueryValueKey
RtlGUIDFromString
ZwClose
ObReferenceObjectByHandle
ObfDereferenceObject
IoOpenDeviceRegistryKey
IoGetDeviceProperty
IoBuildDeviceIoControlRequest
IoDeleteSymbolicLink
_snwprintf
IoRegisterDeviceInterface
strstr
IoDeleteDevice
KeSetEvent
KeInitializeEvent
RtlUnicodeStringToAnsiString
IoCancelIrp
IofCompleteRequest
KeWaitForSingleObject
ExFreePoolWithTag
IoGetAttachedDeviceReference
IoAttachDeviceToDeviceStack
IoCreateSymbolicLink
IoCreateDevice
IofCallDriver
IoSetDeviceInterfaceState
IoDetachDevice
PoSetPowerState
RtlFreeUnicodeString
PoRequestPowerIrp
PoStartNextPowerIrp
PoCallDriver
IoBuildPartialMdl
IoFreeMdl
MmMapLockedPagesSpecifyCache
IoFreeIrp
IoAllocateIrp
IoReleaseCancelSpinLock
IoAcquireCancelSpinLock
IoAllocateMdl
_snprintf
_vsnprintf
DbgPrint
KeBugCheckEx
RtlFreeAnsiString
ExAllocatePoolWithTag

usbd.sys

USBD_CreateConfigurationRequestEx

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 186B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/libusbK/amd64/libusb0_x86.dll
.exe windows:6 windows x86 arch:x86

a299004fe279f5877a6d9cafc3ee50fa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

z:\projects\libusb-win32-stage\ddk_make\output\i386\install-filter.pdb

Imports

advapi32

FreeSid
CheckTokenMembership
AllocateAndInitializeSid
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA

kernel32

LoadLibraryA
GetLastError
Sleep
GetCurrentProcess
GetModuleHandleA
WriteFile
LockResource
LoadResource
SizeofResource
FindResourceA
GetStdHandle
GetFullPathNameA
LocalFree
InterlockedIncrement
GetProcAddress
FormatMessageA
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
RtlUnwind
InterlockedCompareExchange
InterlockedExchange
FreeLibrary
WaitForSingleObject
CloseHandle
CreateSemaphoreA
GetVersionExA
GetCommandLineW
GetVersion
UnhandledExceptionFilter

msvcrt

wcstombs
_controlfp
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
sscanf
__setusermatherr
_amsg_exit
_initterm
exit
_XcptFilter
_exit
_cexit
__getmainargs
_vsnprintf
strncpy
_iob
fprintf
strerror
memmove
memcpy
_stricmp
_getch
_beginthread
_endthread
_strlwr
strncmp
_snprintf
_wcsnicmp
_wcsicmp
malloc
printf
strstr
_strdup
sprintf
free
memset
_adjust_fdiv

setupapi

SetupFindFirstLineA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupCloseInfFile
SetupFindNextLine
SetupDiSetDeviceRegistryPropertyA
CM_Get_DevNode_Status
SetupDiRemoveDevice
SetupDiGetDeviceRegistryPropertyA
SetupOpenInfFileA
SetupDiOpenDevRegKey
SetupDiCallClassInstaller
SetupDiSetClassInstallParamsA
CM_Get_Device_IDA
SetupGetStringFieldA

user32

SetWindowTextA
GetWindowLongA
SetWindowLongA
RedrawWindow
InvalidateRect
DefWindowProcA
PostMessageA
CreateWindowExA
GetSysColor
EnableWindow
GetClientRect
OffsetRect
InflateRect
GetDlgItem
GetWindowTextLengthA
SendMessageA
GetDesktopWindow
GetWindowRect
SetWindowPos
GetSysColorBrush
FillRect
DrawEdge
SetTimer
GetParent
DestroyWindow
PostQuitMessage
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
RegisterClassExA
LoadCursorA
LoadIconA
GetClassInfoExA
MessageBoxA
GetSystemMetrics

gdi32

BitBlt
CreateSolidBrush
DeleteObject
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/libusbK/amd64/libusbK.dll
.dll windows:6 windows x64 arch:x64

05ecddf9667571dcaca7085a53a1b6a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

e:\github\libusbk\libusbk\bin\dll\amd64\libusbK.pdb

Imports

msvcrt

isxdigit
isleadbyte
__mb_cur_max
mbtowc
isspace
isdigit
calloc
localeconv
memset
memcpy
__C_specific_handler
_amsg_exit
_initterm
_XcptFilter
_errno
_iob
_snprintf
_itoa
wctomb
_isatty
_write
_lseeki64
_fileno
_read
__pioinfo
__badioinfo
realloc
_beginthreadex
_endthreadex
_strupr
strchr
strstr
_strnicmp
sprintf
_stricmp
malloc
free

kernel32

GetLastError
CloseHandle
HeapAlloc
GetOverlappedResult
Sleep
GetProcAddress
LoadLibraryA
CreateEventA
HeapFree
DeviceIoControl
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
QueueUserAPC
ReleaseSemaphore
CreateSemaphoreA
TerminateThread
SleepEx
ResumeThread
HeapCreate
HeapDestroy
GetCurrentThreadId
GetModuleHandleA
GetProcessHeap
FreeLibrary
CreateFileA
CancelIo
ResetEvent
WaitForSingleObjectEx
SetEvent
WaitForSingleObject
OutputDebugStringA
SwitchToThread
SetLastError

advapi32

RegQueryValueExA
RegCloseKey

user32

GetMessageA
SetTimer
RegisterClassExA
PostQuitMessage
KillTimer
SendMessageA
TranslateMessage
UnregisterClassA
CreateWindowExA
DefWindowProcA
ShowWindow
PostMessageA
DispatchMessageA
EnableWindow
FindWindowA
UnregisterDeviceNotification
RegisterDeviceNotificationA
DestroyWindow

setupapi

SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdA
SetupDiOpenDevRegKey
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiOpenDeviceInterfaceRegKey

Exports

Exports

HotK_Free
HotK_FreeAll
HotK_Init
IsoK_EnumPackets
IsoK_Free
IsoK_GetPacket
IsoK_Init
IsoK_ReUse
IsoK_SetPacket
IsoK_SetPackets
IsochK_CalcPacketInformation
IsochK_EnumPackets
IsochK_Free
IsochK_GetNumberOfPackets
IsochK_GetPacket
IsochK_Init
IsochK_SetNumberOfPackets
IsochK_SetPacket
IsochK_SetPacketOffsets
LUsb0_ControlTransfer
LUsb0_SetConfiguration
LibK_Context_Free
LibK_Context_Init
LibK_CopyDriverAPI
LibK_GetContext
LibK_GetDefaultContext
LibK_GetProcAddress
LibK_GetVersion
LibK_IsFunctionSupported
LibK_LoadDriverAPI
LibK_SetCleanupCallback
LibK_SetContext
LibK_SetDefaultContext
LstK_AttachInfo
LstK_Clone
LstK_CloneInfo
LstK_Count
LstK_Current
LstK_DetachInfo
LstK_Enumerate
LstK_FindByVidPid
LstK_Free
LstK_FreeInfo
LstK_Init
LstK_InitEx
LstK_MoveNext
LstK_MoveReset
LstK_Sync
OvlK_Acquire
OvlK_Free
OvlK_GetEventHandle
OvlK_Init
OvlK_IsComplete
OvlK_ReUse
OvlK_Release
OvlK_Wait
OvlK_WaitAndRelease
OvlK_WaitOldest
OvlK_WaitOrCancel
StmK_Free
StmK_Init
StmK_Read
StmK_Start
StmK_Stop
StmK_Write
UsbK_AbortPipe
UsbK_ClaimInterface
UsbK_Clone
UsbK_ControlTransfer
UsbK_FlushPipe
UsbK_Free
UsbK_GetAltInterface
UsbK_GetAssociatedInterface
UsbK_GetConfiguration
UsbK_GetCurrentAlternateSetting
UsbK_GetCurrentFrameNumber
UsbK_GetDescriptor
UsbK_GetOverlappedResult
UsbK_GetPipePolicy
UsbK_GetPowerPolicy
UsbK_GetProperty
UsbK_GetSuperSpeedPipeCompanionDescriptor
UsbK_Init
UsbK_Initialize
UsbK_IsoReadPipe
UsbK_IsoWritePipe
UsbK_IsochReadPipe
UsbK_IsochWritePipe
UsbK_QueryDeviceInformation
UsbK_QueryInterfaceSettings
UsbK_QueryPipe
UsbK_QueryPipeEx
UsbK_ReadPipe
UsbK_ReleaseInterface
UsbK_ResetDevice
UsbK_ResetPipe
UsbK_SelectInterface
UsbK_SetAltInterface
UsbK_SetConfiguration
UsbK_SetCurrentAlternateSetting
UsbK_SetPipePolicy
UsbK_SetPowerPolicy
UsbK_WritePipe
WinUsb_AbortPipe
WinUsb_ControlTransfer
WinUsb_FlushPipe
WinUsb_Free
WinUsb_GetAssociatedInterface
WinUsb_GetCurrentAlternateSetting
WinUsb_GetDescriptor
WinUsb_GetOverlappedResult
WinUsb_GetPipePolicy
WinUsb_GetPowerPolicy
WinUsb_Initialize
WinUsb_QueryDeviceInformation
WinUsb_QueryInterfaceSettings
WinUsb_QueryPipe
WinUsb_QueryPipeEx
WinUsb_ReadPipe
WinUsb_ResetPipe
WinUsb_SetCurrentAlternateSetting
WinUsb_SetPipePolicy
WinUsb_SetPowerPolicy
WinUsb_WritePipe

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/libusbK/amd64/libusbK.sys
.sys windows:6 windows x64 arch:x64

222c03bec3836ed94b73b28fa09ec3b1

Code Sign

0e:9a:dc:27:16:dc:2e:59:46:3c:0a:8a:51:be:66:d7
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19/04/2014, 00:00

Not After

21/06/2017, 12:00

Subject

CN=Travis Lee Robinson,O=Travis Lee Robinson,L=Meridian,ST=Idaho,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:9f:ed:ed:cb:79:5b:8d:ed:32:0c:89:19:f0:36:89
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21/05/2013, 00:00

Not After

04/06/2014, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

47:5d:d3:bd:0f:ac:cc:b8:1a:c4:e3:68:1c:63:a3:0d:e3:79:c5:b2
Signer

Actual PE Digest

47:5d:d3:bd:0f:ac:cc:b8:1a:c4:e3:68:1c:63:a3:0d:e3:79:c5:b2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

z:\svnmain\googlecode\usb-travis\trunk\libusbk\bin\sys\amd64\libusbK.pdb

Imports

ntoskrnl.exe

KeBugCheckEx
RtlGUIDFromString
IoGetCurrentProcess
RtlInitUnicodeString
RtlCopyUnicodeString
_snwprintf
ExFreePoolWithTag
ExAllocatePoolWithTag
DbgPrint

usbd.sys

USBD_GetUSBDIVersion

wdfldr.sys

WdfVersionUnbind
WdfVersionBind
WdfVersionBindClass
WdfVersionUnbindClass

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/libusbK/amd64/libusbK_x86.dll
.dll windows:6 windows x86 arch:x86

3b5dc2eda321d09ece9386e057937fed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\github\libusbk\libusbk\bin\dll\i386\libusbK.pdb

Imports

msvcrt

__mb_cur_max
mbtowc
isspace
isdigit
calloc
_amsg_exit
isleadbyte
_XcptFilter
_errno
_beginthreadex
_endthreadex
isxdigit
localeconv
_iob
_snprintf
_itoa
wctomb
realloc
__badioinfo
__pioinfo
_read
_fileno
_lseeki64
_write
_isatty
_initterm
_strnicmp
_stricmp
_strupr
strstr
strchr
sprintf
memset
memcpy
malloc
free

kernel32

GetLastError
DeviceIoControl
CreateEventA
CloseHandle
HeapAlloc
InterlockedExchange
GetProcAddress
GetOverlappedResult
HeapFree
LoadLibraryA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
RtlUnwind
TerminateThread
CreateSemaphoreA
SleepEx
QueueUserAPC
ReleaseSemaphore
HeapCreate
ResumeThread
HeapDestroy
GetCurrentThreadId
FreeLibrary
GetModuleHandleA
GetProcessHeap
CreateFileA
InterlockedIncrement
WaitForSingleObjectEx
CancelIo
SetEvent
ResetEvent
InterlockedDecrement
WaitForSingleObject
InterlockedCompareExchange
OutputDebugStringA
SwitchToThread
Sleep
SetLastError

advapi32

RegCloseKey
RegQueryValueExA

user32

TranslateMessage
DispatchMessageA
UnregisterClassA
RegisterClassExA
DefWindowProcA
KillTimer
DestroyWindow
UnregisterDeviceNotification
PostQuitMessage
SetTimer
FindWindowA
CreateWindowExA
ShowWindow
EnableWindow
PostMessageA
SendMessageA
RegisterDeviceNotificationA
GetMessageA

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiOpenDeviceInterfaceRegKey
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiOpenDevRegKey
SetupDiGetDeviceInstanceIdA
SetupDiEnumDeviceInfo

Exports

Exports

HotK_Free
HotK_FreeAll
HotK_Init
IsoK_EnumPackets
IsoK_Free
IsoK_GetPacket
IsoK_Init
IsoK_ReUse
IsoK_SetPacket
IsoK_SetPackets
IsochK_CalcPacketInformation
IsochK_EnumPackets
IsochK_Free
IsochK_GetNumberOfPackets
IsochK_GetPacket
IsochK_Init
IsochK_SetNumberOfPackets
IsochK_SetPacket
IsochK_SetPacketOffsets
LUsb0_ControlTransfer
LUsb0_SetConfiguration
LibK_Context_Free
LibK_Context_Init
LibK_CopyDriverAPI
LibK_GetContext
LibK_GetDefaultContext
LibK_GetProcAddress
LibK_GetVersion
LibK_IsFunctionSupported
LibK_LoadDriverAPI
LibK_SetCleanupCallback
LibK_SetContext
LibK_SetDefaultContext
LstK_AttachInfo
LstK_Clone
LstK_CloneInfo
LstK_Count
LstK_Current
LstK_DetachInfo
LstK_Enumerate
LstK_FindByVidPid
LstK_Free
LstK_FreeInfo
LstK_Init
LstK_InitEx
LstK_MoveNext
LstK_MoveReset
LstK_Sync
OvlK_Acquire
OvlK_Free
OvlK_GetEventHandle
OvlK_Init
OvlK_IsComplete
OvlK_ReUse
OvlK_Release
OvlK_Wait
OvlK_WaitAndRelease
OvlK_WaitOldest
OvlK_WaitOrCancel
StmK_Free
StmK_Init
StmK_Read
StmK_Start
StmK_Stop
StmK_Write
UsbK_AbortPipe
UsbK_ClaimInterface
UsbK_Clone
UsbK_ControlTransfer
UsbK_FlushPipe
UsbK_Free
UsbK_GetAltInterface
UsbK_GetAssociatedInterface
UsbK_GetConfiguration
UsbK_GetCurrentAlternateSetting
UsbK_GetCurrentFrameNumber
UsbK_GetDescriptor
UsbK_GetOverlappedResult
UsbK_GetPipePolicy
UsbK_GetPowerPolicy
UsbK_GetProperty
UsbK_GetSuperSpeedPipeCompanionDescriptor
UsbK_Init
UsbK_Initialize
UsbK_IsoReadPipe
UsbK_IsoWritePipe
UsbK_IsochReadPipe
UsbK_IsochWritePipe
UsbK_QueryDeviceInformation
UsbK_QueryInterfaceSettings
UsbK_QueryPipe
UsbK_QueryPipeEx
UsbK_ReadPipe
UsbK_ReleaseInterface
UsbK_ResetDevice
UsbK_ResetPipe
UsbK_SelectInterface
UsbK_SetAltInterface
UsbK_SetConfiguration
UsbK_SetCurrentAlternateSetting
UsbK_SetPipePolicy
UsbK_SetPowerPolicy
UsbK_WritePipe
WinUsb_AbortPipe
WinUsb_ControlTransfer
WinUsb_FlushPipe
WinUsb_Free
WinUsb_GetAssociatedInterface
WinUsb_GetCurrentAlternateSetting
WinUsb_GetDescriptor
WinUsb_GetOverlappedResult
WinUsb_GetPipePolicy
WinUsb_GetPowerPolicy
WinUsb_Initialize
WinUsb_QueryDeviceInformation
WinUsb_QueryInterfaceSettings
WinUsb_QueryPipe
WinUsb_QueryPipeEx
WinUsb_ReadPipe
WinUsb_ResetPipe
WinUsb_SetCurrentAlternateSetting
WinUsb_SetPipePolicy
WinUsb_SetPowerPolicy
WinUsb_WritePipe

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/libusbK/amd64/winusbcoinstaller2.dll
.dll windows:6 windows x64 arch:x64

8248dad30db39242289209dc3ff9aa66

Code Sign

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/09/2006, 01:53

Not After

16/09/2011, 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6a:0b:99:4f:c0:00:1b:ab:11:da:3a:a1:b6:df:ec:88
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

11/10/2005, 21:55

Not After

26/04/2010, 07:00

Subject

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:02:a4:e9:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/04/2009, 05:58

Not After

26/04/2010, 07:00

Subject

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

c8:2a:c5:7d:4c:ef:c2:66:3a:03:51:b1:c2:b5:78:8b:96:d0:2c:74
Signer

Actual PE Digest

c8:2a:c5:7d:4c:ef:c2:66:3a:03:51:b1:c2:b5:78:8b:96:d0:2c:74

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

WinUsbCoinstaller2.pdb

Imports

setupapi

SetupDiSetDeviceInstallParamsW
SetupCloseLog
SetupDiGetDeviceRegistryPropertyW
CM_Set_DevNode_Problem_Ex
SetupDiSetDeviceRegistryPropertyW
SetupDiGetDeviceInstanceIdW
SetupOpenLog
SetupLogErrorW
SetupDiGetDeviceInstallParamsW

ntdll

RtlUnwindEx
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
VerSetConditionMask

kernel32

LocalFree
FormatMessageW
GetModuleHandleExW
VirtualQuery
GetSystemInfo
SetThreadStackGuarantee
VirtualAlloc
FreeLibrary
LoadLibraryExW
OutputDebugStringW
GetLastError
GetProcAddress
GetLocalTime
GetEnvironmentVariableW
GetTempFileNameW
FindResourceW
LoadResource
CreateProcessW
CreateDirectoryW
WaitForSingleObject
WriteFile
LoadLibraryW
CopyFileW
SizeofResource
GetExitCodeProcess
CreateFileW
LockResource
CloseHandle
GetWindowsDirectoryW
DeleteFileW
ExpandEnvironmentStringsW
VerifyVersionInfoW
FlsSetValue
GetCommandLineA
GetVersionExW
GetModuleHandleW
ExitProcess
EncodePointer
DecodePointer
FlsFree
SetLastError
FlsGetValue
GetCurrentThreadId
FlsAlloc
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
Sleep
MultiByteToWideChar
SetFilePointer
GetConsoleCP
GetConsoleMode
GetStringTypeW
LCMapStringW
FlushFileBuffers
SetStdHandle
WriteConsoleW
VirtualProtect

Exports

Exports

ApplyUpdate
CoDeviceInstall
InstallUpdateW

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 897KB - Virtual size: 897KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/libusbK/x86/WdfCoInstaller01011.dll
.dll windows:6 windows x86 arch:x86

3fb9d7c6d0c40e140b18909ec01744f6

Code Sign

61:02:92:4a:00:00:00:00:00:20
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

09/01/2012, 22:25

Not After

09/04/2013, 22:25

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:05:dd:42:00:00:00:00:00:14
Certificate

Issuer

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

26/03/2012, 21:37

Not After

26/06/2013, 21:37

Subject

CN=Microsoft Windows,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:07:02:dc:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

15/09/2005, 21:55

Not After

15/03/2016, 22:05

Subject

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

aa:46:59:22:ea:c0:a0:2f:12:22:c1:25:77:aa:bc:bd:57:11:0a:aa
Signer

Actual PE Digest

aa:46:59:22:ea:c0:a0:2f:12:22:c1:25:77:aa:bc:bd:57:11:0a:aa

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

WdfCoInstaller01011.pdb

Imports

msvcrt

free
_wtoi
_wcsnicmp
_amsg_exit
malloc
_ultow
_XcptFilter
_initterm
_wcsicmp
_except_handler4_common
_vsnwprintf
memcpy
memset

setupapi

SetupDiGetActualSectionToInstallW
SetupLogErrorW
SetupDiGetDeviceInstallParamsW
CM_Set_DevNode_Problem_Ex
SetupCloseInfFile
SetupOpenInfFileW
SetupCloseLog
SetupDiSetDeviceInstallParamsW
SetupOpenLog
SetupDiGetDriverInfoDetailW
SetupDiGetSelectedDriverW
SetupGetStringFieldW
SetupPromptReboot
SetupFindFirstLineW
SetupGetLineCountW
SetupFindNextMatchLineW

kernel32

SetLastError
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
VerSetConditionMask
GetModuleHandleW
GetVersionExW
GetModuleFileNameW
VerifyVersionInfoW
GetLastError
GetProcAddress
GlobalFree
LocalAlloc
GetWindowsDirectoryW
LocalFree
FreeLibrary
LoadLibraryW
FindFirstFileW
FindResourceW
LoadResource
CreateProcessW
CreateDirectoryW
WaitForSingleObject
OutputDebugStringW
WriteFile
SizeofResource
FormatMessageW
GetExitCodeProcess
TerminateProcess
CreateFileW
InterlockedCompareExchange
FindClose
GetLocalTime
LockResource
RemoveDirectoryW
FindNextFileW
CloseHandle
DeleteFileW
ExpandEnvironmentStringsW
LoadLibraryExW
Sleep
InterlockedExchange

advapi32

EventUnregister
EventRegister
QueryServiceConfigW
ChangeServiceConfigW
RegFlushKey
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
EventWrite
QueryServiceStatusEx
RegQueryValueExW
OpenServiceW
OpenSCManagerW
DeleteService
CloseServiceHandle

shell32

CommandLineToArgvW

user32

IsCharAlphaNumericW
LoadStringW
IsCharAlphaW

shlwapi

PathFileExistsW

Exports

Exports

WdfCoInstaller
WdfPostDeviceInstall
WdfPostDeviceRemove
WdfPreDeviceInstall
WdfPreDeviceInstallEx
WdfPreDeviceRemove

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/libusbK/x86/libusb0.dll
.exe windows:6 windows x86 arch:x86

a299004fe279f5877a6d9cafc3ee50fa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

z:\projects\libusb-win32-stage\ddk_make\output\i386\install-filter.pdb

Imports

advapi32

FreeSid
CheckTokenMembership
AllocateAndInitializeSid
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA

kernel32

LoadLibraryA
GetLastError
Sleep
GetCurrentProcess
GetModuleHandleA
WriteFile
LockResource
LoadResource
SizeofResource
FindResourceA
GetStdHandle
GetFullPathNameA
LocalFree
InterlockedIncrement
GetProcAddress
FormatMessageA
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
RtlUnwind
InterlockedCompareExchange
InterlockedExchange
FreeLibrary
WaitForSingleObject
CloseHandle
CreateSemaphoreA
GetVersionExA
GetCommandLineW
GetVersion
UnhandledExceptionFilter

msvcrt

wcstombs
_controlfp
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
sscanf
__setusermatherr
_amsg_exit
_initterm
exit
_XcptFilter
_exit
_cexit
__getmainargs
_vsnprintf
strncpy
_iob
fprintf
strerror
memmove
memcpy
_stricmp
_getch
_beginthread
_endthread
_strlwr
strncmp
_snprintf
_wcsnicmp
_wcsicmp
malloc
printf
strstr
_strdup
sprintf
free
memset
_adjust_fdiv

setupapi

SetupFindFirstLineA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupCloseInfFile
SetupFindNextLine
SetupDiSetDeviceRegistryPropertyA
CM_Get_DevNode_Status
SetupDiRemoveDevice
SetupDiGetDeviceRegistryPropertyA
SetupOpenInfFileA
SetupDiOpenDevRegKey
SetupDiCallClassInstaller
SetupDiSetClassInstallParamsA
CM_Get_Device_IDA
SetupGetStringFieldA

user32

SetWindowTextA
GetWindowLongA
SetWindowLongA
RedrawWindow
InvalidateRect
DefWindowProcA
PostMessageA
CreateWindowExA
GetSysColor
EnableWindow
GetClientRect
OffsetRect
InflateRect
GetDlgItem
GetWindowTextLengthA
SendMessageA
GetDesktopWindow
GetWindowRect
SetWindowPos
GetSysColorBrush
FillRect
DrawEdge
SetTimer
GetParent
DestroyWindow
PostQuitMessage
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
RegisterClassExA
LoadCursorA
LoadIconA
GetClassInfoExA
MessageBoxA
GetSystemMetrics

gdi32

BitBlt
CreateSolidBrush
DeleteObject
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/libusbK/x86/libusb0.sys
.sys windows:6 windows x86 arch:x86

bbd34d0dbb7e475d51fdadff6b7a0a6e

Code Sign

04:00:00:00:00:01:23:9e:0f:ac:b3
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

28/01/1999, 13:00

Not After

27/01/2017, 12:00

Subject

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:20:19:c1:90:66
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18/03/2009, 11:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:00:00:00:00:01:25:b0:b4:cc:01
Certificate

Issuer

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Not Before

21/12/2009, 09:32

Not After

22/12/2020, 09:32

Subject

CN=GlobalSign Time Stamping Authority,O=GlobalSign NV,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:00:00:00:00:01:2f:73:8c:af:ed
Certificate

Issuer

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Not Before

20/04/2011, 14:45

Not After

20/04/2014, 14:45

Subject

CN=Travis Lee Robinson,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:23:9e:0f:af:24
Certificate

Issuer

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Not Before

22/01/2004, 10:00

Not After

27/01/2017, 10:00

Subject

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0b:7f:6b:00:00:00:00:00:19
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:00

Not After

23/05/2016, 17:10

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:d5:02:3d:7b:20:9a:7d:7b:2f:b6:25:b8:98:68:5f:20:71:f1:11
Signer

Actual PE Digest

07:d5:02:3d:7b:20:9a:7d:7b:2f:b6:25:b8:98:68:5f:20:71:f1:11

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

z:\projects\libusb-win32-stage\ddk_make\output\i386\libusb0.pdb

Imports

ntoskrnl.exe

IoGetDeviceProperty
ExFreePoolWithTag
ObfDereferenceObject
ObQueryNameString
ObReferenceObjectByHandle
RtlGUIDFromString
ZwQueryValueKey
ZwClose
ExAllocatePoolWithTag
RtlInitUnicodeString
IoOpenDeviceRegistryKey
memcpy
ZwSetValueKey
IoOpenDeviceInterfaceRegistryKey
RtlFreeAnsiString
strstr
RtlUnicodeStringToAnsiString
IofCompleteRequest
KeSetEvent
IofCallDriver
KeInitializeEvent
KeWaitForSingleObject
IoAttachDeviceToDeviceStack
IoRegisterDeviceInterface
IoDeleteSymbolicLink
IoDeleteDevice
_strlwr
IoCreateDevice
_snwprintf
IoGetAttachedDeviceReference
IoCancelIrp
IoBuildDeviceIoControlRequest
PoSetPowerState
IoDetachDevice
RtlFreeUnicodeString
IoSetDeviceInterfaceState
PoRequestPowerIrp
PoCallDriver
PoStartNextPowerIrp
IoFreeMdl
IoFreeIrp
IoReleaseCancelSpinLock
memmove
MmMapLockedPagesSpecifyCache
IoAcquireCancelSpinLock
IoBuildPartialMdl
IoAllocateMdl
IoAllocateIrp
DbgPrint
_snprintf
_vsnprintf
KeTickCount
KeBugCheckEx
IoCreateSymbolicLink
memset

usbd.sys

_USBD_CreateConfigurationRequestEx@8

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/libusbK/x86/libusb0_x86.dll
.dll windows:6 windows x86 arch:x86

16cfa198e44dfce3c5ad03895857845f

Code Sign

04:00:00:00:00:01:23:9e:0f:ac:b3
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

28/01/1999, 13:00

Not After

27/01/2017, 12:00

Subject

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:20:19:c1:90:66
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18/03/2009, 11:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:00:00:00:00:01:25:b0:b4:cc:01
Certificate

Issuer

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Not Before

21/12/2009, 09:32

Not After

22/12/2020, 09:32

Subject

CN=GlobalSign Time Stamping Authority,O=GlobalSign NV,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:00:00:00:00:01:2f:73:8c:af:ed
Certificate

Issuer

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Not Before

20/04/2011, 14:45

Not After

20/04/2014, 14:45

Subject

CN=Travis Lee Robinson,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:23:9e:0f:af:24
Certificate

Issuer

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Not Before

22/01/2004, 10:00

Not After

27/01/2017, 10:00

Subject

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0b:7f:6b:00:00:00:00:00:19
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:00

Not After

23/05/2016, 17:10

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:c6:0d:0e:3c:28:01:a9:9d:d5:5e:f2:fb:ac:d4:89:c6:4a:2c:3d
Signer

Actual PE Digest

0a:c6:0d:0e:3c:28:01:a9:9d:d5:5e:f2:fb:ac:d4:89:c6:4a:2c:3d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

z:\projects\libusb-win32-stage\ddk_make\output\i386\libusb0.pdb

Imports

msvcrt

memmove
_stricmp
realloc
_iob
fprintf
mbstowcs
_getch
_beginthread
_endthread
wcstombs
sscanf
_strlwr
strncmp
_wcsnicmp
_wcsicmp
printf
fopen
fgetws
wcsstr
fclose
fputws
fgets
fputs
_strdup
sprintf
_vsnprintf
strncpy
strerror
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
getenv
atoi
strstr
_snprintf
memcpy
memset
malloc
free

setupapi

SetupDiDestroyDeviceInfoList
CM_Get_Device_IDA
SetupDiSetClassInstallParamsA
SetupDiCallClassInstaller
SetupDiOpenDevRegKey
SetupOpenInfFileA
SetupDiGetDeviceRegistryPropertyA
SetupDiRemoveDevice
CM_Get_DevNode_Status
SetupDiSetDeviceRegistryPropertyA
SetupFindNextLine
SetupCloseInfFile
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupGetStringFieldA
SetupFindFirstLineA
SetupDiGetDeviceInstallParamsA

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlUnwind
InterlockedCompareExchange
InterlockedExchange
GetVersion
InterlockedIncrement
LocalFree
GetFullPathNameA
GetStdHandle
FindResourceA
SizeofResource
LoadResource
LockResource
WriteFile
GetModuleHandleA
GetCurrentProcess
SetEnvironmentVariableA
Sleep
LoadLibraryA
GetProcAddress
FreeLibrary
CreateSemaphoreA
GetVersionExA
OutputDebugStringA
FormatMessageA
WaitForSingleObject
CreateFileA
GetOverlappedResult
CloseHandle
ResetEvent
DeviceIoControl
GetLastError
CreateEventA

advapi32

RegEnumKeyExA
CheckTokenMembership
AllocateAndInitializeSid
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
FreeSid

user32

DrawEdge
SetTimer
GetParent
DestroyWindow
PostQuitMessage
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
RegisterClassExA
LoadCursorA
LoadIconA
GetClassInfoExA
FillRect
GetSysColorBrush
EnableWindow
SetWindowTextA
GetWindowLongA
SetWindowLongA
RedrawWindow
InvalidateRect
DefWindowProcA
PostMessageA
CreateWindowExA
GetSysColor
GetSystemMetrics
GetClientRect
OffsetRect
InflateRect
GetDlgItem
GetWindowTextLengthA
SendMessageA
GetDesktopWindow
GetWindowRect
SetWindowPos
MessageBoxA

gdi32

BitBlt
CreateSolidBrush
DeleteObject
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC

Exports

Exports

usb_bulk_read
usb_bulk_setup_async
usb_bulk_write
usb_cancel_async
usb_claim_interface
usb_clear_halt
usb_close
usb_control_msg
usb_device
usb_find_busses
usb_find_devices
usb_free_async
usb_get_busses
usb_get_descriptor
usb_get_descriptor_by_endpoint
usb_get_string
usb_get_string_simple
usb_get_version
usb_init
usb_install_driver_np
usb_install_driver_np_rundll
usb_install_needs_restart_np
usb_install_npA
usb_install_npW
usb_install_np_rundll
usb_install_service_np
usb_install_service_np_rundll
usb_interrupt_read
usb_interrupt_setup_async
usb_interrupt_write
usb_isochronous_setup_async
usb_open
usb_reap_async
usb_reap_async_nocancel
usb_release_interface
usb_reset
usb_reset_ex
usb_resetep
usb_set_altinterface
usb_set_configuration
usb_set_debug
usb_strerror
usb_submit_async
usb_touch_inf_file_np
usb_touch_inf_file_np_rundll
usb_uninstall_service_np
usb_uninstall_service_np_rundll

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/libusbK/x86/libusbK.dll
.dll windows:6 windows x86 arch:x86

3b5dc2eda321d09ece9386e057937fed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\github\libusbk\libusbk\bin\dll\i386\libusbK.pdb

Imports

msvcrt

__mb_cur_max
mbtowc
isspace
isdigit
calloc
_amsg_exit
isleadbyte
_XcptFilter
_errno
_beginthreadex
_endthreadex
isxdigit
localeconv
_iob
_snprintf
_itoa
wctomb
realloc
__badioinfo
__pioinfo
_read
_fileno
_lseeki64
_write
_isatty
_initterm
_strnicmp
_stricmp
_strupr
strstr
strchr
sprintf
memset
memcpy
malloc
free

kernel32

GetLastError
DeviceIoControl
CreateEventA
CloseHandle
HeapAlloc
InterlockedExchange
GetProcAddress
GetOverlappedResult
HeapFree
LoadLibraryA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
RtlUnwind
TerminateThread
CreateSemaphoreA
SleepEx
QueueUserAPC
ReleaseSemaphore
HeapCreate
ResumeThread
HeapDestroy
GetCurrentThreadId
FreeLibrary
GetModuleHandleA
GetProcessHeap
CreateFileA
InterlockedIncrement
WaitForSingleObjectEx
CancelIo
SetEvent
ResetEvent
InterlockedDecrement
WaitForSingleObject
InterlockedCompareExchange
OutputDebugStringA
SwitchToThread
Sleep
SetLastError

advapi32

RegCloseKey
RegQueryValueExA

user32

TranslateMessage
DispatchMessageA
UnregisterClassA
RegisterClassExA
DefWindowProcA
KillTimer
DestroyWindow
UnregisterDeviceNotification
PostQuitMessage
SetTimer
FindWindowA
CreateWindowExA
ShowWindow
EnableWindow
PostMessageA
SendMessageA
RegisterDeviceNotificationA
GetMessageA

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiOpenDeviceInterfaceRegKey
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiOpenDevRegKey
SetupDiGetDeviceInstanceIdA
SetupDiEnumDeviceInfo

Exports

Exports

HotK_Free
HotK_FreeAll
HotK_Init
IsoK_EnumPackets
IsoK_Free
IsoK_GetPacket
IsoK_Init
IsoK_ReUse
IsoK_SetPacket
IsoK_SetPackets
IsochK_CalcPacketInformation
IsochK_EnumPackets
IsochK_Free
IsochK_GetNumberOfPackets
IsochK_GetPacket
IsochK_Init
IsochK_SetNumberOfPackets
IsochK_SetPacket
IsochK_SetPacketOffsets
LUsb0_ControlTransfer
LUsb0_SetConfiguration
LibK_Context_Free
LibK_Context_Init
LibK_CopyDriverAPI
LibK_GetContext
LibK_GetDefaultContext
LibK_GetProcAddress
LibK_GetVersion
LibK_IsFunctionSupported
LibK_LoadDriverAPI
LibK_SetCleanupCallback
LibK_SetContext
LibK_SetDefaultContext
LstK_AttachInfo
LstK_Clone
LstK_CloneInfo
LstK_Count
LstK_Current
LstK_DetachInfo
LstK_Enumerate
LstK_FindByVidPid
LstK_Free
LstK_FreeInfo
LstK_Init
LstK_InitEx
LstK_MoveNext
LstK_MoveReset
LstK_Sync
OvlK_Acquire
OvlK_Free
OvlK_GetEventHandle
OvlK_Init
OvlK_IsComplete
OvlK_ReUse
OvlK_Release
OvlK_Wait
OvlK_WaitAndRelease
OvlK_WaitOldest
OvlK_WaitOrCancel
StmK_Free
StmK_Init
StmK_Read
StmK_Start
StmK_Stop
StmK_Write
UsbK_AbortPipe
UsbK_ClaimInterface
UsbK_Clone
UsbK_ControlTransfer
UsbK_FlushPipe
UsbK_Free
UsbK_GetAltInterface
UsbK_GetAssociatedInterface
UsbK_GetConfiguration
UsbK_GetCurrentAlternateSetting
UsbK_GetCurrentFrameNumber
UsbK_GetDescriptor
UsbK_GetOverlappedResult
UsbK_GetPipePolicy
UsbK_GetPowerPolicy
UsbK_GetProperty
UsbK_GetSuperSpeedPipeCompanionDescriptor
UsbK_Init
UsbK_Initialize
UsbK_IsoReadPipe
UsbK_IsoWritePipe
UsbK_IsochReadPipe
UsbK_IsochWritePipe
UsbK_QueryDeviceInformation
UsbK_QueryInterfaceSettings
UsbK_QueryPipe
UsbK_QueryPipeEx
UsbK_ReadPipe
UsbK_ReleaseInterface
UsbK_ResetDevice
UsbK_ResetPipe
UsbK_SelectInterface
UsbK_SetAltInterface
UsbK_SetConfiguration
UsbK_SetCurrentAlternateSetting
UsbK_SetPipePolicy
UsbK_SetPowerPolicy
UsbK_WritePipe
WinUsb_AbortPipe
WinUsb_ControlTransfer
WinUsb_FlushPipe
WinUsb_Free
WinUsb_GetAssociatedInterface
WinUsb_GetCurrentAlternateSetting
WinUsb_GetDescriptor
WinUsb_GetOverlappedResult
WinUsb_GetPipePolicy
WinUsb_GetPowerPolicy
WinUsb_Initialize
WinUsb_QueryDeviceInformation
WinUsb_QueryInterfaceSettings
WinUsb_QueryPipe
WinUsb_QueryPipeEx
WinUsb_ReadPipe
WinUsb_ResetPipe
WinUsb_SetCurrentAlternateSetting
WinUsb_SetPipePolicy
WinUsb_SetPowerPolicy
WinUsb_WritePipe

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/libusbK/x86/libusbK.sys
.sys windows:6 windows x86 arch:x86

53151ec9a6ee0c3741e023dc7ddf207a

Code Sign

0e:9a:dc:27:16:dc:2e:59:46:3c:0a:8a:51:be:66:d7
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19/04/2014, 00:00

Not After

21/06/2017, 12:00

Subject

CN=Travis Lee Robinson,O=Travis Lee Robinson,L=Meridian,ST=Idaho,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:9f:ed:ed:cb:79:5b:8d:ed:32:0c:89:19:f0:36:89
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21/05/2013, 00:00

Not After

04/06/2014, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b0:bd:6d:c9:46:5d:93:e1:53:89:b5:a6:47:5a:d9:02:f6:36:ca:f8
Signer

Actual PE Digest

b0:bd:6d:c9:46:5d:93:e1:53:89:b5:a6:47:5a:d9:02:f6:36:ca:f8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

z:\svnmain\googlecode\usb-travis\trunk\libusbk\bin\sys\i386\libusbK.pdb

Imports

ntoskrnl.exe

_allmul
memmove
memcpy
_snwprintf
KeTickCount
KeBugCheckEx
RtlInitUnicodeString
ExAllocatePoolWithTag
RtlCopyUnicodeString
ExFreePoolWithTag
IoGetCurrentProcess
memset
RtlGUIDFromString
DbgPrint

usbd.sys

USBD_GetUSBDIVersion

wdfldr.sys

WdfVersionUnbind
WdfVersionBind
WdfVersionBindClass
WdfVersionUnbindClass

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 896B - Virtual size: 830B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/libusbK/x86/winusbcoinstaller2.dll
.dll windows:6 windows x86 arch:x86

8346f3fd2848988fb391cc309c0dbe66

Code Sign

61:49:7c:ed:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/09/2006, 01:55

Not After

16/09/2011, 02:05

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6a:0b:99:4f:c0:00:1b:ab:11:da:3a:a1:b6:df:ec:88
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

11/10/2005, 21:55

Not After

26/04/2010, 07:00

Subject

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:02:a4:e9:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/04/2009, 05:58

Not After

26/04/2010, 07:00

Subject

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7d:66:5d:64:a9:23:fd:5c:1c:c7:a2:a8:b4:8e:4a:63:c0:6d:ae:fa
Signer

Actual PE Digest

7d:66:5d:64:a9:23:fd:5c:1c:c7:a2:a8:b4:8e:4a:63:c0:6d:ae:fa

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

WinUsbCoinstaller2.pdb

Imports

setupapi

SetupDiGetDeviceRegistryPropertyW
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceInstanceIdW
SetupDiSetDeviceRegistryPropertyW
SetupOpenLog
SetupLogErrorW
SetupCloseLog
CM_Set_DevNode_Problem_Ex
SetupDiGetDeviceInstallParamsW

ntdll

RtlUnwind
VerSetConditionMask

kernel32

GetModuleHandleExW
FormatMessageW
LocalFree
FreeLibrary
GetLastError
GetProcAddress
LoadLibraryExW
GetLocalTime
OutputDebugStringW
ExpandEnvironmentStringsW
GetEnvironmentVariableW
LockResource
SizeofResource
LoadResource
FindResourceW
CreateDirectoryW
DeleteFileW
GetTempFileNameW
GetWindowsDirectoryW
LoadLibraryW
CloseHandle
WriteFile
CreateFileW
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
CopyFileW
VerifyVersionInfoW
GetCommandLineA
GetVersionExA
GetModuleHandleA
ExitProcess
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThreadId
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
OutputDebugStringA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
Sleep
VirtualAlloc
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
VirtualProtect
GetSystemInfo
VirtualQuery
CreateFileA

Exports

Exports

ApplyUpdate
CoDeviceInstall
InstallUpdateW

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 750KB - Virtual size: 750KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/usb/serial/Diags_CDC_Serial.cat
MagicCFGWin_v1.2/resources/drivers/usb/serial/Diags_CDC_Serial.inf
MagicCFGWin_v1.2/resources/drivers/usb/serial/USBAAPL64.CAT
MagicCFGWin_v1.2/resources/drivers/usb/serial/inf-wizard.exe
.exe windows:6 windows x86 arch:x86

bb7a04515df8613e19d74d4974eb8b56

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

z:\projects\libusb-win32-stage\ddk_make\output\i386\inf-wizard.pdb

Imports

kernel32

GetProcAddress
LoadLibraryA
OutputDebugStringA
OpenThread
TerminateThread
FindFirstFileW
FindNextFileW
FindClose
GetFileAttributesW
CreateNamedPipeA
CreateEventA
ReadFile
WaitForMultipleObjects
GetOverlappedResult
WaitForSingleObject
WriteFile
FileTimeToLocalFileTime
FileTimeToSystemTime
GetLocalTime
CreateMutexA
CloseHandle
LocalFree
GetVersionExA
CreateProcessW
GetCurrentDirectoryW
DeleteFileW
CreateFileW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
RtlUnwind
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetLastError
SetLastError
MultiByteToWideChar
GetFullPathNameA
WideCharToMultiByte

gdi32

SetTextColor
SetBkMode
CreateSolidBrush
GetObjectA
CreateFontIndirectA
SetBkColor

user32

CreateWindowExW
SetWindowTextW
SetWindowTextA
GetDlgItem
SendMessageA
EndDialog
CallWindowProcA
GetClassInfoExA
GetSysColorBrush
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
SetTimer
ShowWindow
UpdateWindow
PostQuitMessage
GetParent
MoveWindow
GetDesktopWindow
EnumChildWindows
GetWindowLongA
PostMessageA
DestroyWindow
ClientToScreen
TrackMouseEvent
MessageBoxA
CreateWindowExA
GetClientRect
GetWindowRect
SetCursor
LoadCursorA
EnableWindow
GetSysColor
GetDlgCtrlID
RegisterDeviceNotificationA
SetWindowLongA
UnregisterDeviceNotification
GetWindowTextA
DestroyIcon
DialogBoxParamA
LoadIconA
GetWindowTextW

msvcrt

_wcslwr
_strlwr
_iob
__getmainargs
_stricmp
strncpy
memcpy
malloc
_strdup
sprintf
_snprintf
memset
calloc
free
_cexit
_exit
_errno
_XcptFilter
_ismbblead
_isatty
_write
_lseeki64
_fileno
__pioinfo
__badioinfo
realloc
wctomb
_itoa
exit
_controlfp
?terminate@@YAXXZ
isspace
__set_app_type
strncat
_fdopen
_open_osfhandle
fclose
fwrite
getenv
strtok
strncmp
_snwprintf
fprintf
_endthread
_beginthread
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
sscanf
_acmdln
isleadbyte

comctl32

ord17

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

CryptDestroyKey
CryptGenKey
CryptAcquireContextW
ConvertSidToStringSidA
CryptReleaseContext
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
OpenProcessToken
GetTokenInformation
ConvertStringSidToSidA

setupapi

SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList

shell32

ShellExecuteExW
SHCreateDirectoryExW

ole32

CoCreateGuid

Sections

.text
Size: 703KB - Virtual size: 703KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/usb/serial/install-filter-win.exe
.exe windows:6 windows x64 arch:x64

f29c941f0ec397c03c5c3d1f70b210a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

z:\projects\libusb-win32-stage\ddk_make\output\amd64\install-filter-win.pdb

Imports

advapi32

AllocateAndInitializeSid
FreeSid
CheckTokenMembership
RegSetValueExA
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegDeleteValueA
RegCloseKey

kernel32

SizeofResource
CreateSemaphoreA
GetStdHandle
GetLastError
GetProcAddress
LockResource
Sleep
GetModuleHandleA
OutputDebugStringA
CloseHandle
LocalFree
GetVersion
FormatMessageA
WriteFile
WaitForSingleObject
GetCurrentProcess
LoadResource
FreeLibrary
FindResourceA
GetFullPathNameA
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetStartupInfoW
LoadLibraryA
GetVersionExA
UnhandledExceptionFilter

gdi32

DeleteDC
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
BitBlt

user32

GetWindowTextLengthA
GetClassInfoExA
FillRect
PostQuitMessage
RegisterClassExA
GetWindowLongPtrA
GetWindowRect
SetTimer
GetMessageA
DestroyWindow
DestroyIcon
DrawEdge
UnregisterDeviceNotification
EnableWindow
SetWindowTextA
GetSystemMetrics
CheckRadioButton
IsDlgButtonChecked
GetDesktopWindow
EndDialog
GetDlgItem
CreateWindowExA
MessageBoxA
SendMessageA
TranslateMessage
InflateRect
OffsetRect
InvalidateRect
DefWindowProcA
RedrawWindow
GetClientRect
GetSysColor
SetWindowPos
GetSysColorBrush
SetWindowLongPtrA
PostMessageA
DispatchMessageA
UpdateWindow
LoadCursorA
GetParent
LoadIconA
DialogBoxParamA
IsWindowEnabled
RegisterDeviceNotificationA

msvcrt

__getmainargs
__C_specific_handler
_XcptFilter
_exit
_ismbblead
_cexit
exit
_acmdln
_initterm
_amsg_exit
_commode
_fmode
__set_app_type
memcpy
memset
?terminate@@YAXXZ
_vsnprintf
strncpy
strerror
memmove
_stricmp
_getch
wcstombs
_strdup
printf
_beginthread
_snprintf
strstr
_wcsnicmp
_endthread
_strlwr
strncmp
sscanf
mbstowcs
_wcsicmp
strchr
malloc
free
sprintf
__setusermatherr

setupapi

CM_Get_Device_IDA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupGetStringFieldA
SetupFindFirstLineA
SetupDiSetDeviceRegistryPropertyA
CM_Get_DevNode_Status
SetupCloseInfFile
SetupDiRemoveDevice
SetupOpenInfFileA
SetupDiGetDeviceRegistryPropertyA
SetupFindNextLine
SetupDiSetClassInstallParamsA
SetupDiCallClassInstaller
SetupDiOpenDevRegKey
SetupDiGetClassDevsA

comctl32

ord17

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/usb/serial/install-filter.exe
.exe windows:6 windows x64 arch:x64

ef2a6b24aaedbaa7af3ee919fcdc75bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

z:\projects\libusb-win32-stage\ddk_make\output\amd64\install-filter.pdb

Imports

advapi32

AllocateAndInitializeSid
FreeSid
CheckTokenMembership
RegSetValueExA
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegDeleteValueA
RegCloseKey

kernel32

Sleep
SizeofResource
CreateSemaphoreA
GetStdHandle
GetLastError
GetProcAddress
LoadLibraryA
LockResource
WriteFile
GetVersionExA
CloseHandle
LocalFree
GetVersion
FormatMessageA
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
WaitForSingleObject
GetCurrentProcess
LoadResource
FreeLibrary
FindResourceA
GetFullPathNameA
GetCommandLineW
GetModuleHandleA
UnhandledExceptionFilter

msvcrt

wcstombs
?terminate@@YAXXZ
memset
memcpy
__set_app_type
_fmode
_commode
__setusermatherr
_amsg_exit
_initterm
exit
_cexit
_exit
_XcptFilter
__C_specific_handler
__getmainargs
_iob
_vsnprintf
fprintf
strncpy
memmove
_stricmp
_getch
_strdup
printf
_snprintf
strstr
malloc
_wcsnicmp
free
_strlwr
strncmp
sscanf
sprintf
_wcsicmp

setupapi

SetupDiGetClassDevsA
SetupFindFirstLineA
SetupDiSetDeviceRegistryPropertyA
CM_Get_DevNode_Status
SetupCloseInfFile
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiRemoveDevice
SetupOpenInfFileA
SetupDiGetDeviceRegistryPropertyA
SetupFindNextLine
CM_Get_Device_IDA
SetupDiSetClassInstallParamsA
SetupDiCallClassInstaller
SetupDiOpenDevRegKey
SetupGetStringFieldA

user32

GetDlgItem
GetSysColor
SendMessageA
GetWindowTextLengthA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/usb/serial/testlibusb-win.exe
.exe windows:6 windows x64 arch:x64

6b4300499b7888967bac26909be747ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

z:\projects\libusb-win32-stage\ddk_make\output\amd64\testlibusb-win.pdb

Imports

kernel32

Sleep
LoadLibraryA
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetStartupInfoW
UnhandledExceptionFilter

gdi32

CreateFontA

user32

DestroyWindow
LoadCursorA
UnregisterDeviceNotification
UpdateWindow
DispatchMessageA
ShowWindow
SetWindowPos
DefWindowProcA
CreateWindowExA
UnregisterClassA
BringWindowToTop
TranslateMessage
SendMessageA
PostQuitMessage
RegisterClassExA
RegisterDeviceNotificationA
GetMessageA

msvcrt

_fmode
__set_app_type
__C_specific_handler
?terminate@@YAXXZ
__getmainargs
_commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_cexit
_ismbblead
_exit
_XcptFilter
realloc
_vsnprintf
malloc
free

libusb0

usb_find_devices
usb_close
usb_get_string_simple
usb_get_version
usb_open
usb_find_busses
usb_set_debug
usb_init
usb_get_busses

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/usb/serial/testlibusb.exe
.exe windows:6 windows x64 arch:x64

f3f0128f5a1b724ed55bedcec0251756

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

z:\projects\libusb-win32-stage\ddk_make\output\amd64\testlibusb.pdb

Imports

kernel32

Sleep
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter

msvcrt

?terminate@@YAXXZ
_XcptFilter
__set_app_type
_fmode
_commode
__setusermatherr
_amsg_exit
_initterm
exit
_cexit
_exit
__C_specific_handler
__getmainargs
printf
_snprintf

libusb0

usb_find_devices
usb_close
usb_get_string_simple
usb_open
usb_find_busses
usb_set_debug
usb_init
usb_get_busses

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 94B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/usb/serial/usbaapl64.PNF
MagicCFGWin_v1.2/resources/drivers/usb/serial/usbaapl64.inf
MagicCFGWin_v1.2/resources/drivers/usb/serial/usbaapl64.sys
.sys windows:6 windows x64 arch:x64

c0d2e1595d14062390e8d0e6476d0c6d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\bwa\appleusbdevicemuxdriverwin-57\srcroot\windowsdriver\appleusbdevicemuxdriver\appleusbdevicemuxdriver\objfre_win7_amd64\amd64\usbaapl64.pdb

Imports

ntoskrnl.exe

KeSetEvent
KeInitializeEvent
IoReleaseRemoveLockEx
KeReleaseSpinLock
IofCompleteRequest
KeWaitForSingleObject
IoFreeIrp
IoSetCompletionRoutineEx
IoAllocateIrp
IofCallDriver
KeRegisterBugCheckReasonCallback
KeAcquireSpinLockRaiseToDpc
IoBuildDeviceIoControlRequest
IoRegisterDeviceInterface
IoGetAttachedDevice
IoSetDeviceInterfaceState
RtlInitUnicodeString
RtlIntegerToUnicodeString
IoDeleteDevice
IoFreeWorkItem
RtlQueryRegistryValues
ZwDeleteValueKey
IoInvalidateDeviceRelations
IoCancelIrp
KeDelayExecutionThread
RtlFreeUnicodeString
IoStopTimer
KeResetEvent
IoAllocateWorkItem
PoStartNextPowerIrp
KeQueryTimeIncrement
ZwClose
RtlAppendUnicodeStringToString
RtlCopyUnicodeString
IoOpenDeviceRegistryKey
IoCreateDevice
IoQueueWorkItem
IoInitializeIrp
KeReadStateEvent
IoStartTimer
PoRequestPowerIrp
PoCallDriver
IoInitializeTimer
IoDetachDevice
KeDeregisterBugCheckReasonCallback
IoReleaseRemoveLockAndWaitEx
IoAttachDeviceToDeviceStack
ObfReferenceObject
IoInitializeRemoveLockEx
RtlUnicodeStringToAnsiString
MmMapLockedPagesSpecifyCache
RtlFreeAnsiString
RtlCompareUnicodeString
ZwSetValueKey
_vsnwprintf
KeBugCheckEx
IoAcquireRemoveLockEx
ExFreePoolWithTag
ExFreePool
ExAllocatePoolWithTag
MmGetSystemRoutineAddress
PsGetVersion

wmilib.sys

WmiSystemControl

usbd.sys

USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/usb/serial/usbaaplrc.dll
.dll windows:5 windows x86 arch:x86

d056332cf3b8d6b9c5dfda1fdbccf8ca

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1f:be:db:2a:9b:36:c8:6f:3c:c8:5a:24:9b:fb:d2:ec
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

18/05/2009, 00:00

Not After

26/06/2011, 23:59

Subject

CN=Apple Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Apple Inc.,L=Cupertino,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3f:e0:bc:39:90:50:b6:a1:ba:61:c0:b4:75:3c:e8:e8:4a:59:34:b4
Signer

Actual PE Digest

3f:e0:bc:39:90:50:b6:a1:ba:61:c0:b4:75:3c:e8:e8:4a:59:34:b4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\BWA\AppleUSBDeviceMuxDriverWin-57\srcroot\WindowsDriver\AppleUSBDeviceMuxRC\Release\usbaaplrc.pdb

Imports

msvcr90

_lock
__dllonexit
_except_handler4_common
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_onexit
_encode_pointer

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/usb/serial/usbser.PNF
MagicCFGWin_v1.2/resources/drivers/usb/serial/usbser.inf
MagicCFGWin_v1.2/resources/drivers/usb/serial/usbser.sys
.sys windows:10 windows x64 arch:x64

7912f9756d1e8116ab279116dd0c442b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

USBSER.pdb

Imports

ntoskrnl.exe

IoSetDeviceInterfacePropertyData
RtlAnsiCharToUnicodeChar
RtlWriteRegistryValue
ExFreePoolWithTag
ExAllocatePoolWithTag
KeInitializeEvent
RtlDeleteRegistryValue
IofCompleteRequest
KeWaitForSingleObject
KeSetEvent
DbgPrintEx
RtlCopyUnicodeString
IoWMIRegistrationControl
MmGetSystemRoutineAddress
KeClearEvent
RtlInitUnicodeString

hal

KeQueryPerformanceCounter

usbd.sys

USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx

wpprecorder.sys

WppAutoLogStart
imp_WppRecorderReplay
WppAutoLogTrace
WppAutoLogStop

wdfldr.sys

WdfVersionUnbindClass
WdfVersionUnbind
WdfVersionBind
WdfVersionBindClass

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGED
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 742B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

GFIDS
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/usb/x64/USBAAPL64.CAT
MagicCFGWin_v1.2/resources/drivers/usb/x64/usbaapl64.inf
MagicCFGWin_v1.2/resources/drivers/usb/x64/usbaapl64.sys
.sys windows:6 windows x64 arch:x64

c0d2e1595d14062390e8d0e6476d0c6d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\bwa\appleusbdevicemuxdriverwin-67.4\srcroot\windowsdriver\appleusbdevicemuxdriver\appleusbdevicemuxdriver\objfre_win7_amd64\amd64\usbaapl64.pdb

Imports

ntoskrnl.exe

KeSetEvent
KeInitializeEvent
IoReleaseRemoveLockEx
KeReleaseSpinLock
IofCompleteRequest
KeWaitForSingleObject
IoFreeIrp
IoSetCompletionRoutineEx
IoAllocateIrp
IofCallDriver
KeRegisterBugCheckReasonCallback
KeAcquireSpinLockRaiseToDpc
IoBuildDeviceIoControlRequest
IoRegisterDeviceInterface
IoGetAttachedDevice
IoSetDeviceInterfaceState
RtlInitUnicodeString
RtlIntegerToUnicodeString
IoDeleteDevice
IoFreeWorkItem
RtlQueryRegistryValues
ZwDeleteValueKey
IoInvalidateDeviceRelations
IoCancelIrp
KeDelayExecutionThread
RtlFreeUnicodeString
IoStopTimer
KeResetEvent
IoAllocateWorkItem
PoStartNextPowerIrp
KeQueryTimeIncrement
ZwClose
RtlAppendUnicodeStringToString
RtlCopyUnicodeString
IoOpenDeviceRegistryKey
IoCreateDevice
IoQueueWorkItem
IoInitializeIrp
KeReadStateEvent
IoStartTimer
PoRequestPowerIrp
PoCallDriver
IoInitializeTimer
IoDetachDevice
KeDeregisterBugCheckReasonCallback
IoReleaseRemoveLockAndWaitEx
IoAttachDeviceToDeviceStack
ObfReferenceObject
IoInitializeRemoveLockEx
RtlUnicodeStringToAnsiString
MmMapLockedPagesSpecifyCache
RtlFreeAnsiString
RtlCompareUnicodeString
ZwSetValueKey
_vsnwprintf
KeBugCheckEx
IoAcquireRemoveLockEx
ExFreePoolWithTag
ExFreePool
ExAllocatePoolWithTag
MmGetSystemRoutineAddress
PsGetVersion

wmilib.sys

WmiSystemControl

usbd.sys

USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 394B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/usb/x64/usbaaplrc.dll
.dll windows:5 windows x86 arch:x86

d056332cf3b8d6b9c5dfda1fdbccf8ca

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:de:2f:9f:bf:7a:1d:41:91:f4:57:73:fa:11:3e:1d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

24/05/2013, 00:00

Not After

23/07/2015, 23:59

Subject

CN=Apple Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Apple Inc.,L=Cupertino,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1d:d8:88:54:04:b5:67:7e:90:cc:ae:49:07:71:8e:40:80:e6:79:b8
Signer

Actual PE Digest

1d:d8:88:54:04:b5:67:7e:90:cc:ae:49:07:71:8e:40:80:e6:79:b8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\BWA\AppleUSBDeviceMuxDriverWin-67.4\srcroot\WindowsDriver\AppleUSBDeviceMuxRC\Release\usbaaplrc.pdb

Imports

msvcr90

_lock
__dllonexit
_except_handler4_common
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_onexit
_encode_pointer

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/usb/x86/USBAAPL.CAT
MagicCFGWin_v1.2/resources/drivers/usb/x86/usbaapl.PNF
MagicCFGWin_v1.2/resources/drivers/usb/x86/usbaapl.inf
MagicCFGWin_v1.2/resources/drivers/usb/x86/usbaapl.sys
.sys windows:6 windows x86 arch:x86

8737f462046e8661ff45ea128ba92123

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\bwa\appleusbdevicemuxdriverwin-67.4\srcroot\windowsdriver\appleusbdevicemuxdriver\appleusbdevicemuxdriver\objfre_win7_x86\i386\usbaapl.pdb

Imports

ntoskrnl.exe

IoAcquireRemoveLockEx
KeWaitForSingleObject
KeRegisterBugCheckReasonCallback
ExAllocatePoolWithTag
KeInitializeSpinLock
IoFreeIrp
IoSetCompletionRoutineEx
IoAllocateIrp
memcpy
memset
IoBuildDeviceIoControlRequest
RtlInitUnicodeString
ExFreePool
IoGetAttachedDevice
IoStopTimer
IoSetDeviceInterfaceState
IoRegisterDeviceInterface
KeDelayExecutionThread
KeQueryTimeIncrement
IoFreeWorkItem
IoQueueWorkItem
IoAllocateWorkItem
IoCancelIrp
IoInitializeIrp
ZwClose
ZwDeleteValueKey
IofCompleteRequest
RtlAppendUnicodeStringToString
IoReleaseRemoveLockEx
InterlockedIncrement
InterlockedDecrement
IoInvalidateDeviceRelations
IoDeleteDevice
RtlQueryRegistryValues
PoStartNextPowerIrp
RtlCopyUnicodeString
RtlFreeUnicodeString
IoCreateDevice
IoStartTimer
PoCallDriver
PoRequestPowerIrp
KeReadStateEvent
KeDeregisterBugCheckReasonCallback
IoInitializeTimer
IoDetachDevice
IoInitializeRemoveLockEx
IoAttachDeviceToDeviceStack
ObfReferenceObject
IoReleaseRemoveLockAndWaitEx
RtlCompareUnicodeString
RtlFreeAnsiString
RtlUnicodeStringToAnsiString
MmMapLockedPagesSpecifyCache
_vsnwprintf
ZwSetValueKey
KeTickCount
KeBugCheckEx
KeGetCurrentThread
ExFreePoolWithTag
KeInitializeEvent
KeSetEvent
RtlIntegerToUnicodeString
IofCallDriver
IoOpenDeviceRegistryKey
KeResetEvent
PsGetVersion
MmGetSystemRoutineAddress

hal

KeGetCurrentIrql
KfReleaseSpinLock
KfAcquireSpinLock

wmilib.sys

WmiSystemControl

usbd.sys

USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 954B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/drivers/usb/x86/usbaaplrc.dll
.dll windows:5 windows x86 arch:x86

d056332cf3b8d6b9c5dfda1fdbccf8ca

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:de:2f:9f:bf:7a:1d:41:91:f4:57:73:fa:11:3e:1d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

24/05/2013, 00:00

Not After

23/07/2015, 23:59

Subject

CN=Apple Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Apple Inc.,L=Cupertino,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1d:d8:88:54:04:b5:67:7e:90:cc:ae:49:07:71:8e:40:80:e6:79:b8
Signer

Actual PE Digest

1d:d8:88:54:04:b5:67:7e:90:cc:ae:49:07:71:8e:40:80:e6:79:b8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\BWA\AppleUSBDeviceMuxDriverWin-67.4\srcroot\WindowsDriver\AppleUSBDeviceMuxRC\Release\usbaaplrc.pdb

Imports

msvcr90

_lock
__dllonexit
_except_handler4_common
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_onexit
_encode_pointer

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/import/.irecovery
MagicCFGWin_v1.2/resources/import/LibUsbDotNet.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Z:\PROJECTS\LibUsbDotNet\LibWinUsb\obj\Release\LibUsbDotNet.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/import/dirname
.macho macos arch:arm64
MagicCFGWin_v1.2/resources/import/iproxy.exe
.exe windows:4 windows x64 arch:x64

eee6c0c6a94faf30cb34d4ff5e14a3f2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

libusbmuxd-2.0

libusbmuxd_set_debug_level
usbmuxd_connect
usbmuxd_get_device
usbmuxd_get_device_list

kernel32

DeleteCriticalSection
EnterCriticalSection
GetEnvironmentVariableW
GetLastError
GetStartupInfoA
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__argv
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_errno
_fmode
_initterm
_lock
_onexit
_strdup
_unlock
abort
calloc
exit
fprintf
fputc
free
fwrite
localeconv
malloc
memcpy
memset
perror
signal
strchr
strerror
strlen
strncmp
strrchr
strtol
vfprintf
wcslen

ws2_32

__WSAFDIsSet
ioctlsocket
select

libimobiledevice-glue-1.0

socket_accept
socket_addr_to_string
socket_close
socket_connect_addr
socket_create
socket_receive_timeout
socket_send
thread_detach
thread_new

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/import/irecovery.exe
.exe windows:4 windows x64 arch:x64

8282e07bc0c1fb8f85fecf754b612cf7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

libirecovery-1.0

irecv_close
irecv_devices_get_all
irecv_devices_get_device_by_client
irecv_event_subscribe
irecv_execute_script
irecv_get_device_info
irecv_get_mode
irecv_getenv
irecv_open_with_ecid
irecv_reboot
irecv_receive
irecv_reset
irecv_saveenv
irecv_send_command
irecv_send_file
irecv_set_debug_level
irecv_setenv
irecv_strerror
irecv_trigger_limera1n_exploit

kernel32

DeleteCriticalSection
EnterCriticalSection
GetEnvironmentVariableW
GetLastError
GetStartupInfoA
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte
__C_specific_handler

msvcrt

___lc_codepage_func
___mb_cur_max_func
__argv
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_errno
_fmode
_initterm
_lock
_onexit
_strdup
_unlock
abort
calloc
exit
fclose
fflush
fopen
fprintf
fputc
fread
free
fseek
ftell
fwrite
islower
isspace
isupper
localeconv
malloc
memcpy
memset
rewind
signal
strchr
strcmp
strerror
strlen
strncmp
strrchr
strstr
strtok
vfprintf
wcslen

libreadline8

add_history
read_history
readline
write_history

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/import/libimobiledevice-1.0.dll
.dll windows:4 windows x64 arch:x64

c1b92d23895031a80d7e43b9cd3bbd1e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetFileAttributesA
GetLastError
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_findclose
_findfirst64
_findnext64
_fullpath
_initterm
_lock
_strdup
_time64
_unlock
_vscprintf
_vsnprintf
abort
calloc
fputc
free
fwrite
getc
islower
isspace
isupper
isxdigit
localeconv
malloc
memcpy
memset
realloc
strcat
strcmp
strcpy
strerror
strlen
strncmp
strncpy
strrchr
strtol
strtoul
tolower
ungetc
vfprintf
wcslen

ole32

CoTaskMemFree

shell32

SHGetPathFromIDListW
SHGetSpecialFolderLocation

libcrypto-1_1-x64

ASN1_INTEGER_free
ASN1_INTEGER_new
ASN1_INTEGER_set
ASN1_TIME_free
ASN1_TIME_new
ASN1_TIME_set
BIO_ctrl
BIO_free
BIO_get_callback_arg
BIO_new
BIO_new_mem_buf
BIO_s_mem
BIO_s_null
BIO_set_callback
BIO_set_callback_arg
BN_free
BN_new
BN_set_word
EVP_PKEY_assign
EVP_PKEY_free
EVP_PKEY_new
EVP_sha1
PEM_read_bio_RSAPrivateKey
PEM_read_bio_RSAPublicKey
PEM_read_bio_X509
PEM_write_bio_PrivateKey
PEM_write_bio_X509
RSA_free
RSA_generate_key_ex
RSA_new
X509V3_EXT_cleanup
X509V3_EXT_conf_nid
X509V3_set_ctx
X509_EXTENSION_free
X509_add_ext
X509_free
X509_new
X509_set1_notAfter
X509_set1_notBefore
X509_set_pubkey
X509_set_serialNumber
X509_set_version
X509_sign

libimobiledevice-glue-1.0

generate_uuid
mutex_destroy
mutex_init
mutex_lock
mutex_unlock
socket_addr_to_string
socket_close
socket_connect
socket_connect_addr
socket_receive
socket_receive_timeout
socket_send
string_append
string_concat
thread_free
thread_join
thread_new
thread_once

libplist-2.0

plist_access_path
plist_array_append_item
plist_array_get_item
plist_array_get_size
plist_copy
plist_dict_get_item
plist_dict_merge
plist_dict_remove_item
plist_dict_set_item
plist_free
plist_from_bin
plist_from_memory
plist_from_xml
plist_get_bool_val
plist_get_data_val
plist_get_node_type
plist_get_real_val
plist_get_string_val
plist_get_uint_val
plist_new_array
plist_new_bool
plist_new_data
plist_new_dict
plist_new_real
plist_new_string
plist_new_uint
plist_string_val_compare
plist_to_bin
plist_to_xml

libssl-1_1-x64

SSL_CTX_ctrl
SSL_CTX_free
SSL_CTX_new
SSL_CTX_set_security_level
SSL_CTX_use_RSAPrivateKey
SSL_CTX_use_certificate
SSL_do_handshake
SSL_free
SSL_get_error
SSL_new
SSL_read
SSL_set_bio
SSL_set_connect_state
SSL_set_verify
SSL_shutdown
SSL_write
TLS_method

libusbmuxd-2.0

usbmuxd_connect
usbmuxd_delete_pair_record
usbmuxd_device_list_free
usbmuxd_disconnect
usbmuxd_get_device
usbmuxd_get_device_list
usbmuxd_read_buid
usbmuxd_read_pair_record
usbmuxd_recv
usbmuxd_recv_timeout
usbmuxd_save_pair_record_with_device_id
usbmuxd_send
usbmuxd_subscribe
usbmuxd_unsubscribe

Exports

Exports

afc_client_free
afc_client_new
afc_client_new_from_house_arrest_client
afc_client_new_with_service_client
afc_client_start_service
afc_dictionary_free
afc_file_close
afc_file_lock
afc_file_open
afc_file_read
afc_file_seek
afc_file_tell
afc_file_truncate
afc_file_write
afc_get_device_info
afc_get_device_info_key
afc_get_file_info
afc_make_directory
afc_make_link
afc_read_directory
afc_remove_path
afc_remove_path_and_contents
afc_rename_path
afc_set_file_time
afc_truncate
companion_proxy_client_free
companion_proxy_client_new
companion_proxy_client_start_service
companion_proxy_get_device_registry
companion_proxy_get_value_from_registry
companion_proxy_receive
companion_proxy_send
companion_proxy_start_forwarding_service_port
companion_proxy_start_listening_for_devices
companion_proxy_stop_forwarding_service_port
companion_proxy_stop_listening_for_devices
debugserver_client_free
debugserver_client_new
debugserver_client_receive
debugserver_client_receive_response
debugserver_client_receive_with_timeout
debugserver_client_send
debugserver_client_send_command
debugserver_client_set_ack_mode
debugserver_client_set_argv
debugserver_client_set_environment_hex_encoded
debugserver_client_start_service
debugserver_command_free
debugserver_command_new
debugserver_decode_string
debugserver_encode_string
diagnostics_relay_client_free
diagnostics_relay_client_new
diagnostics_relay_client_start_service
diagnostics_relay_goodbye
diagnostics_relay_query_ioregistry_entry
diagnostics_relay_query_ioregistry_plane
diagnostics_relay_query_mobilegestalt
diagnostics_relay_request_diagnostics
diagnostics_relay_restart
diagnostics_relay_shutdown
diagnostics_relay_sleep
file_relay_client_free
file_relay_client_new
file_relay_client_start_service
file_relay_request_sources
file_relay_request_sources_timeout
heartbeat_client_free
heartbeat_client_new
heartbeat_client_start_service
heartbeat_receive
heartbeat_receive_with_timeout
heartbeat_send
house_arrest_client_free
house_arrest_client_new
house_arrest_client_start_service
house_arrest_get_result
house_arrest_send_command
house_arrest_send_request
idevice_connect
idevice_connection_disable_bypass_ssl
idevice_connection_disable_ssl
idevice_connection_enable_ssl
idevice_connection_get_fd
idevice_connection_receive
idevice_connection_receive_timeout
idevice_connection_send
idevice_device_list_extended_free
idevice_device_list_free
idevice_disconnect
idevice_event_subscribe
idevice_event_unsubscribe
idevice_free
idevice_get_device_list
idevice_get_device_list_extended
idevice_get_handle
idevice_get_udid
idevice_new
idevice_new_with_options
idevice_set_debug_level
instproxy_archive
instproxy_browse
instproxy_browse_with_callback
instproxy_check_capabilities_match
instproxy_client_free
instproxy_client_get_path_for_bundle_identifier
instproxy_client_new
instproxy_client_options_add
instproxy_client_options_free
instproxy_client_options_new
instproxy_client_options_set_return_attributes
instproxy_client_start_service
instproxy_command_get_name
instproxy_install
instproxy_lookup
instproxy_lookup_archives
instproxy_remove_archive
instproxy_restore
instproxy_status_get_current_list
instproxy_status_get_error
instproxy_status_get_name
instproxy_status_get_percent_complete
instproxy_uninstall
instproxy_upgrade
lockdownd_activate
lockdownd_client_free
lockdownd_client_new
lockdownd_client_new_with_handshake
lockdownd_client_set_label
lockdownd_data_classes_free
lockdownd_deactivate
lockdownd_enter_recovery
lockdownd_get_device_name
lockdownd_get_device_udid
lockdownd_get_sync_data_classes
lockdownd_get_value
lockdownd_goodbye
lockdownd_pair
lockdownd_pair_with_options
lockdownd_query_type
lockdownd_receive
lockdownd_remove_value
lockdownd_send
lockdownd_service_descriptor_free
lockdownd_set_value
lockdownd_start_service
lockdownd_start_service_with_escrow_bag
lockdownd_start_session
lockdownd_stop_session
lockdownd_strerror
lockdownd_unpair
lockdownd_validate_pair
misagent_client_free
misagent_client_new
misagent_client_start_service
misagent_copy
misagent_copy_all
misagent_get_status_code
misagent_install
misagent_remove
mobile_image_mounter_free
mobile_image_mounter_hangup
mobile_image_mounter_lookup_image
mobile_image_mounter_mount_image
mobile_image_mounter_new
mobile_image_mounter_start_service
mobile_image_mounter_upload_image
mobileactivation_activate
mobileactivation_activate_with_session
mobileactivation_client_free
mobileactivation_client_new
mobileactivation_client_start_service
mobileactivation_create_activation_info
mobileactivation_create_activation_info_with_session
mobileactivation_create_activation_session_info
mobileactivation_deactivate
mobileactivation_get_activation_state
mobilebackup2_client_free
mobilebackup2_client_new
mobilebackup2_client_start_service
mobilebackup2_receive_message
mobilebackup2_receive_raw
mobilebackup2_send_message
mobilebackup2_send_raw
mobilebackup2_send_request
mobilebackup2_send_status_response
mobilebackup2_version_exchange
mobilebackup_client_free
mobilebackup_client_new
mobilebackup_client_start_service
mobilebackup_receive
mobilebackup_receive_restore_application_received
mobilebackup_receive_restore_file_received
mobilebackup_request_backup
mobilebackup_request_restore
mobilebackup_send
mobilebackup_send_backup_file_received
mobilebackup_send_error
mobilebackup_send_restore_complete
mobilesync_acknowledge_changes_from_device
mobilesync_actions_add
mobilesync_actions_free
mobilesync_actions_new
mobilesync_anchors_free
mobilesync_anchors_new
mobilesync_cancel
mobilesync_clear_all_records_on_device
mobilesync_client_free
mobilesync_client_new
mobilesync_client_start_service
mobilesync_finish
mobilesync_get_all_records_from_device
mobilesync_get_changes_from_device
mobilesync_ready_to_send_changes_from_computer
mobilesync_receive
mobilesync_receive_changes
mobilesync_remap_identifiers
mobilesync_send
mobilesync_send_changes
mobilesync_start
np_client_free
np_client_new
np_client_start_service
np_observe_notification
np_observe_notifications
np_post_notification
np_set_notify_callback
preboard_client_free
preboard_client_new
preboard_client_start_service
preboard_commit_stashbag
preboard_create_stashbag
preboard_receive
preboard_receive_with_timeout
preboard_send
property_list_service_client_free
property_list_service_client_new
property_list_service_disable_ssl
property_list_service_enable_ssl
property_list_service_receive_plist
property_list_service_receive_plist_with_timeout
property_list_service_send_binary_plist
property_list_service_send_xml_plist
restored_client_free
restored_client_new
restored_client_set_label
restored_get_value
restored_goodbye
restored_query_type
restored_query_value
restored_reboot
restored_receive
restored_send
restored_start_restore
reverse_proxy_client_create_with_port
reverse_proxy_client_create_with_service
reverse_proxy_client_free
reverse_proxy_client_set_data_callback
reverse_proxy_client_set_log_callback
reverse_proxy_client_set_status_callback
reverse_proxy_client_start_proxy
reverse_proxy_get_type
sbservices_client_free
sbservices_client_new
sbservices_client_start_service
sbservices_get_home_screen_wallpaper_pngdata
sbservices_get_icon_pngdata
sbservices_get_icon_state
sbservices_get_interface_orientation
sbservices_set_icon_state
screenshotr_client_free
screenshotr_client_new
screenshotr_client_start_service
screenshotr_take_screenshot
service_client_factory_start_service
service_client_free
service_client_new
service_disable_bypass_ssl
service_disable_ssl
service_enable_ssl
service_receive
service_receive_with_timeout
service_send
syslog_relay_client_free
syslog_relay_client_new
syslog_relay_client_start_service
syslog_relay_receive
syslog_relay_receive_with_timeout
syslog_relay_start_capture
syslog_relay_start_capture_raw
syslog_relay_stop_capture
webinspector_client_free
webinspector_client_new
webinspector_client_start_service
webinspector_receive
webinspector_receive_with_timeout
webinspector_send

Sections

.text
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 359KB - Virtual size: 359KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 382KB - Virtual size: 381KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/import/libimobiledevice-glue-1.0.dll
.dll windows:4 windows x64 arch:x64

997614dec22d4f2f952232f66625c9e3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

iphlpapi

ConvertLengthToIpv4Mask
GetAdaptersAddresses

kernel32

CloseHandle
CreateSemaphoreA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FormatMessageW
GetConsoleMode
GetConsoleScreenBufferInfo
GetLastError
GetStdHandle
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
ReleaseSemaphore
SetConsoleMode
SetConsoleTextAttribute
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_assert
_errno
_initterm
_isatty
_localtime64
_lock
_strdup
_time64
_unlock
abort
calloc
fclose
fopen
fputc
fputs
fread
free
fseek
ftell
fwrite
getenv
localeconv
malloc
memcpy
memmove
memset
perror
realloc
rand
rewind
srand
strcpy
strerror
strftime
strlen
strncmp
strtol
toupper
vfprintf
wcslen
wcstombs

ws2_32

WSAAddressToStringA
WSAGetLastError
WSAStartup
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
getsockopt
htons
ioctlsocket
listen
ntohl
recv
select
send
setsockopt
shutdown
socket

libplist-2.0

plist_array_get_item
plist_array_get_size
plist_dict_new_iter
plist_dict_next_item
plist_from_bin
plist_from_xml
plist_get_bool_val
plist_get_data_val
plist_get_date_val
plist_get_key_val
plist_get_node_type
plist_get_real_val
plist_get_string_val
plist_get_uint_val
plist_to_bin
plist_to_xml

Exports

Exports

buffer_read_from_filename
buffer_write_to_filename
cfprintf
collection_add
collection_copy
collection_count
collection_free
collection_init
collection_remove
cond_destroy
cond_init
cond_signal
cond_wait
cond_wait_timeout
cprintf
cvfprintf
generate_uuid
get_primary_mac_address
mutex_destroy
mutex_init
mutex_lock
mutex_unlock
plist_print_to_stream
plist_print_to_stream_with_indentation
plist_read_from_filename
plist_write_to_filename
socket_accept
socket_addr_to_string
socket_check_fd
socket_close
socket_connect
socket_connect_addr
socket_create
socket_peek
socket_receive
socket_receive_timeout
socket_send
socket_set_verbose
socket_shutdown
string_append
string_build_path
string_concat
string_format_size
string_toupper
term_colors_init
term_colors_set_enabled
thread_alive
thread_cancel
thread_detach
thread_free
thread_join
thread_new
thread_once

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/import/libirecovery-1.0.dll
.dll windows:4 windows x64 arch:x64

21edb90c38b14eb68f39eae55496a09c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

CancelIo
CloseHandle
CreateEventA
CreateFileA
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
GetLastError
GetOverlappedResult
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_fileno
_fstat64
_initterm
_lock
_stricmp
_strdup
_unlock
abort
calloc
fclose
fopen
fputc
fread
free
fwrite
getc
getenv
islower
isspace
isupper
isxdigit
localeconv
malloc
memcpy
memset
realloc
strchr
strcmp
strerror
strlen
strncmp
strrchr
strstr
strtok
strtol
strtoul
tolower
toupper
ungetc
vfprintf
wcslen

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceRegistryPropertyA

libimobiledevice-glue-1.0

collection_add
collection_count
collection_free
collection_init
collection_remove
cond_destroy
cond_init
cond_signal
cond_wait
mutex_destroy
mutex_init
mutex_lock
mutex_unlock
thread_alive
thread_free
thread_join
thread_new
thread_once

Exports

Exports

irecv_close
irecv_device_event_subscribe
irecv_device_event_unsubscribe
irecv_devices_get_all
irecv_devices_get_device_by_client
irecv_devices_get_device_by_hardware_model
irecv_devices_get_device_by_product_type
irecv_event_subscribe
irecv_event_unsubscribe
irecv_execute_script
irecv_exit
irecv_finish_transfer
irecv_get_device_info
irecv_get_mode
irecv_getenv
irecv_getret
irecv_init
irecv_open_with_ecid
irecv_open_with_ecid_and_attempts
irecv_reboot
irecv_receive
irecv_reconnect
irecv_recv_buffer
irecv_reset
irecv_reset_counters
irecv_saveenv
irecv_send_buffer
irecv_send_command
irecv_send_command_breq
irecv_send_file
irecv_set_debug_level
irecv_setenv
irecv_strerror
irecv_trigger_limera1n_exploit
irecv_usb_bulk_transfer
irecv_usb_control_transfer
irecv_usb_set_configuration
irecv_usb_set_interface

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/import/libplist++-2.0.dll
.dll windows:4 windows x64 arch:x64

3beb89e5c78aade87dd639191e366360

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

libplist-2.0

plist_array_append_item
plist_array_get_item_index
plist_array_get_size
plist_array_insert_item
plist_array_new_iter
plist_array_next_item
plist_array_remove_item
plist_copy
plist_dict_get_item_key
plist_dict_get_size
plist_dict_new_iter
plist_dict_next_item
plist_dict_remove_item
plist_dict_set_item
plist_free
plist_from_bin
plist_from_xml
plist_get_bool_val
plist_get_data_val
plist_get_date_val
plist_get_key_val
plist_get_node_type
plist_get_real_val
plist_get_string_val
plist_get_uid_val
plist_get_uint_val
plist_new_array
plist_new_bool
plist_new_data
plist_new_date
plist_new_dict
plist_new_real
plist_new_string
plist_new_uid
plist_new_uint
plist_set_bool_val
plist_set_data_val
plist_set_date_val
plist_set_key_val
plist_set_real_val
plist_set_string_val
plist_set_uid_val
plist_set_uint_val
plist_to_bin
plist_to_xml

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__iob_func
_amsg_exit
_initterm
_lock
_unlock
abort
calloc
free
fwrite
memcmp
memcpy
memmove
realloc
strlen
strncmp
vfprintf

libgcc_s_seh-1

_Unwind_Resume

libstdc++-6

_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE10_M_disposeEv
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_createERyy
_ZSt18_Rb_tree_decrementPSt18_Rb_tree_node_base
_ZSt18_Rb_tree_incrementPKSt18_Rb_tree_node_base
_ZSt18_Rb_tree_incrementPSt18_Rb_tree_node_base
_ZSt19__throw_logic_errorPKc
_ZSt20__throw_length_errorPKc
_ZSt24__throw_out_of_range_fmtPKcz
_ZSt28_Rb_tree_rebalance_for_erasePSt18_Rb_tree_node_baseRS_
_ZSt29_Rb_tree_insert_and_rebalancebPSt18_Rb_tree_node_baseS0_RS_
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZdlPvy
_Znwy
__cxa_begin_catch
__cxa_end_catch
__cxa_pure_virtual
__cxa_rethrow
__gxx_personality_seh0

Exports

Exports

_ZN5PList10Dictionary10GetNodeKeyB5cxx11EPNS_4NodeE
_ZN5PList10Dictionary3EndB5cxx11Ev
_ZN5PList10Dictionary3SetERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEPKNS_4NodeE
_ZN5PList10Dictionary3SetERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERKNS_4NodeE
_ZN5PList10Dictionary4FindERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5PList10Dictionary5BeginB5cxx11Ev
_ZN5PList10Dictionary6InsertERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEPNS_4NodeE
_ZN5PList10Dictionary6RemoveEPNS_4NodeE
_ZN5PList10Dictionary6RemoveERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5PList10DictionaryC1EPNS_4NodeE
_ZN5PList10DictionaryC1EPvPNS_4NodeE
_ZN5PList10DictionaryC1ERKS0_
_ZN5PList10DictionaryC2EPNS_4NodeE
_ZN5PList10DictionaryC2EPvPNS_4NodeE
_ZN5PList10DictionaryC2ERKS0_
_ZN5PList10DictionaryD0Ev
_ZN5PList10DictionaryD1Ev
_ZN5PList10DictionaryD2Ev
_ZN5PList10DictionaryaSERKS0_
_ZN5PList10DictionaryixERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5PList3Key8SetValueERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5PList3KeyC1EPNS_4NodeE
_ZN5PList3KeyC1EPvPNS_4NodeE
_ZN5PList3KeyC1ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5PList3KeyC1ERKS0_
_ZN5PList3KeyC2EPNS_4NodeE
_ZN5PList3KeyC2EPvPNS_4NodeE
_ZN5PList3KeyC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5PList3KeyC2ERKS0_
_ZN5PList3KeyD0Ev
_ZN5PList3KeyD1Ev
_ZN5PList3KeyD2Ev
_ZN5PList3KeyaSERKS0_
_ZN5PList3Uid8SetValueEy
_ZN5PList3UidC1EPNS_4NodeE
_ZN5PList3UidC1EPvPNS_4NodeE
_ZN5PList3UidC1ERKS0_
_ZN5PList3UidC1Ey
_ZN5PList3UidC2EPNS_4NodeE
_ZN5PList3UidC2EPvPNS_4NodeE
_ZN5PList3UidC2ERKS0_
_ZN5PList3UidC2Ey
_ZN5PList3UidD0Ev
_ZN5PList3UidD1Ev
_ZN5PList3UidD2Ev
_ZN5PList3UidaSERKS0_
_ZN5PList4Data8SetValueERKSt6vectorIcSaIcEE
_ZN5PList4DataC1EPNS_4NodeE
_ZN5PList4DataC1EPvPNS_4NodeE
_ZN5PList4DataC1ERKS0_
_ZN5PList4DataC1ERKSt6vectorIcSaIcEE
_ZN5PList4DataC2EPNS_4NodeE
_ZN5PList4DataC2EPvPNS_4NodeE
_ZN5PList4DataC2ERKS0_
_ZN5PList4DataC2ERKSt6vectorIcSaIcEE
_ZN5PList4DataD0Ev
_ZN5PList4DataD1Ev
_ZN5PList4DataD2Ev
_ZN5PList4DataaSERKS0_
_ZN5PList4Date8SetValueE7timeval
_ZN5PList4DateC1E7timeval
_ZN5PList4DateC1EPNS_4NodeE
_ZN5PList4DateC1EPvPNS_4NodeE
_ZN5PList4DateC1ERKS0_
_ZN5PList4DateC2E7timeval
_ZN5PList4DateC2EPNS_4NodeE
_ZN5PList4DateC2EPvPNS_4NodeE
_ZN5PList4DateC2ERKS0_
_ZN5PList4DateD0Ev
_ZN5PList4DateD1Ev
_ZN5PList4DateD2Ev
_ZN5PList4DateaSERKS0_
_ZN5PList4Node9FromPlistEPvPS0_
_ZN5PList4NodeC1E10plist_typePS0_
_ZN5PList4NodeC1EPS0_
_ZN5PList4NodeC1EPvPS0_
_ZN5PList4NodeC2E10plist_typePS0_
_ZN5PList4NodeC2EPS0_
_ZN5PList4NodeC2EPvPS0_
_ZN5PList4NodeD0Ev
_ZN5PList4NodeD1Ev
_ZN5PList4NodeD2Ev
_ZN5PList4Real8SetValueEd
_ZN5PList4RealC1EPNS_4NodeE
_ZN5PList4RealC1EPvPNS_4NodeE
_ZN5PList4RealC1ERKS0_
_ZN5PList4RealC1Ed
_ZN5PList4RealC2EPNS_4NodeE
_ZN5PList4RealC2EPvPNS_4NodeE
_ZN5PList4RealC2ERKS0_
_ZN5PList4RealC2Ed
_ZN5PList4RealD0Ev
_ZN5PList4RealD1Ev
_ZN5PList4RealD2Ev
_ZN5PList4RealaSERKS0_
_ZN5PList5Array6AppendEPNS_4NodeE
_ZN5PList5Array6InsertEPNS_4NodeEj
_ZN5PList5Array6RemoveEPNS_4NodeE
_ZN5PList5Array6RemoveEj
_ZN5PList5ArrayC1EPNS_4NodeE
_ZN5PList5ArrayC1EPvPNS_4NodeE
_ZN5PList5ArrayC1ERKS0_
_ZN5PList5ArrayC2EPNS_4NodeE
_ZN5PList5ArrayC2EPvPNS_4NodeE
_ZN5PList5ArrayC2ERKS0_
_ZN5PList5ArrayD0Ev
_ZN5PList5ArrayD1Ev
_ZN5PList5ArrayD2Ev
_ZN5PList5ArrayaSERKS0_
_ZN5PList5ArrayixEj
_ZN5PList6String8SetValueERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5PList6StringC1EPNS_4NodeE
_ZN5PList6StringC1EPvPNS_4NodeE
_ZN5PList6StringC1ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5PList6StringC1ERKS0_
_ZN5PList6StringC2EPNS_4NodeE
_ZN5PList6StringC2EPvPNS_4NodeE
_ZN5PList6StringC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5PList6StringC2ERKS0_
_ZN5PList6StringD0Ev
_ZN5PList6StringD1Ev
_ZN5PList6StringD2Ev
_ZN5PList6StringaSERKS0_
_ZN5PList7Boolean8SetValueEb
_ZN5PList7BooleanC1EPNS_4NodeE
_ZN5PList7BooleanC1EPvPNS_4NodeE
_ZN5PList7BooleanC1ERKS0_
_ZN5PList7BooleanC1Eb
_ZN5PList7BooleanC2EPNS_4NodeE
_ZN5PList7BooleanC2EPvPNS_4NodeE
_ZN5PList7BooleanC2ERKS0_
_ZN5PList7BooleanC2Eb
_ZN5PList7BooleanD0Ev
_ZN5PList7BooleanD1Ev
_ZN5PList7BooleanD2Ev
_ZN5PList7BooleanaSERKS0_
_ZN5PList7Integer8SetValueEy
_ZN5PList7IntegerC1EPNS_4NodeE
_ZN5PList7IntegerC1EPvPNS_4NodeE
_ZN5PList7IntegerC1ERKS0_
_ZN5PList7IntegerC1Ey
_ZN5PList7IntegerC2EPNS_4NodeE
_ZN5PList7IntegerC2EPvPNS_4NodeE
_ZN5PList7IntegerC2ERKS0_
_ZN5PList7IntegerC2Ey
_ZN5PList7IntegerD0Ev
_ZN5PList7IntegerD1Ev
_ZN5PList7IntegerD2Ev
_ZN5PList7IntegeraSERKS0_
_ZN5PList9Structure16UpdateNodeParentEPNS_4NodeE
_ZN5PList9Structure7FromBinERKSt6vectorIcSaIcEE
_ZN5PList9Structure7FromXmlERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5PList9StructureC1E10plist_typePNS_4NodeE
_ZN5PList9StructureC1EPNS_4NodeE
_ZN5PList9StructureC2E10plist_typePNS_4NodeE
_ZN5PList9StructureC2EPNS_4NodeE
_ZN5PList9StructureD0Ev
_ZN5PList9StructureD1Ev
_ZN5PList9StructureD2Ev
_ZNK5PList10Dictionary3EndB5cxx11Ev
_ZNK5PList10Dictionary4FindERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZNK5PList10Dictionary5BeginB5cxx11Ev
_ZNK5PList10Dictionary5CloneEv
_ZNK5PList3Key5CloneEv
_ZNK5PList3Key8GetValueB5cxx11Ev
_ZNK5PList3Uid5CloneEv
_ZNK5PList3Uid8GetValueEv
_ZNK5PList4Data5CloneEv
_ZNK5PList4Data8GetValueEv
_ZNK5PList4Date5CloneEv
_ZNK5PList4Date8GetValueEv
_ZNK5PList4Node7GetTypeEv
_ZNK5PList4Node8GetPlistEv
_ZNK5PList4Node9GetParentEv
_ZNK5PList4Real5CloneEv
_ZNK5PList4Real8GetValueEv
_ZNK5PList5Array12GetNodeIndexEPNS_4NodeE
_ZNK5PList5Array5CloneEv
_ZNK5PList6String5CloneEv
_ZNK5PList6String8GetValueB5cxx11Ev
_ZNK5PList7Boolean5CloneEv
_ZNK5PList7Boolean8GetValueEv
_ZNK5PList7Integer5CloneEv
_ZNK5PList7Integer8GetValueEv
_ZNK5PList9Structure5ToBinEv
_ZNK5PList9Structure5ToXmlB5cxx11Ev
_ZNK5PList9Structure7GetSizeEv
_ZNSt12_Vector_baseIPN5PList4NodeESaIS2_EED2Ev
_ZNSt12_Vector_baseIcSaIcEED2Ev
_ZNSt6vectorIPN5PList4NodeESaIS2_EE17_M_realloc_insertIJRKS2_EEEvN9__gnu_cxx17__normal_iteratorIPS2_S4_EEDpOT_
_ZNSt6vectorIPN5PList4NodeESaIS2_EE17_M_realloc_insertIJS2_EEEvN9__gnu_cxx17__normal_iteratorIPS2_S4_EEDpOT_
_ZNSt6vectorIPN5PList4NodeESaIS2_EE8_M_eraseEN9__gnu_cxx17__normal_iteratorIPS2_S4_EE
_ZNSt8_Rb_treeINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_PN5PList4NodeEESt10_Select1stISB_ESt4lessIS5_ESaISB_EE11equal_rangeERS7_
_ZNSt8_Rb_treeINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_PN5PList4NodeEESt10_Select1stISB_ESt4lessIS5_ESaISB_EE24_M_get_insert_unique_posERS7_
_ZNSt8_Rb_treeINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_PN5PList4NodeEESt10_Select1stISB_ESt4lessIS5_ESaISB_EE29_M_get_insert_hint_unique_posESt23_Rb_tree_const_iteratorISB_ERS7_
_ZNSt8_Rb_treeINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_PN5PList4NodeEESt10_Select1stISB_ESt4lessIS5_ESaISB_EE4findERS7_
_ZTIN5PList10DictionaryE
_ZTIN5PList3KeyE
_ZTIN5PList3UidE
_ZTIN5PList4DataE
_ZTIN5PList4DateE
_ZTIN5PList4NodeE
_ZTIN5PList4RealE
_ZTIN5PList5ArrayE
_ZTIN5PList6StringE
_ZTIN5PList7BooleanE
_ZTIN5PList7IntegerE
_ZTIN5PList9StructureE
_ZTSN5PList10DictionaryE
_ZTSN5PList3KeyE
_ZTSN5PList3UidE
_ZTSN5PList4DataE
_ZTSN5PList4DateE
_ZTSN5PList4NodeE
_ZTSN5PList4RealE
_ZTSN5PList5ArrayE
_ZTSN5PList6StringE
_ZTSN5PList7BooleanE
_ZTSN5PList7IntegerE
_ZTSN5PList9StructureE
_ZTVN5PList10DictionaryE
_ZTVN5PList3KeyE
_ZTVN5PList3UidE
_ZTVN5PList4DataE
_ZTVN5PList4DateE
_ZTVN5PList4NodeE
_ZTVN5PList4RealE
_ZTVN5PList5ArrayE
_ZTVN5PList6StringE
_ZTVN5PList7BooleanE
_ZTVN5PList7IntegerE
_ZTVN5PList9StructureE

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 272B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 543KB - Virtual size: 543KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/import/libplist-2.0.dll
.dll windows:4 windows x64 arch:x64

9f6d5ff59007f095862c71837f0b3389

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
__setusermatherr
_amsg_exit
_assert
_errno
_initterm
_localtime64
_lock
_mktime64
_strdup
_unlock
abort
atof
calloc
fputc
free
fwrite
getc
islower
isspace
isupper
isxdigit
localeconv
malloc
memcmp
memcpy
memmove
memset
realloc
strcmp
strerror
strftime
strlen
strncmp
strncpy
strstr
strtol
strtoul
tolower
ungetc
vfprintf
wcslen

Exports

Exports

plist_access_path
plist_access_pathv
plist_array_append_item
plist_array_get_item
plist_array_get_item_index
plist_array_get_size
plist_array_insert_item
plist_array_item_remove
plist_array_new_iter
plist_array_next_item
plist_array_remove_item
plist_array_set_item
plist_bool_val_is_true
plist_compare_node_value
plist_copy
plist_data_val_compare
plist_data_val_compare_with_size
plist_data_val_contains
plist_date_val_compare
plist_dict_get_item
plist_dict_get_item_key
plist_dict_get_size
plist_dict_insert_item
plist_dict_item_get_key
plist_dict_merge
plist_dict_new_iter
plist_dict_next_item
plist_dict_remove_item
plist_dict_set_item
plist_free
plist_from_bin
plist_from_json
plist_from_memory
plist_from_xml
plist_get_bool_val
plist_get_data_ptr
plist_get_data_val
plist_get_date_val
plist_get_key_val
plist_get_node_type
plist_get_parent
plist_get_real_val
plist_get_string_ptr
plist_get_string_val
plist_get_uid_val
plist_get_uint_val
plist_is_binary
plist_key_val_compare
plist_key_val_compare_with_size
plist_key_val_contains
plist_mem_free
plist_new_array
plist_new_bool
plist_new_data
plist_new_date
plist_new_dict
plist_new_null
plist_new_real
plist_new_string
plist_new_uid
plist_new_uint
plist_real_val_compare
plist_set_bool_val
plist_set_data_val
plist_set_date_val
plist_set_key_val
plist_set_real_val
plist_set_string_val
plist_set_uid_val
plist_set_uint_val
plist_string_val_compare
plist_string_val_compare_with_size
plist_string_val_contains
plist_to_bin
plist_to_json
plist_to_xml
plist_uid_val_compare
plist_uint_val_compare

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 207KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 310KB - Virtual size: 310KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/import/libre.dll
MagicCFGWin_v1.2/resources/import/libreadline8.dll
.dll windows:4 windows x64 arch:x64

3204f5ba2f9d9d7a6c5decab6893e002

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libtermcap-0

tgetent
tgetflag
tgetnum
tgetstr
tputs

kernel32

DeleteCriticalSection
EnterCriticalSection
GetConsoleMode
GetConsoleScreenBufferInfo
GetFileAttributesA
GetLastError
GetStdHandle
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MoveFileExA
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_close
_errno
_findclose
_fileno
_findfirst64
_findnext64
_fstat64
_fullpath
_get_osfhandle
_getch
_getpid
_initterm
_isatty
_kbhit
_lock
_open
_putenv
_read
_setjmp
_stat64
_stricmp
_strnicmp
_time64
_unlink
_unlock
_write
abort
atoi
calloc
exit
fflush
fputc
free
fwrite
getenv
isalnum
isalpha
islower
isprint
ispunct
isupper
isxdigit
localeconv
longjmp
malloc
memcpy
memmove
memset
putc
qsort
raise
realloc
setlocale
signal
strcat
strchr
strcmp
strcpy
strerror
strlen
strncmp
strncpy
strpbrk
strrchr
strtol
tolower
toupper
vfprintf
wcslen

user32

CloseClipboard
GetClipboardData
OpenClipboard

Exports

Exports

BC
PC
UP
_hs_append_history_line
_hs_history_patsearch
_hs_replace_history_data
_rl_abort_internal
_rl_add_macro_char
_rl_allow_pathname_alphabetic_chars
_rl_any_typein
_rl_arg_callback
_rl_arg_dispatch
_rl_arg_getchar
_rl_arg_init
_rl_arg_overflow
_rl_argcxt
_rl_backspace
_rl_backward_char_internal
_rl_bell_preference
_rl_bind_stty_chars
_rl_block_sigint
_rl_block_sigwinch
_rl_bracketed_text
_rl_callback_data
_rl_callback_data_alloc
_rl_callback_data_dispose
_rl_callback_func
_rl_caught_signal
_rl_char_search_internal
_rl_clean_up_for_exit
_rl_clear_screen
_rl_clear_to_eol
_rl_color_ext_list
_rl_color_indicator
_rl_colored_completion_prefix
_rl_colored_stats
_rl_comment_begin
_rl_complete_mark_directories
_rl_complete_mark_symlink_dirs
_rl_complete_show_all
_rl_complete_show_unmodified
_rl_completion_case_fold
_rl_completion_case_map
_rl_completion_columns
_rl_completion_prefix_display_length
_rl_control_keypad
_rl_convert_meta_chars_to_ascii
_rl_copy_undo_entry
_rl_copy_undo_list
_rl_current_display_line
_rl_digit_p
_rl_digit_value
_rl_disable_meta_key
_rl_disable_tty_signals
_rl_dispatch
_rl_dispatch_callback
_rl_dispatch_subseq
_rl_dispatching_keymap
_rl_doing_an_undo
_rl_echo_control_chars
_rl_echoctl
_rl_echoing_p
_rl_emacs_mode_str
_rl_emacs_modestr_len
_rl_enable_bracketed_paste
_rl_enable_keypad
_rl_enable_meta
_rl_enable_meta_key
_rl_enable_paren_matching
_rl_eof_char
_rl_eof_found
_rl_erase_at_end_of_line
_rl_erase_entire_line
_rl_errmsg
_rl_executing_keyseq_size
_rl_find_completion_word
_rl_find_next_mbchar
_rl_find_prev_mbchar
_rl_fix_last_undo_of_type
_rl_fix_point
_rl_forward_char_internal
_rl_free_history_entry
_rl_free_match_list
_rl_free_saved_history_line
_rl_free_undo_list
_rl_get_screen_size
_rl_history_preserve_point
_rl_history_saved_point
_rl_horizontal_scroll_mode
_rl_in_stream
_rl_init_eightbit
_rl_init_line_state
_rl_init_locale
_rl_init_terminal_io
_rl_input_available
_rl_input_queued
_rl_insert_char
_rl_insert_typein
_rl_internal_char_cleanup
_rl_interrupt_immediately
_rl_intr_char
_rl_iscxt
_rl_isearch_callback
_rl_isearch_cleanup
_rl_isearch_dispatch
_rl_isearch_terminators
_rl_keymap
_rl_keyseq_chain_dispose
_rl_keyseq_cxt_alloc
_rl_keyseq_cxt_dispose
_rl_keyseq_timeout
_rl_kill_kbd_macro
_rl_kscxt
_rl_last_c_pos
_rl_last_command_was_kill
_rl_last_v_pos
_rl_lowercase_p
_rl_make_prompt_for_search
_rl_mark_modified_lines
_rl_match_hidden_files
_rl_menu_complete_prefix_first
_rl_meta_flag
_rl_move_cursor_relative
_rl_move_vert
_rl_next_macro_key
_rl_nscxt
_rl_nsearch_callback
_rl_nsearch_cleanup
_rl_null_function
_rl_optimize_typeahead
_rl_out_stream
_rl_output_character_function
_rl_output_meta_chars
_rl_output_some_chars
_rl_overwrite_char
_rl_overwrite_rubout
_rl_page_completions
_rl_parse_colors
_rl_parsing_conditionalized_out
_rl_peek_macro_key
_rl_pop_executing_macro
_rl_possible_control_prefixes
_rl_possible_meta_prefixes
_rl_prep_non_filename_text
_rl_prev_macro_key
_rl_print_color_indicator
_rl_print_completions_horizontally
_rl_print_prefix_color
_rl_pure_alphabetic
_rl_push_executing_macro
_rl_pushed_input_available
_rl_put_indicator
_rl_qsort_string_compare
_rl_quit_char
_rl_redisplay_after_sigwinch
_rl_release_sigint
_rl_release_sigwinch
_rl_replace_text
_rl_reset_argument
_rl_reset_completion_state
_rl_reset_prompt
_rl_restore_tty_signals
_rl_revert_all_at_newline
_rl_revert_all_lines
_rl_rubout_char
_rl_saved_line_for_history
_rl_savestring
_rl_screenchars
_rl_screenheight
_rl_screenwidth
_rl_scxt_alloc
_rl_scxt_dispose
_rl_search_getchar
_rl_set_cursor
_rl_set_insert_mode
_rl_set_mark_at_pos
_rl_set_normal_color
_rl_set_screen_size
_rl_set_the_line
_rl_show_mode_in_prompt
_rl_sigcleanarg
_rl_sigcleanup
_rl_signal_handler
_rl_sigwinch_resize_terminal
_rl_skip_completed_text
_rl_start_using_history
_rl_strindex
_rl_strip_prompt
_rl_suppress_redisplay
_rl_susp_char
_rl_term_DC
_rl_term_IC
_rl_term_autowrap
_rl_term_backspace
_rl_term_clreol
_rl_term_clrpag
_rl_term_clrscroll
_rl_term_cr
_rl_term_dc
_rl_term_ei
_rl_term_forward_char
_rl_term_goto
_rl_term_ic
_rl_term_im
_rl_term_ip
_rl_term_pc
_rl_term_up
_rl_terminal_can_insert
_rl_to_lower
_rl_to_upper
_rl_top_level
_rl_ttyflush
_rl_ttymsg
_rl_undo_group_level
_rl_unget_char
_rl_untranslate_macro_value
_rl_update_final
_rl_uppercase_p
_rl_utf8locale
_rl_vi_cmd_mode_str
_rl_vi_cmd_modestr_len
_rl_vi_domove_callback
_rl_vi_domove_motion_cleanup
_rl_vi_done_inserting
_rl_vi_initialize_line
_rl_vi_ins_mode_str
_rl_vi_ins_modestr_len
_rl_vi_last_command
_rl_vi_motion_command
_rl_vi_redoing
_rl_vi_reset_last
_rl_vi_set_last
_rl_vi_textmod_command
_rl_vimvcxt
_rl_vis_botlin
_rl_want_redisplay
_rl_with_macro_input
add_history
add_history_time
alloc_history_entry
alphabetic
append_history
clear_history
completion_matches
copy_history_entry
crlf
current_history
ding
emacs_ctlx_keymap
emacs_meta_keymap
emacs_standard_keymap
filename_completion_function
free_history_entry
free_undo_list
funmap
funmap_program_specific_entry_start
get_history_event
history_arg_extract
history_base
history_comment_char
history_expand
history_expansion_char
history_file_version
history_get
history_get_history_state
history_get_time
history_inhibit_expansion_function
history_is_stifled
history_length
history_lines_read_from_file
history_lines_written_to_file
history_list
history_max_entries
history_multiline_entries
history_no_expand_chars
history_offset
history_quotes_inhibit_expansion
history_quoting_state
history_search
history_search_delimiter_chars
history_search_pos
history_search_prefix
history_set_history_state
history_set_pos
history_subst_char
history_tokenize
history_total_bytes
history_truncate_file
history_word_delimiters
history_write_timestamps
max_input_history
maybe_replace_line
maybe_save_line
maybe_unsave_line
next_history
previous_history
read_history
read_history_range
readline
readline_internal_char
readline_internal_setup
readline_internal_teardown
remove_history
remove_history_range
replace_history_entry
rl_abort
rl_add_defun
rl_add_funmap_entry
rl_add_undo
rl_alphabetic
rl_already_prompted
rl_arg_sign
rl_arrow_keys
rl_attempted_completion_function
rl_attempted_completion_over
rl_backward
rl_backward_byte
rl_backward_char
rl_backward_char_search
rl_backward_kill_line
rl_backward_kill_word
rl_backward_menu_complete
rl_backward_word
rl_basic_quote_characters
rl_basic_word_break_characters
rl_beg_of_line
rl_begin_undo_group
rl_beginning_of_history
rl_bind_key
rl_bind_key_if_unbound
rl_bind_key_if_unbound_in_map
rl_bind_key_in_map
rl_bind_keyseq
rl_bind_keyseq_if_unbound
rl_bind_keyseq_if_unbound_in_map
rl_bind_keyseq_in_map
rl_binding_keymap
rl_blink_matching_paren
rl_bracketed_paste_begin
rl_byte_oriented
rl_call_last_kbd_macro
rl_callback_handler_install
rl_callback_handler_remove
rl_callback_read_char
rl_callback_sigcleanup
rl_capitalize_word
rl_catch_signals
rl_catch_sigwinch
rl_change_environment
rl_char_is_quoted_p
rl_char_search
rl_character_len
rl_check_signals
rl_cleanup_after_signal
rl_clear_history
rl_clear_message
rl_clear_pending_input
rl_clear_screen
rl_clear_signals
rl_clear_visible_line
rl_complete
rl_complete_internal
rl_complete_with_tilde_expansion
rl_completer_quote_characters
rl_completer_word_break_characters
rl_completion_append_character
rl_completion_display_matches_hook
rl_completion_entry_function
rl_completion_found_quote
rl_completion_invoking_key
rl_completion_mark_symlink_dirs
rl_completion_matches
rl_completion_mode
rl_completion_query_items
rl_completion_quote_character
rl_completion_suppress_append
rl_completion_suppress_quote
rl_completion_type
rl_completion_word_break_hook
rl_copy_backward_word
rl_copy_forward_word
rl_copy_keymap
rl_copy_region_to_kill
rl_copy_text
rl_crlf
rl_delete
rl_delete_horizontal_space
rl_delete_or_show_completions
rl_delete_text
rl_deprep_term_function
rl_deprep_terminal
rl_digit_argument
rl_ding
rl_directory_completion_hook
rl_directory_rewrite_hook
rl_discard_argument
rl_discard_keymap
rl_dispatching
rl_display_fixed
rl_display_match_list
rl_display_prompt
rl_do_lowercase_version
rl_do_undo
rl_done
rl_downcase_word
rl_dump_functions
rl_dump_macros
rl_dump_variables
rl_echo_signal_char
rl_editing_mode
rl_emacs_editing_mode
rl_empty_keymap
rl_end
rl_end_kbd_macro
rl_end_of_history
rl_end_of_line
rl_end_undo_group
rl_erase_empty_line
rl_event_hook
rl_exchange_point_and_mark
rl_execute_next
rl_executing_key
rl_executing_keymap
rl_executing_keyseq
rl_executing_macro
rl_expand_prompt
rl_explicit_arg
rl_extend_line_buffer
rl_filename_completion_desired
rl_filename_completion_function
rl_filename_dequoting_function
rl_filename_quote_characters
rl_filename_quoting_desired
rl_filename_quoting_function
rl_filename_rewrite_hook
rl_filename_stat_hook
rl_forced_update_display
rl_forward
rl_forward_byte
rl_forward_char
rl_forward_search_history
rl_forward_word
rl_free
rl_free_keymap
rl_free_line_state
rl_free_undo_list
rl_function_dumper
rl_function_of_keyseq
rl_function_of_keyseq_len
rl_funmap_names
rl_generic_bind
rl_get_keymap
rl_get_keymap_by_name
rl_get_keymap_name
rl_get_keymap_name_from_edit_mode
rl_get_next_history
rl_get_previous_history
rl_get_screen_size
rl_get_termcap
rl_getc
rl_getc_function
rl_gnu_readline_p
rl_history_search_backward
rl_history_search_forward
rl_history_substr_search_backward
rl_history_substr_search_forward
rl_ignore_completion_duplicates
rl_ignore_some_completions_function
rl_inhibit_completion
rl_initialize
rl_initialize_funmap
rl_input_available_hook
rl_insert
rl_insert_close
rl_insert_comment
rl_insert_completions
rl_insert_mode
rl_insert_text
rl_instream
rl_invoking_keyseqs
rl_invoking_keyseqs_in_map
rl_key_sequence_length
rl_kill_full_line
rl_kill_line
rl_kill_region
rl_kill_text
rl_kill_word
rl_last_func
rl_library_version
rl_line_buffer
rl_line_buffer_len
rl_linefunc
rl_list_funmap_names
rl_macro_bind
rl_macro_dumper
rl_make_bare_keymap
rl_make_keymap
rl_mark
rl_maybe_replace_line
rl_maybe_save_line

Sections

.text
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/import/libtermcap-0.dll
.dll windows:4 windows x64 arch:x64

cbf821e3b3e9bfc9f635ac5440325527

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_close
_errno
_initterm
_lock
_lseek
_open
_read
_unlock
_write
abort
atoi
calloc
exit
fputc
free
fwrite
getenv
localeconv
malloc
memcpy
memset
realloc
strcat
strcmp
strcpy
strerror
strlen
strncmp
vfprintf
wcslen

Exports

Exports

BC
PC
UP
ospeed
tgetent
tgetflag
tgetnum
tgetstr
tgoto
tparam
tputs
tputs_baud_rate

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 261B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/import/libusb-1.0.dll
.dll windows:6 windows x86 arch:x86

c982b5dd19e7d90ecc86fc2adc271781

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\BH11040\Downloads\libusb-master\libusb-master\Win32\Release\dll\libusb-1.0.pdb

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetCurrentThreadId
DeleteCriticalSection
SleepEx
TlsGetValue
SetWaitableTimer
CreateWaitableTimerW
WaitForMultipleObjects
WaitForSingleObject
CancelWaitableTimer
CreateEventW
SetEvent
CloseHandle
ResetEvent
GetSystemTimeAsFileTime
SleepConditionVariableCS
TryEnterCriticalSection
TlsSetValue
WakeAllConditionVariable
InitializeConditionVariable
TlsAlloc
TlsFree
GetLastError
VerifyVersionInfoA
GetCurrentProcess
GetQueuedCompletionStatus
PostQueuedCompletionStatus
GetSystemDirectoryA
LoadLibraryA
GetVersionExA
QueryPerformanceFrequency
CancelIoEx
GetOverlappedResult
VerSetConditionMask
FormatMessageA
QueryPerformanceCounter
CreateIoCompletionPort
IsWow64Process
GetProcAddress
FreeLibrary
ReadFile
WriteFile
DeviceIoControl
CreateFileA
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
UnhandledExceptionFilter

vcruntime140

__current_exception_context
__current_exception
_except_handler4_common
strrchr
strchr
strstr
__std_type_info_destroy_list
memset
memcpy
memmove

api-ms-win-crt-heap-l1-1-0

realloc
malloc
free
calloc

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
__stdio_common_vsscanf
fputs
__acrt_iob_func

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-string-l1-1-0

isdigit
tolower
toupper
strncmp
strtok
_strdup
_stricmp

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initialize_narrow_environment
_initterm
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_seh_filter_dll
_initialize_onexit_table
_configure_narrow_argv
_beginthreadex

Exports

Exports

libusb_alloc_streams
libusb_alloc_streams
libusb_alloc_transfer
libusb_alloc_transfer
libusb_attach_kernel_driver
libusb_attach_kernel_driver
libusb_bulk_transfer
libusb_bulk_transfer
libusb_cancel_transfer
libusb_cancel_transfer
libusb_claim_interface
libusb_claim_interface
libusb_clear_halt
libusb_clear_halt
libusb_close
libusb_close
libusb_control_transfer
libusb_control_transfer
libusb_detach_kernel_driver
libusb_detach_kernel_driver
libusb_dev_mem_alloc
libusb_dev_mem_alloc
libusb_dev_mem_free
libusb_dev_mem_free
libusb_error_name
libusb_error_name
libusb_event_handler_active
libusb_event_handler_active
libusb_event_handling_ok
libusb_event_handling_ok
libusb_exit
libusb_exit
libusb_free_bos_descriptor
libusb_free_bos_descriptor
libusb_free_config_descriptor
libusb_free_config_descriptor
libusb_free_container_id_descriptor
libusb_free_container_id_descriptor
libusb_free_device_list
libusb_free_device_list
libusb_free_pollfds
libusb_free_pollfds
libusb_free_ss_endpoint_companion_descriptor
libusb_free_ss_endpoint_companion_descriptor
libusb_free_ss_usb_device_capability_descriptor
libusb_free_ss_usb_device_capability_descriptor
libusb_free_streams
libusb_free_streams
libusb_free_transfer
libusb_free_transfer
libusb_free_usb_2_0_extension_descriptor
libusb_free_usb_2_0_extension_descriptor
libusb_get_active_config_descriptor
libusb_get_active_config_descriptor
libusb_get_bos_descriptor
libusb_get_bos_descriptor
libusb_get_bus_number
libusb_get_bus_number
libusb_get_config_descriptor
libusb_get_config_descriptor
libusb_get_config_descriptor_by_value
libusb_get_config_descriptor_by_value
libusb_get_configuration
libusb_get_configuration
libusb_get_container_id_descriptor
libusb_get_container_id_descriptor
libusb_get_device
libusb_get_device
libusb_get_device_address
libusb_get_device_address
libusb_get_device_descriptor
libusb_get_device_descriptor
libusb_get_device_list
libusb_get_device_list
libusb_get_device_speed
libusb_get_device_speed
libusb_get_max_iso_packet_size
libusb_get_max_iso_packet_size
libusb_get_max_packet_size
libusb_get_max_packet_size
libusb_get_next_timeout
libusb_get_next_timeout
libusb_get_parent
libusb_get_parent
libusb_get_pollfds
libusb_get_pollfds
libusb_get_port_number
libusb_get_port_number
libusb_get_port_numbers
libusb_get_port_numbers
libusb_get_port_path
libusb_get_port_path
libusb_get_ss_endpoint_companion_descriptor
libusb_get_ss_endpoint_companion_descriptor
libusb_get_ss_usb_device_capability_descriptor
libusb_get_ss_usb_device_capability_descriptor
libusb_get_string_descriptor_ascii
libusb_get_string_descriptor_ascii
libusb_get_usb_2_0_extension_descriptor
libusb_get_usb_2_0_extension_descriptor
libusb_get_version
libusb_get_version
libusb_handle_events
libusb_handle_events
libusb_handle_events_completed
libusb_handle_events_completed
libusb_handle_events_locked
libusb_handle_events_locked
libusb_handle_events_timeout
libusb_handle_events_timeout
libusb_handle_events_timeout_completed
libusb_handle_events_timeout_completed
libusb_has_capability
libusb_has_capability
libusb_hotplug_deregister_callback
libusb_hotplug_deregister_callback
libusb_hotplug_get_user_data
libusb_hotplug_get_user_data
libusb_hotplug_register_callback
libusb_hotplug_register_callback
libusb_init
libusb_init
libusb_interrupt_event_handler
libusb_interrupt_event_handler
libusb_interrupt_transfer
libusb_interrupt_transfer
libusb_kernel_driver_active
libusb_kernel_driver_active
libusb_lock_event_waiters
libusb_lock_event_waiters
libusb_lock_events
libusb_lock_events
libusb_open
libusb_open
libusb_open_device_with_vid_pid
libusb_open_device_with_vid_pid
libusb_pollfds_handle_timeouts
libusb_pollfds_handle_timeouts
libusb_ref_device
libusb_ref_device
libusb_release_interface
libusb_release_interface
libusb_reset_device
libusb_reset_device
libusb_set_auto_detach_kernel_driver
libusb_set_auto_detach_kernel_driver
libusb_set_configuration
libusb_set_configuration
libusb_set_debug
libusb_set_debug
libusb_set_interface_alt_setting
libusb_set_interface_alt_setting
libusb_set_log_cb
libusb_set_log_cb
libusb_set_option
libusb_set_option
libusb_set_pollfd_notifiers
libusb_set_pollfd_notifiers
libusb_setlocale
libusb_setlocale
libusb_strerror
libusb_strerror
libusb_submit_transfer
libusb_submit_transfer
libusb_transfer_get_stream_id
libusb_transfer_get_stream_id
libusb_transfer_set_stream_id
libusb_transfer_set_stream_id
libusb_try_lock_events
libusb_try_lock_events
libusb_unlock_event_waiters
libusb_unlock_event_waiters
libusb_unlock_events
libusb_unlock_events
libusb_unref_device
libusb_unref_device
libusb_wait_for_event
libusb_wait_for_event
libusb_wrap_sys_device
libusb_wrap_sys_device

Sections

.text
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/import/libusbmuxd-2.0.dll
.dll windows:4 windows x64 arch:x64

d1b6833df95f849899316d84eede3232

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
GetModuleFileNameA
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_initterm
_lock
_stricmp
_strdup
_unlock
abort
calloc
fflush
fputc
free
fwrite
getenv
localeconv
malloc
memcpy
memmove
memset
realloc
strcmp
strerror
strlen
strncmp
strncpy
strrchr
strtol
vfprintf
wcslen

ws2_32

htons

libimobiledevice-glue-1.0

collection_add
collection_count
collection_free
collection_init
collection_remove
mutex_init
mutex_lock
mutex_unlock
socket_close
socket_connect
socket_receive_timeout
socket_send
socket_set_verbose
socket_shutdown
thread_alive
thread_cancel
thread_free
thread_join
thread_new
thread_once

libplist-2.0

plist_array_get_item
plist_array_get_size
plist_copy
plist_dict_get_item
plist_dict_set_item
plist_free
plist_from_xml
plist_get_data_val
plist_get_node_type
plist_get_string_val
plist_get_uint_val
plist_new_data
plist_new_dict
plist_new_string
plist_new_uint
plist_to_xml

Exports

Exports

libusbmuxd_set_debug_level
libusbmuxd_set_use_inotify
usbmuxd_connect
usbmuxd_delete_pair_record
usbmuxd_device_list_free
usbmuxd_disconnect
usbmuxd_events_subscribe
usbmuxd_events_unsubscribe
usbmuxd_get_device
usbmuxd_get_device_by_udid
usbmuxd_get_device_list
usbmuxd_read_buid
usbmuxd_read_pair_record
usbmuxd_recv
usbmuxd_recv_timeout
usbmuxd_save_pair_record
usbmuxd_save_pair_record_with_device_id
usbmuxd_send
usbmuxd_subscribe
usbmuxd_unsubscribe

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 715B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/lib/binary.asset
.zip
694bf246170603c7e282e92c413db1624db98ce8/00/00192e261434480fbb01a93f5d91753635ac8a65
694bf246170603c7e282e92c413db1624db98ce8/00/00c83ecd913aebb7396e2b456ecdcad4774f755f
694bf246170603c7e282e92c413db1624db98ce8/01/012707a2ae34d77a28b16a9e443b780ea4e6b0aa
694bf246170603c7e282e92c413db1624db98ce8/01/01a14737bf725839e60201704f5e0447e23800a6
694bf246170603c7e282e92c413db1624db98ce8/02/02dcc29d169dda989f3402fe07d8b6526d6fb1ac
.xml
694bf246170603c7e282e92c413db1624db98ce8/04/04ec47c2b38b390219c2c7f245f76f2afb948a1e
694bf246170603c7e282e92c413db1624db98ce8/05/051b560a86376b4644f8bc51d4a7cb41207478da
694bf246170603c7e282e92c413db1624db98ce8/05/05575c8bd920efae4ffc54c0e25e9981952c5ec2
.xml
694bf246170603c7e282e92c413db1624db98ce8/05/05fc8de89f9a5c214ca28aedfc4e669f92f91ab1
694bf246170603c7e282e92c413db1624db98ce8/06/064d76faeef55598c754d5f4af2f8903229ee889
.xml
694bf246170603c7e282e92c413db1624db98ce8/06/06af93e6265bf32205de534582c3e8b8b3b5ee9e
694bf246170603c7e282e92c413db1624db98ce8/07/0779e618785c54b9bda0f8b1c5d4ff23a55e3c25
694bf246170603c7e282e92c413db1624db98ce8/08/0819762fcf0d0a24a2b3e09060f2ed8d0deb3d7d
694bf246170603c7e282e92c413db1624db98ce8/08/0821b27bcf03fe372b8865214f3d16ede5682793
694bf246170603c7e282e92c413db1624db98ce8/08/086231126261a6b427a15f60e4672227af60f997
694bf246170603c7e282e92c413db1624db98ce8/08/08d238ae5fd4304b1fcc6da2da20020594f02ccf
694bf246170603c7e282e92c413db1624db98ce8/08/08e3fd569ac05517d81b6e33387869f85cd8ba85
694bf246170603c7e282e92c413db1624db98ce8/0a/0a409993e7f51f8e314dabe7a1b6ef7de00c35fc
694bf246170603c7e282e92c413db1624db98ce8/0b/0b8377be6f4c8ac1540e07ed01fb1195e3d16532
694bf246170603c7e282e92c413db1624db98ce8/0c/0c371b8c5e4b666e1f09053b29c3a2d434b2e2d9
694bf246170603c7e282e92c413db1624db98ce8/0c/0cca876c2f5e7c9ccc839720d27aeb175c892927
694bf246170603c7e282e92c413db1624db98ce8/0c/0cce8dffaf0c108d17d791a193f39ad9da971083
694bf246170603c7e282e92c413db1624db98ce8/0c/0cd3e5016fbbbeaec4e2c54bbc81e0621b95b3c0
694bf246170603c7e282e92c413db1624db98ce8/0d/0d609c54856a9bb2d56729df1d68f2958a88426b
694bf246170603c7e282e92c413db1624db98ce8/0d/0dc926a1810f7aee4e8f38793ed788701f93bf9d
694bf246170603c7e282e92c413db1624db98ce8/0d/0dde3bb0234e9afed7d4bdf77d8b0e3c4018a80f
694bf246170603c7e282e92c413db1624db98ce8/0e/0e63db7790cc396059497c07ae7464743b73246b
694bf246170603c7e282e92c413db1624db98ce8/0f/0fa75546343ba224c9fe55adc73e8fdedc1029c3
694bf246170603c7e282e92c413db1624db98ce8/0f/0fb54654b97099d34461570fab859a2b0570ed1f
694bf246170603c7e282e92c413db1624db98ce8/0f/0fc3ec4d96a074e0d6c4be6fb9ede6a822480cb8
694bf246170603c7e282e92c413db1624db98ce8/10/10d00bb4c9eddd89f462d1d19a1e0b352870d738
694bf246170603c7e282e92c413db1624db98ce8/12/12b144c0bd44f2b3dffd9186d3f9c05b917cee25
694bf246170603c7e282e92c413db1624db98ce8/13/1332ebda79d1d8ee4ac28fce094e6092befd536d
694bf246170603c7e282e92c413db1624db98ce8/13/133bd433062c35f83e4ca74369359cbf1ece4aee
694bf246170603c7e282e92c413db1624db98ce8/16/160600e9c2e408c69e4193d325813a2a885bce2a
694bf246170603c7e282e92c413db1624db98ce8/17/177681416e16bbdeb770a5d660dec884822a6fdf
694bf246170603c7e282e92c413db1624db98ce8/17/17e2176738ede95d1f5051c25b5de49b6fb70ac8
694bf246170603c7e282e92c413db1624db98ce8/18/181c97b0ca7212a1a2910ab5e954686a9062c3b3
694bf246170603c7e282e92c413db1624db98ce8/19/194481668e586f9bda6653d48a65242e5e46a269
694bf246170603c7e282e92c413db1624db98ce8/19/19ae4d4a81f050ead77d83c8a8ecb3917bd297a6
694bf246170603c7e282e92c413db1624db98ce8/1a/1a300d26e5c2e033afdee82564c980fd161c17e8
.xml
694bf246170603c7e282e92c413db1624db98ce8/1a/1a826a578215c165cd5cf65e1018351831b2f217
.xml
694bf246170603c7e282e92c413db1624db98ce8/1b/1b12a7e71d4dc05c1856ff2267a93f7a6fa54052
694bf246170603c7e282e92c413db1624db98ce8/1b/1b3249e938608c586495b083df861b4749fb6f48
694bf246170603c7e282e92c413db1624db98ce8/1b/1b33ff525de360dbce0ffebe8d7ce895894fb6b9
694bf246170603c7e282e92c413db1624db98ce8/1b/1b406dad529607106aa305e60026f73bb3b71ee6
694bf246170603c7e282e92c413db1624db98ce8/1c/1cd04991266c8a1862fe36ce67916a003b383578
694bf246170603c7e282e92c413db1624db98ce8/1d/1d520da7e803646c1676cd7783fb1a0a6a0402ed
694bf246170603c7e282e92c413db1624db98ce8/1d/1dd68f1722b3b909800df3c64c3524604dbd37b1
694bf246170603c7e282e92c413db1624db98ce8/1e/1e6c0783f9b33d00b152067a0661c8fc8841073f
694bf246170603c7e282e92c413db1624db98ce8/1e/1eb01aeda8d27551fb108d07883cb1da3507d011
694bf246170603c7e282e92c413db1624db98ce8/1f/1f13f6ad95698021c6f9890f4a078fe66e66efa8
694bf246170603c7e282e92c413db1624db98ce8/1f/1f7df6d4313f2c8f41c0917ebe8ccf4c9fd0ec93
694bf246170603c7e282e92c413db1624db98ce8/20/201430101c986d0bdf304c701e60247708525b81
694bf246170603c7e282e92c413db1624db98ce8/20/2041457d5fe04d39d0ab481178355df6781e6858
694bf246170603c7e282e92c413db1624db98ce8/20/207324af12caddd8e1c81b005b3fd9ad5c3460a9
694bf246170603c7e282e92c413db1624db98ce8/21/21ce38fca335b0f12bcef301ef13262b93ca4985
694bf246170603c7e282e92c413db1624db98ce8/22/22b5fb3c3890cfc5cee685c923922e8ebe8ee9fd
694bf246170603c7e282e92c413db1624db98ce8/22/22dfac52ffa60136082e72a7eb72d8ceee864f5d
694bf246170603c7e282e92c413db1624db98ce8/24/2429b1ea6b011346f4f6768d3c9618fa9ec134c0
694bf246170603c7e282e92c413db1624db98ce8/24/244b60440e1b0101726f231c4cc6bc183ac2ca45
694bf246170603c7e282e92c413db1624db98ce8/25/25cc406fbdae3703d891c2fa57d9d39930e0956e
694bf246170603c7e282e92c413db1624db98ce8/27/270737c2c0948667062d0bbc77fb181464a8739b
694bf246170603c7e282e92c413db1624db98ce8/2a/2ad5c7851c4969c644227015523ea6bf4824e0f1
694bf246170603c7e282e92c413db1624db98ce8/2d/2d7e06ba7194fdfcd2dd45548b39b1e477c9fd8d
694bf246170603c7e282e92c413db1624db98ce8/2f/2f771621fd3c627d0db75fe173f3dae8ce50e98b
694bf246170603c7e282e92c413db1624db98ce8/30/303e04f2a5b473c5ca2127d65365db4c3e055c05
694bf246170603c7e282e92c413db1624db98ce8/31/3168a8179b3c631f3ecfc9b4c9c5383b0f79970d
694bf246170603c7e282e92c413db1624db98ce8/31/31ac358e17c1058926d60cf227da807a93247ffd
694bf246170603c7e282e92c413db1624db98ce8/31/31bb7ba8914766d4ba40d6dfb6113c8b614be442
694bf246170603c7e282e92c413db1624db98ce8/31/31d0213710559efd6181d4f3ec65a409d4e2fbef
694bf246170603c7e282e92c413db1624db98ce8/32/32238ab4be7087bc3187314996f813d3fd9570bf
694bf246170603c7e282e92c413db1624db98ce8/32/329f7b35aaad4b27f692ac931af3ae0670a22b11
694bf246170603c7e282e92c413db1624db98ce8/32/32a0d4a3c258c40c8dbb8f1a29a664d9c4a7923a
694bf246170603c7e282e92c413db1624db98ce8/34/3416265872fa28bdbd4dd4c8217da2f565c92d7a
694bf246170603c7e282e92c413db1624db98ce8/34/344d0a2f96e5111ba7326a3d1e5509eb033ff89e
694bf246170603c7e282e92c413db1624db98ce8/34/34e511b6b7be39b3738e1b8776cc2dc86f436e15
694bf246170603c7e282e92c413db1624db98ce8/36/3633b8a1ece817f768a8acba5ebc67ee195e4724
694bf246170603c7e282e92c413db1624db98ce8/36/365bbbdbbcf7c93cd4437c7965aa6d1e3092109a
694bf246170603c7e282e92c413db1624db98ce8/36/369b2f1b3f2893a06bed67ae75a13f5ab620f93a
694bf246170603c7e282e92c413db1624db98ce8/36/36eb88809db6179b2fda77099cefce12792f0889
694bf246170603c7e282e92c413db1624db98ce8/37/37630d9f318e052b362c7e381f817965b4059f6d
694bf246170603c7e282e92c413db1624db98ce8/37/3764617dcd4a31b4236c3a36d9cb341a836c313a
694bf246170603c7e282e92c413db1624db98ce8/37/377838971dc4e99e8f1c1eccb12017e74aeb2701
694bf246170603c7e282e92c413db1624db98ce8/37/37f5f2cb0563afa31011b7da26a041a246ab44ad
694bf246170603c7e282e92c413db1624db98ce8/38/3859b8641e54ab9fea92220887b7d4368d7937f5
694bf246170603c7e282e92c413db1624db98ce8/3a/3a73558678a31bd57a5ada0f3dafaa0d3b33570d
694bf246170603c7e282e92c413db1624db98ce8/3a/3aef6f188cf22d663030b159b271f1f2591cf56a
694bf246170603c7e282e92c413db1624db98ce8/3a/3afe56e2c5aa8c090ded49445d95e8769ef34899
694bf246170603c7e282e92c413db1624db98ce8/3b/3b08c7e36ecd1ec0ac7d1c2782426aabc5addeb1
694bf246170603c7e282e92c413db1624db98ce8/3c/3c3b08edb593b2b4ec66ae993792462cc1d7ba92
694bf246170603c7e282e92c413db1624db98ce8/3c/3c50845925e1b576368d250002b826934aa29298
694bf246170603c7e282e92c413db1624db98ce8/3c/3cd6fce85623f689126ee032a86438e2cb48d88d
694bf246170603c7e282e92c413db1624db98ce8/3c/3cf0bef482d61e8cc7f40d2b857b6f2b032bbcbd
.jpg
694bf246170603c7e282e92c413db1624db98ce8/3d/3d0d7e5fb2ce288813306e4d4636395e047a3d28
694bf246170603c7e282e92c413db1624db98ce8/3f/3f17e7f8610b161532a530088551d3e48b7c86f1
694bf246170603c7e282e92c413db1624db98ce8/3f/3f6e24db496766e769b408c2e4a4aed3a31427d6
694bf246170603c7e282e92c413db1624db98ce8/3f/3fd9f141eddc3e39ab3a70755c90798a468cf3e6
694bf246170603c7e282e92c413db1624db98ce8/40/4096c9ec676f2847dc283405900e284a7c815836
694bf246170603c7e282e92c413db1624db98ce8/41/41adcb19976915cfd606a29fd5a5b05882dd72ac
694bf246170603c7e282e92c413db1624db98ce8/41/41efccad121630df0dd1c8b7448a01bb3788b808
694bf246170603c7e282e92c413db1624db98ce8/42/422501fcb89eba568407a1bb8208114380dd6018
694bf246170603c7e282e92c413db1624db98ce8/42/424be2ef4d28fe1ea3f66c33c7f7ae63350e69a3
694bf246170603c7e282e92c413db1624db98ce8/42/4281a464d99207335c3f8ce5e5733c70e749b5d7
694bf246170603c7e282e92c413db1624db98ce8/45/452b5f5e34b177f7c12460a198c87fb96d77a3aa
694bf246170603c7e282e92c413db1624db98ce8/45/45873380d5dd41223b6716dd27bfaa7e9fbba5fa
694bf246170603c7e282e92c413db1624db98ce8/45/458912dab03c912aa953a14b0c5ded4bb72f031a
694bf246170603c7e282e92c413db1624db98ce8/45/459bdb3dff670e6f135bc9d77182ecd8d93e5894
694bf246170603c7e282e92c413db1624db98ce8/47/47001e38c986d26ed52f64f1a3aeda98813e561f
694bf246170603c7e282e92c413db1624db98ce8/48/4800b8726fbd1a324c181bd735d6457f3eced7cc
694bf246170603c7e282e92c413db1624db98ce8/49/49bc04a8c263dbf1642a15cb36c7febff371145d
694bf246170603c7e282e92c413db1624db98ce8/4a/4a9df39e2b3997cc4dc535131fe3eead30ba4d7a
694bf246170603c7e282e92c413db1624db98ce8/4a/4ab460371bb15855aa6dec30242079198c6573cf
.xml
694bf246170603c7e282e92c413db1624db98ce8/4b/4bf2c57686ace66ebb9a7edafc27a5f59631b5f4
694bf246170603c7e282e92c413db1624db98ce8/4d/4d07bdc66cc103594dbc3a74e3ef41f20a6d6e2e
694bf246170603c7e282e92c413db1624db98ce8/51/51a4616e576dd33cd2abadfea874eb8ff246bf0e
694bf246170603c7e282e92c413db1624db98ce8/51/51e8ed8027a0aee95ef0ec71051840c3691d3971
694bf246170603c7e282e92c413db1624db98ce8/51/51efed9e60d37b1f6a2985e6d7cf22148f453214
694bf246170603c7e282e92c413db1624db98ce8/52/5218889b58ef5c7f6421cf24f5a498de2e00641c
694bf246170603c7e282e92c413db1624db98ce8/52/5286922a7ade1146d6a1a9182ad23bb9db18d915
694bf246170603c7e282e92c413db1624db98ce8/52/52c03edfc4da9eba398684afb69ba503a2709667
694bf246170603c7e282e92c413db1624db98ce8/55/550a09c4f8c4d89df203ab615ffc979d3c56f613
694bf246170603c7e282e92c413db1624db98ce8/55/55e0990a7646a8c9effb04402b642f68a37c793c
694bf246170603c7e282e92c413db1624db98ce8/57/576f5e32a01b05bf1a0c00633109453086b28fae
694bf246170603c7e282e92c413db1624db98ce8/57/57abe97189047a814cc335cde2d720f619672c74
694bf246170603c7e282e92c413db1624db98ce8/57/57fe08c947196ecb72ed35662fefe6755b9e0f79
694bf246170603c7e282e92c413db1624db98ce8/58/5852108669e3d13ab0f42ccbea424b6a55aee97b
694bf246170603c7e282e92c413db1624db98ce8/58/58c8e8cbce6dacf2a6ba27708f773f8b842a8c58
694bf246170603c7e282e92c413db1624db98ce8/59/59445c4fae86445d6326f08d3c3bcf7b60ac54d3
694bf246170603c7e282e92c413db1624db98ce8/5b/5b216f258ad3983f508eccbf2d10a38320a2b21f
694bf246170603c7e282e92c413db1624db98ce8/5b/5b4d0b44b5990f62b9f4d34ad8dc382bf0b01094
694bf246170603c7e282e92c413db1624db98ce8/5b/5bd5d2aa033ea49a9c8e458c1145984f2fab9b13
694bf246170603c7e282e92c413db1624db98ce8/5b/5bf4291fc2382f692c9708c07a78325e685a04ec
694bf246170603c7e282e92c413db1624db98ce8/5c/5cebe8d5f0d4c62f08b22dd14225a956bf2819b8
694bf246170603c7e282e92c413db1624db98ce8/5c/5cfa9db121949c3bf3b889caefc8d5ba766dbd09
694bf246170603c7e282e92c413db1624db98ce8/5e/5ea97adedc321311120536e9e7ad59c425960b8f
694bf246170603c7e282e92c413db1624db98ce8/5f/5f0131180c0954908d769a723c720d59f9d7ca22
694bf246170603c7e282e92c413db1624db98ce8/5f/5f6165d4b21efe1b9b4b5eca6133c619225fff4b
694bf246170603c7e282e92c413db1624db98ce8/5f/5fe47b24af1681316db428b3b4e8108211665830
694bf246170603c7e282e92c413db1624db98ce8/60/601120828e7c6f0a10396c59474e64f7c1e19464
694bf246170603c7e282e92c413db1624db98ce8/60/60676dc938a4213796caffcb1b488a4ab84a1cc9
694bf246170603c7e282e92c413db1624db98ce8/60/60a812d8a963c4f1854eb91631961bcd40f15ac5
694bf246170603c7e282e92c413db1624db98ce8/61/6181361f704fa3c29a66609788605b40d74a475e
694bf246170603c7e282e92c413db1624db98ce8/61/61c8b15a0110ab17d1b7467c3a042eb1458426c6
694bf246170603c7e282e92c413db1624db98ce8/61/61cd6b3cb447bdbe009dbd8ed1ea214a1d677dd3
694bf246170603c7e282e92c413db1624db98ce8/61/61e1e4600e3997adbadda920ade1321e753b2b17
694bf246170603c7e282e92c413db1624db98ce8/62/6241b2b9da35bc7ac51266cce64774fc975ccf00
694bf246170603c7e282e92c413db1624db98ce8/63/63e928471d296cb47a6ffb5343b40b90a0e5d92b
694bf246170603c7e282e92c413db1624db98ce8/64/6485a31d8d5e6a388fa86cc7b525a83469f4b4c6
694bf246170603c7e282e92c413db1624db98ce8/64/64d0019cb3d46bfc8cce545a8ba54b93e7ea9347
694bf246170603c7e282e92c413db1624db98ce8/65/65991b9e44ff3e463c4688784f6ca84ba9df2d87
694bf246170603c7e282e92c413db1624db98ce8/65/65b0fb695b174bb15f6263d2641366d9b6a07d67
694bf246170603c7e282e92c413db1624db98ce8/66/662bc19b13aecef58a7e855d0316e4cf61e2642b
694bf246170603c7e282e92c413db1624db98ce8/67/670ec4af601a1298d544d6c8622d9e21fbdd9ecf
694bf246170603c7e282e92c413db1624db98ce8/67/6767f73a4efbd71c9ee4635119f9bf2f530a6ddc
694bf246170603c7e282e92c413db1624db98ce8/67/67a4620e4a8c7eaed20a754e585564d697fbb564
694bf246170603c7e282e92c413db1624db98ce8/68/6801fb197368e631b966316ca9d1d7b0f502d24d
694bf246170603c7e282e92c413db1624db98ce8/68/6858af433a88e16dfce82a35ef44acd8cb0276fd
694bf246170603c7e282e92c413db1624db98ce8/68/6859eb8cb63f05c678daac81bb674087c884151a
694bf246170603c7e282e92c413db1624db98ce8/6a/6a4da7e4783929702498d8857ac4e810504160ba
694bf246170603c7e282e92c413db1624db98ce8/6b/6b97989189901ceaa4e5be9b7f05fb584120e27b
694bf246170603c7e282e92c413db1624db98ce8/6f/6f6ce3c4ac1f91aff4cf04a21024988d5d07764b
694bf246170603c7e282e92c413db1624db98ce8/71/719fb93fe54d18520a17b893c649c14254365265
694bf246170603c7e282e92c413db1624db98ce8/73/733048ee57fcc78fef55516c3de3797ca62fee59
694bf246170603c7e282e92c413db1624db98ce8/75/7548e0cb507ab2e3084e352f76cc6b2065d77b15
694bf246170603c7e282e92c413db1624db98ce8/75/75b49910274fdbc2537c0acb9d179f595e620140
694bf246170603c7e282e92c413db1624db98ce8/76/76fb3c685d422334fd25d9777d64db74af7cb25a
694bf246170603c7e282e92c413db1624db98ce8/77/772ee732af8cf63eb57d3dc8bd3cdff323f70515
694bf246170603c7e282e92c413db1624db98ce8/77/77433305bb64f59a4b9d4176fe8e61240b395622
694bf246170603c7e282e92c413db1624db98ce8/77/7786c7fb0355fc6684fc4d8745e1bd67fdca3197
694bf246170603c7e282e92c413db1624db98ce8/77/77e6b5a266733afee2b161f9ec40f2164639ab21
694bf246170603c7e282e92c413db1624db98ce8/78/7829f98095a51d571c75f14911471e0138e46e87
694bf246170603c7e282e92c413db1624db98ce8/7a/7aae9c58fdd11cdb19d8f2ae03c23c2fc0414002
694bf246170603c7e282e92c413db1624db98ce8/7c/7c3a45598f83e920d4dbe7465f77dcc04823666d
694bf246170603c7e282e92c413db1624db98ce8/7d/7d01c88595369be97f7fc73b6d071ea09bb1d9fd
694bf246170603c7e282e92c413db1624db98ce8/7d/7d8733b674da3d5e8009bc1000ec7560aee25563
.xml
694bf246170603c7e282e92c413db1624db98ce8/7d/7d994fc459fb4e19c8193a753c690a2cc84a3328
694bf246170603c7e282e92c413db1624db98ce8/7d/7ddb1ea8c09e5baae5e2d2ecac604a4e4e3087de
.jpg
694bf246170603c7e282e92c413db1624db98ce8/7e/7e23b24013427c74d958a3b21d12455a8b099a26
694bf246170603c7e282e92c413db1624db98ce8/7e/7e9faeaa271021ac54a4f90cbaf047601854a20c
694bf246170603c7e282e92c413db1624db98ce8/7e/7eabc42b6d37c924def32ec50377d6d7b046c2ce
694bf246170603c7e282e92c413db1624db98ce8/7f/7f1a0ad01b8bc0045adfccf2d6c52fdc8a4fc7e6
694bf246170603c7e282e92c413db1624db98ce8/7f/7ff7fe545440ab72b1570232d0ed81b84a5334dd
694bf246170603c7e282e92c413db1624db98ce8/80/8059d41620e0b064ec216d456c7fb5a02b701058
694bf246170603c7e282e92c413db1624db98ce8/80/80c42a429a2e9877c4972b1e1ae246efc55f9c3c
694bf246170603c7e282e92c413db1624db98ce8/80/80fa782261261e54bb73c0253e5b6beefb6a2f39
694bf246170603c7e282e92c413db1624db98ce8/81/815ab78cab21a85cc9ee91940d27641469b957e1
694bf246170603c7e282e92c413db1624db98ce8/81/817b64398cb5abb7be3b3a2479369ecc6a16d584
694bf246170603c7e282e92c413db1624db98ce8/82/820031f5a3c0ae4db6bf917c4b236af543ae2478
694bf246170603c7e282e92c413db1624db98ce8/82/8218978e4ab0a48035bb92653145a6be872ea858
694bf246170603c7e282e92c413db1624db98ce8/82/82481159b4621324353ba8a47a3ef4824aa9d4c7
694bf246170603c7e282e92c413db1624db98ce8/82/824f1763dbc9413c294747d1afd93edb1fabe4f1
694bf246170603c7e282e92c413db1624db98ce8/85/8576c5c96c93cf158f00324c390df3906340e5a2
694bf246170603c7e282e92c413db1624db98ce8/85/85916f281ac8cf59fe449628c6849f417acc26d1
694bf246170603c7e282e92c413db1624db98ce8/86/8622ea6ba8f344d797775fa40cc982963a195bd1
694bf246170603c7e282e92c413db1624db98ce8/86/86736007d0166a18c646c567279b75093fc066fe
694bf246170603c7e282e92c413db1624db98ce8/87/876a63abe36aefe5888afe97a3d3fa5ff4786031
.xml
694bf246170603c7e282e92c413db1624db98ce8/87/879cd013041ae9442a59dce4bf02da7de58b79be
694bf246170603c7e282e92c413db1624db98ce8/88/888d50333ac1c9ca4a5161df801caa9fc1821e9c
694bf246170603c7e282e92c413db1624db98ce8/88/8896671f94fe1f6dc638d66154c4799ebd07f7d3
694bf246170603c7e282e92c413db1624db98ce8/89/8951606ce505834a749a3e7cf9e74e283dd1403d
694bf246170603c7e282e92c413db1624db98ce8/8a/8ae704e3599076771570a8df9e64a4a0a35f04a2
694bf246170603c7e282e92c413db1624db98ce8/8b/8b11cec6faa5c449bfeba31d7610f57d5769a4b5
694bf246170603c7e282e92c413db1624db98ce8/8b/8b35dc81e93e59bc8bd6b405c8a1e4206d761c7a
694bf246170603c7e282e92c413db1624db98ce8/8c/8cc9eee317367127c69e69066c4f704a09472566
694bf246170603c7e282e92c413db1624db98ce8/8d/8d0167b67f664a3816b4c00115c2dfa6a8f81388
694bf246170603c7e282e92c413db1624db98ce8/8d/8d12d5c0ac27fc05078e2a97e9d355b48b4def1c
694bf246170603c7e282e92c413db1624db98ce8/8d/8da7136714ef972e7fe6fa9400675704748b87cd
694bf246170603c7e282e92c413db1624db98ce8/8e/8e2d7cdeb041eb6ed0ab6e9227f4380f84169aa8
694bf246170603c7e282e92c413db1624db98ce8/8e/8e7f26685d92296da2100cfaf98173f45da1ce88
694bf246170603c7e282e92c413db1624db98ce8/8e/8e8247ac6b56b9e446994efc2be4cecb4750fe60
694bf246170603c7e282e92c413db1624db98ce8/8f/8f7dfae98c6fa5b4051ca25a4f5ab212c1c17d55
694bf246170603c7e282e92c413db1624db98ce8/91/9143d986a77ab8cf5878e4e9ac80627477eb6674
694bf246170603c7e282e92c413db1624db98ce8/91/91612364d5d8a590bfa9280bc042418a22f2602c
694bf246170603c7e282e92c413db1624db98ce8/92/92084127b44bd82b8ccbfe259bfaadf60ae8b98a
694bf246170603c7e282e92c413db1624db98ce8/92/923565845ab590c7d7fa8b6547b93748887497ab
694bf246170603c7e282e92c413db1624db98ce8/93/9329979c8298f9cd3fb110fa387570a8b957e912
694bf246170603c7e282e92c413db1624db98ce8/93/93434a9c228ac04012af11e81478ff1f3fc5d928
694bf246170603c7e282e92c413db1624db98ce8/94/941622ed3bc59ca471de82d9563afa8498c1623b
694bf246170603c7e282e92c413db1624db98ce8/94/943624fd13e27b800cc6d9ce1100c22356ee365c
694bf246170603c7e282e92c413db1624db98ce8/94/949780f1d4a8fd3bd34c2955f60b0113b66fb936
694bf246170603c7e282e92c413db1624db98ce8/95/95636e7caa6431d3ecd55869e4ab1a79c3885ff7
694bf246170603c7e282e92c413db1624db98ce8/95/95f3e262a11d9bb19cdbe72b49261a2b34f91cec
694bf246170603c7e282e92c413db1624db98ce8/96/9641efb2066d97a98d20aa0c24edd4b39c7746fe
694bf246170603c7e282e92c413db1624db98ce8/99/992df473bbb9e132f4b3b6e4d33f72171e97bc7a
694bf246170603c7e282e92c413db1624db98ce8/99/9949a47f42b3816899d85cd0722804010ff92953
694bf246170603c7e282e92c413db1624db98ce8/99/994c115108d755f66e6c0637964244fe03282535
694bf246170603c7e282e92c413db1624db98ce8/99/9982eed4b82d8a6a496188d3a68c8360e6ee1e83
694bf246170603c7e282e92c413db1624db98ce8/99/998333c71f4dfc7a9de5e32ed6706c9217c8ffec
694bf246170603c7e282e92c413db1624db98ce8/99/99d3387146335be6c7a02931fea9c405e7802c10
694bf246170603c7e282e92c413db1624db98ce8/99/99eb1df1e09c3dfb1cef047cc11b6ab13fdc4a1e
694bf246170603c7e282e92c413db1624db98ce8/9a/9aba54b7bd7f7d2586eedcc8e7ab266cab47871b
694bf246170603c7e282e92c413db1624db98ce8/9b/9b03783a1bc15dd05c434aa7ad213eb68561c745
694bf246170603c7e282e92c413db1624db98ce8/9b/9b38460e6a0a59da85829598a94054399f98644d
694bf246170603c7e282e92c413db1624db98ce8/9c/9c46fd950cb447d02fb55f6bfe00251032bda8b4
694bf246170603c7e282e92c413db1624db98ce8/9c/9ca7522202fa0807198f403cc2133fb956d3c144
694bf246170603c7e282e92c413db1624db98ce8/9d/9d9cb8cfe3b68a9e5cabc5300688cfdeba80e61b
.xml
694bf246170603c7e282e92c413db1624db98ce8/9e/9e0c53fdfc31ce243771e0739e3536f45d969835
.xml
694bf246170603c7e282e92c413db1624db98ce8/9e/9e1b3356b10ac38436206af45e16ee1e33469647
694bf246170603c7e282e92c413db1624db98ce8/9e/9e589bea48c0cd3b1c324b5d88eb070d23ed805b
694bf246170603c7e282e92c413db1624db98ce8/9e/9e7b521f0e73ad31dddc91aedaeb775a2c34fccb
694bf246170603c7e282e92c413db1624db98ce8/9e/9ec3b0886ef6ebd8e58dab34c4c69ea37fc92d81
694bf246170603c7e282e92c413db1624db98ce8/9f/9f6ddefc786d0411f8b9b3bd9cb1a5eb80879100
694bf246170603c7e282e92c413db1624db98ce8/Info.plist
.xml
694bf246170603c7e282e92c413db1624db98ce8/Manifest.db
694bf246170603c7e282e92c413db1624db98ce8/Manifest.plist
694bf246170603c7e282e92c413db1624db98ce8/Status.plist
694bf246170603c7e282e92c413db1624db98ce8/a1/a11ba8cfd5ded9a89dc8042de64a66a5f0eeb844
694bf246170603c7e282e92c413db1624db98ce8/a3/a316dfd1b45d929e31ec7d0525f33d2d612ba6a6
694bf246170603c7e282e92c413db1624db98ce8/a4/a412432199c1b8ef42519f028765f30c0fdfc052
694bf246170603c7e282e92c413db1624db98ce8/a4/a4cd22be5e832b39bafa91dd5ad8419d0fcd3909
694bf246170603c7e282e92c413db1624db98ce8/a5/a521a570058bcb5a55e1f2a81ff9f9a729e4c791
694bf246170603c7e282e92c413db1624db98ce8/a5/a5f5f228b6c7b5f4df3e45d7c8a489597e4a0c98
694bf246170603c7e282e92c413db1624db98ce8/a6/a61b46d470e191a3c42b2ccb8b0f9c0096c71149
694bf246170603c7e282e92c413db1624db98ce8/a6/a63aedeba3fa356fb3db0f11349684be350be866
694bf246170603c7e282e92c413db1624db98ce8/a6/a67892d2f91b6fa007fd9e019b0970ceaf8b786e
694bf246170603c7e282e92c413db1624db98ce8/a6/a690d7769cce8904ca2b67320b107c8fe5f79412
694bf246170603c7e282e92c413db1624db98ce8/a7/a7abbed99e22a470b39601df542916a486fa9011
694bf246170603c7e282e92c413db1624db98ce8/a8/a84423580d6534f19a24e1d2fbd3e2731a38e73c
694bf246170603c7e282e92c413db1624db98ce8/a9/a97a2c4bc339ad752495af3f4de030eac5374899
694bf246170603c7e282e92c413db1624db98ce8/aa/aa4bcc99697f859cbd3d9d35d46db9bbe00114de
694bf246170603c7e282e92c413db1624db98ce8/ab/ab00c059a18c7a2d4c6cd134e931d3a9401fc224
694bf246170603c7e282e92c413db1624db98ce8/ab/abc118f47bba59bcfa980ec5ca7ced8c929a828d
694bf246170603c7e282e92c413db1624db98ce8/ab/abce6d8b51731679cfad2bb5eb57dbd58daacb37
694bf246170603c7e282e92c413db1624db98ce8/ad/ad23c12d94cfbb01b49813750575a57082668774
694bf246170603c7e282e92c413db1624db98ce8/ad/ade0340f576ee14793c607073bd7e8e409af07a8
694bf246170603c7e282e92c413db1624db98ce8/ae/ae8a255e85008c0fb31f9d1882ddf392e1aa213f
694bf246170603c7e282e92c413db1624db98ce8/ae/aeacdfd9fadbbe56548a40e02b7685d324050e54
694bf246170603c7e282e92c413db1624db98ce8/af/af0a461cff85322d0c029fedc42e7841ecbd5b9f
694bf246170603c7e282e92c413db1624db98ce8/af/af6012f88d37190a113625dbf57f3792c593f25b
694bf246170603c7e282e92c413db1624db98ce8/b1/b1b66ddbcb5aa0fb5c372881028f7e5a55e8575c
694bf246170603c7e282e92c413db1624db98ce8/b1/b1c6edac327a824fba38d06ffe6a2b78e251b25c
694bf246170603c7e282e92c413db1624db98ce8/b2/b2360ab334042795fbf866b746141b8aa6640fb9
694bf246170603c7e282e92c413db1624db98ce8/b2/b23d75238daa9f2512d4775228deb72114f1dee1
694bf246170603c7e282e92c413db1624db98ce8/b2/b2998988ede72dc5ec6d24d258f060d2b2e961b1
694bf246170603c7e282e92c413db1624db98ce8/b2/b29d1ef9bb87793fc4702d31d9c4d70588573259
694bf246170603c7e282e92c413db1624db98ce8/b3/b35705a22c096437402eb82044684380458bdabf
694bf246170603c7e282e92c413db1624db98ce8/b4/b4fdfbd73c769fb278636e38dc253fb8cadcdc24
694bf246170603c7e282e92c413db1624db98ce8/b6/b6d3186c44a35e36b41b6c83b9475dbcf15a0d16
694bf246170603c7e282e92c413db1624db98ce8/b7/b707ca91cd1679111a9a33c72945bc2f94138bc8
694bf246170603c7e282e92c413db1624db98ce8/b7/b7cfbc5bf2026792552cc05b01516ac85eedaedd
694bf246170603c7e282e92c413db1624db98ce8/b7/b7e037c950d659a9ea2bffd467166bb4537823f6
694bf246170603c7e282e92c413db1624db98ce8/b8/b879b2dafd1f7a0d3fe071449a1c464d3751d935
694bf246170603c7e282e92c413db1624db98ce8/b9/b94baa5d79987fc98f7f1cc24e05f8e997b44f89
694bf246170603c7e282e92c413db1624db98ce8/b9/b9565031e41b4e922e997d3eed2d4b55af12541d
694bf246170603c7e282e92c413db1624db98ce8/b9/b95932248c2d15d28246235296606e95ea64b3d5
694bf246170603c7e282e92c413db1624db98ce8/b9/b9bbf00a7585f7118bb06be0ce521fe3be3d7a76
694bf246170603c7e282e92c413db1624db98ce8/ba/ba94ab4b9e1138a734e57770c613dbc4f694913f
694bf246170603c7e282e92c413db1624db98ce8/bb/bb602935c9240f3d304704ddd5f0d6d921ad5862
694bf246170603c7e282e92c413db1624db98ce8/bc/bc77c67ae3b73c3a4ac387ef09421d63d1c7eea1
694bf246170603c7e282e92c413db1624db98ce8/bd/bdae50d56426c359a24916e5d78e5b3282fd82d1
694bf246170603c7e282e92c413db1624db98ce8/be/be4054f6cf874b7c4b28866855cbf5aaceaec29e
694bf246170603c7e282e92c413db1624db98ce8/be/bee9ea849cece62d43d2588ad8ba38d35012fe4b
.xml
694bf246170603c7e282e92c413db1624db98ce8/bf/bf01197b61bd101045f3421ec28b29e8cc0d3930
694bf246170603c7e282e92c413db1624db98ce8/bf/bfecaa9c467e3acb085a5b312bd27bdd5cd7579a
694bf246170603c7e282e92c413db1624db98ce8/c2/c239b2d95665554f985418f13379bec0327fe47f
694bf246170603c7e282e92c413db1624db98ce8/c2/c29245fa132c76ffddfaef756f2f0f634c23906e
694bf246170603c7e282e92c413db1624db98ce8/c2/c2983c837cfd247bbacc8df325f866e098c9dfd4
694bf246170603c7e282e92c413db1624db98ce8/c2/c2a565c483bacc1f9aedd4f5ac49923091f51d8c
694bf246170603c7e282e92c413db1624db98ce8/c3/c351e3034ca117560d7c5731c2a8d6841dc8e034
694bf246170603c7e282e92c413db1624db98ce8/c4/c40fa4a95b7794542eff093c45252d8c7b7ffdc2
694bf246170603c7e282e92c413db1624db98ce8/c5/c58045292621673cabe64aa6050921a2f4807851
694bf246170603c7e282e92c413db1624db98ce8/c6/c6fa9e5eda5f97348ced36086f02fcb078649f3f
694bf246170603c7e282e92c413db1624db98ce8/c8/c857040ce4ce8654af495a2f04da92a0a5111fac
694bf246170603c7e282e92c413db1624db98ce8/c8/c880fe366aeea7a9c7266daba8d397c993625d5a
694bf246170603c7e282e92c413db1624db98ce8/c9/c93097dbd80558e425e8ae45324e591cd5c47cde
694bf246170603c7e282e92c413db1624db98ce8/c9/c9317c798e9f6a1ca8f326e57e266fba45cdc993
694bf246170603c7e282e92c413db1624db98ce8/c9/c99e18541d6d77b3b04dd3001315de83f0405dcc
694bf246170603c7e282e92c413db1624db98ce8/ca/ca3bc056d4da0bbf88b5fb3be254f3b7147e639c
694bf246170603c7e282e92c413db1624db98ce8/ca/ca5806ee855e6ef59e9d103a9898ae5b395684a2
694bf246170603c7e282e92c413db1624db98ce8/cb/cb12b05317683611eb66cf8bf3a46c4c0edabbb1
694bf246170603c7e282e92c413db1624db98ce8/cb/cb9afd6b3c4a283c6d6bc7390bad6090d9a3535b
694bf246170603c7e282e92c413db1624db98ce8/cc/cc18107ddf81c4832cd3cf4194818869b06cbc80
694bf246170603c7e282e92c413db1624db98ce8/cc/cc723e4537a6d5120fb720dda7dd18b10f3f4a97
694bf246170603c7e282e92c413db1624db98ce8/cd/cd0f54a864abf424e47de7b8910e9bdf44dfc6ea
694bf246170603c7e282e92c413db1624db98ce8/cd/cd504ad2e70c260ab8ca7228a650cf576aff8383
694bf246170603c7e282e92c413db1624db98ce8/cd/cd6702cea29fe89cf280a76794405adb17f9a0ee
694bf246170603c7e282e92c413db1624db98ce8/cd/cd7564fac680dd4d55924dcae0bb8b92f18c6590
694bf246170603c7e282e92c413db1624db98ce8/ce/ce554a09e3ce75fad6002461ea30bfacab9b35e5
694bf246170603c7e282e92c413db1624db98ce8/cf/cf15234871aff119d2c4f4418a69a3390a5e823a
694bf246170603c7e282e92c413db1624db98ce8/cf/cfa63c2cb0fd80843034e75395ea3be8d1ba6529
694bf246170603c7e282e92c413db1624db98ce8/d1/d17e2cfe349996fbfaac76d039330cc5f37db2b2
694bf246170603c7e282e92c413db1624db98ce8/d1/d1d5c76d198cdfb122efdca5eb0bffbaf4a50253
694bf246170603c7e282e92c413db1624db98ce8/d1/d1d87b1296ba9a8edf26bb57a84cb92857bf42b7
694bf246170603c7e282e92c413db1624db98ce8/d1/d1f062e2da26192a6625d968274bfda8d07821e4
694bf246170603c7e282e92c413db1624db98ce8/d2/d23c10ac6012e26965493923e4fae13439eecaab
694bf246170603c7e282e92c413db1624db98ce8/d3/d351344f01cbe4900c9e981d1fb7ea5614e7c2e5
694bf246170603c7e282e92c413db1624db98ce8/d4/d4031d248cd7505932ca2b5491e3f7ef74f53d65
694bf246170603c7e282e92c413db1624db98ce8/d7/d772584b01fa324f5e88f2775869130f56a46e02
694bf246170603c7e282e92c413db1624db98ce8/d7/d79ef1238ebf1ba85c980522b41290af21cc8727
694bf246170603c7e282e92c413db1624db98ce8/d7/d7e119770a43a8fdd55bb7baaae10333b23f3ee0
694bf246170603c7e282e92c413db1624db98ce8/d8/d82ab0495782c679a2b0b649e5c5b5c249976b1e
694bf246170603c7e282e92c413db1624db98ce8/d9/d9ee30b97562dd4a57f8eec1674df55c7fe629ba
694bf246170603c7e282e92c413db1624db98ce8/d9/d9ef417ee553b15d0c203d2a72fa30c6befeb50e
694bf246170603c7e282e92c413db1624db98ce8/dc/dc443361bc3b23cedc8492d9a82e47ee89234d14
694bf246170603c7e282e92c413db1624db98ce8/dc/dc4790bc4251d9ec54fab18e399b5347c7ded620
694bf246170603c7e282e92c413db1624db98ce8/dd/dd4b52c3d7f4ed39a7d8ca8baa79651ad5c2b71d
694bf246170603c7e282e92c413db1624db98ce8/dd/dd7c521ee91359e08d333de0df7c204ffd8d81ef
694bf246170603c7e282e92c413db1624db98ce8/e0/e0ed1d8a8846d65d7e8f95d4d8e010af0c1ea3e2
694bf246170603c7e282e92c413db1624db98ce8/e1/e19efc06fddeecdd2b56c28eb2484bfbe59572d5
.xml
694bf246170603c7e282e92c413db1624db98ce8/e2/e2ca8d3cbe06376b91499aacfa74257510d4f500
694bf246170603c7e282e92c413db1624db98ce8/e3/e36b35ae4cc6038f9ce83b5e097f216144278b17
694bf246170603c7e282e92c413db1624db98ce8/e3/e3722676133184621303a00be5f4ce1714c57695
694bf246170603c7e282e92c413db1624db98ce8/e3/e3f8a26449a3b2e3356f42998493a49ed5a71303
694bf246170603c7e282e92c413db1624db98ce8/e4/e41fdc1e996b844a289f60a4bb1b0d2f271e5cfe
694bf246170603c7e282e92c413db1624db98ce8/e5/e5881fcabdc522b20bfc2fd15a6e172477c30cec
694bf246170603c7e282e92c413db1624db98ce8/e5/e5c33486de4b84fb5b41f4beab62a6e1843d044c
694bf246170603c7e282e92c413db1624db98ce8/e6/e66eda474b5eeefbd6f64f1010795513345a1222
694bf246170603c7e282e92c413db1624db98ce8/e6/e6c0452df8d33c5f6c4b320aa70c279014d0503e
694bf246170603c7e282e92c413db1624db98ce8/e6/e6d15425399f0188288380fab8ef175a4455391b
694bf246170603c7e282e92c413db1624db98ce8/e7/e70db36946d0d526fdd20a6f287ff1dab0f21afe
694bf246170603c7e282e92c413db1624db98ce8/e7/e7116118dbd9153149fb22ce316f2bd6371937eb
694bf246170603c7e282e92c413db1624db98ce8/e7/e75d753097308f652ff0d2c70f60fa9b848921f6
694bf246170603c7e282e92c413db1624db98ce8/e8/e8123a96a947e9c356cac0bf6e47aba405de02d3
694bf246170603c7e282e92c413db1624db98ce8/e9/e999feed282a124992b327889794b74eaf6adb56
.xml
694bf246170603c7e282e92c413db1624db98ce8/ea/eab732e3cb30cbdec594f0c3fcdea7e5e4163a84
694bf246170603c7e282e92c413db1624db98ce8/eb/eb91e78b912882d73e305021d74e26f86ec9fe61
694bf246170603c7e282e92c413db1624db98ce8/eb/ebfc744c91e2ec03da57ddc7cd3c9922ea2e1629
694bf246170603c7e282e92c413db1624db98ce8/ec/ec1cad170af8fcac1ef956f7875e875cddb88012
694bf246170603c7e282e92c413db1624db98ce8/ec/ec94c8ad4047b66e7b17083140f9d83d8b47f345
694bf246170603c7e282e92c413db1624db98ce8/ec/ecb2eba2d38d7889ee54dd953fdeaf4c52bf5a4c
694bf246170603c7e282e92c413db1624db98ce8/ec/ecb5489ac8284e6a5fd307eaff829497eeaf500b
694bf246170603c7e282e92c413db1624db98ce8/ec/ecc5af7be0258d73c549afd70805fc56f8c4bebb
694bf246170603c7e282e92c413db1624db98ce8/ed/ed1f8fb5a948b40504c19580a458c384659a605e
694bf246170603c7e282e92c413db1624db98ce8/ed/ed248cf557df575f57718b98dc5008628bd47f65
694bf246170603c7e282e92c413db1624db98ce8/ee/ee77759a5f936cb2e4b030694ee739f111552b46
694bf246170603c7e282e92c413db1624db98ce8/ee/eecf3c8733210e6334066921e8a485ed16d7fa75
694bf246170603c7e282e92c413db1624db98ce8/f0/f071ce0059246564ccaae21c7026d071b202446f
694bf246170603c7e282e92c413db1624db98ce8/f1/f13616f8615967d51eedaafc24be0a62989007f5
694bf246170603c7e282e92c413db1624db98ce8/f1/f1f0076c51009841cc2597973e8354bbb5d3b954
694bf246170603c7e282e92c413db1624db98ce8/f2/f223630e1468c9814f361c5e64eb12173a73c824
694bf246170603c7e282e92c413db1624db98ce8/f2/f27c388227fd470ca358c45888f5483b9abaaa30
694bf246170603c7e282e92c413db1624db98ce8/f3/f30d6ef41c65177e0d949cbbefa7e114bb39a212
694bf246170603c7e282e92c413db1624db98ce8/f3/f358ad085a7235d186e839b2c2b6a9c29a03e533
694bf246170603c7e282e92c413db1624db98ce8/f6/f630fdc01a6e0cf8b5f111a1f2f98df128b5b96e
694bf246170603c7e282e92c413db1624db98ce8/f6/f65b5fafc69bbd3c60be019c6e938e146825fa83
694bf246170603c7e282e92c413db1624db98ce8/f8/f8a830311ab14b53abf6db3bc5827fe6871de18b
694bf246170603c7e282e92c413db1624db98ce8/f9/f968421bd39a938ba456ef7aa096f8627662b74a
694bf246170603c7e282e92c413db1624db98ce8/f9/f9f7ad2ece1b4af1e1ddae0ab109ce3a3355e4d6
694bf246170603c7e282e92c413db1624db98ce8/fa/faa2ddd75a45edcb8da9618e804ebdb406db9233
694bf246170603c7e282e92c413db1624db98ce8/fa/fafd33a57806e10cd5fe7873f6ab13e6f404917f
694bf246170603c7e282e92c413db1624db98ce8/fb/fb7786ced1add24313fa258c8e1ed041e24d52a4
694bf246170603c7e282e92c413db1624db98ce8/fc/fcfe97bc5866828740d6cdd80f9a37149636b23e
694bf246170603c7e282e92c413db1624db98ce8/fd/fd19d4ea1449198c75be879296bf1cb547f9f00c
694bf246170603c7e282e92c413db1624db98ce8/fd/fd316d08914e562dca9a56bac683df575f42e41b
694bf246170603c7e282e92c413db1624db98ce8/fd/fd35124b25efb07b66e74c66185475e861bfe5e0
694bf246170603c7e282e92c413db1624db98ce8/fd/fd3e3713b4aaa19acf5e5ab88982ad6c1088c63a
694bf246170603c7e282e92c413db1624db98ce8/fd/fd69d8fb772ea56a011741f952f385b15853c5ae
694bf246170603c7e282e92c413db1624db98ce8/fe/fe46d99748689532ddb550146a62b6395be5ca17
694bf246170603c7e282e92c413db1624db98ce8/fe/fe987f9baac32e5744aa4e8238bdd5f21f283653
694bf246170603c7e282e92c413db1624db98ce8/fe/fedaf5f5bcb9345f301b9a442f884d39232e7f34
694bf246170603c7e282e92c413db1624db98ce8/ff/ff8fcf3dde9e81360b6ba51f0ea27c47b7e87844
MagicCFGWin_v1.2/resources/lib/mobile.asset
MagicCFGWin_v1.2/resources/lib/resource.asset
MagicCFGWin_v1.2/resources/utils/7z.dll
.dll windows:4 windows x64 arch:x64

09c182b10b88cd78aa1b9a1fdb0142e4

Code Sign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

60:aa:d8:36:3a:fb:ef:e9:28:4e:eb:1b
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

12/06/2019, 06:15

Not After

20/08/2021, 08:09

Subject

CN=深圳市为爱普信息技术有限公司,O=深圳市为爱普信息技术有限公司,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d0:da:f0:cd:90:88:9a:1d:67:9e:4e:8b:bd:fb:4a:ba:21:4b:3c:d4
Signer

Actual PE Digest

d0:da:f0:cd:90:88:9a:1d:67:9e:4e:8b:bd:fb:4a:ba:21:4b:3c:d4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

oleaut32

SysStringLen
VariantClear
VariantCopy
SysAllocString
SysAllocStringByteLen
SysFreeString
SysAllocStringLen

user32

CharUpperW
CharPrevExA

advapi32

SystemFunction036

msvcrt

strcpy
memset
realloc
free
malloc
__CxxFrameHandler
strlen
strcat
strstr
_CxxThrowException
wcscmp
strcmp
memmove
memcpy
memcmp
_purecall
strchr
__C_specific_handler
_beginthreadex
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
__dllonexit
_onexit
_initterm

kernel32

InitializeCriticalSection
ReleaseSemaphore
CreateSemaphoreW
ResetEvent
Sleep
CreateEventW
WaitForSingleObject
VirtualFree
VirtualAlloc
SetEvent
QueryPerformanceCounter
FileTimeToLocalFileTime
DeleteCriticalSection
LocalFileTimeToFileTime
WaitForMultipleObjects
LeaveCriticalSection
EnterCriticalSection
GetSystemTimeAsFileTime
FileTimeToDosDateTime
DosDateTimeToFileTime
GlobalMemoryStatusEx
GetSystemInfo
GetCurrentProcess
GetProcessAffinityMask
CompareFileTime
WriteFile
ReadFile
GetFileAttributesW
GetModuleHandleA
FindFirstFileW
GetLastError
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
CreateFileW
SetFileAttributesW
GetProcAddress
GetModuleHandleW
CreateDirectoryW
DeleteFileW
GetTempPathW
SetLastError
GetCurrentProcessId
GetTickCount
GetCurrentThreadId
FindClose

Exports

Exports

CreateDecoder
CreateEncoder
CreateObject
GetHandlerProperty
GetHandlerProperty2
GetHashers
GetIsArc
GetMethodProperty
GetNumberOfFormats
GetNumberOfMethods
SetCaseSensitive
SetCodecs
SetLargePageMode

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 316KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/utils/dirname
.macho macos arch:arm64
MagicCFGWin_v1.2/resources/utils/idevicecheck.dll
.exe windows:6 windows x64 arch:x64

b1555b3bc2b85d9d46cd95c65e7f0040

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\1\s\x64\Release\idevicebackup2.pdb

Imports

kernel32

FindFirstFileExW
GetFullPathNameW
FindNextFileW
FindClose
GetLastError
QueryPerformanceFrequency
DeleteFileA
RemoveDirectoryA
GetDiskFreeSpaceExA
CreateDirectoryA
QueryPerformanceCounter
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlCaptureContext
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess

imobiledevice

sbservices_client_start_service
mobilebackup2_send_status_response
mobilebackup2_client_new
instproxy_client_options_set_return_attributes
instproxy_client_options_new
afc_client_new
idevice_free
afc_dictionary_free
instproxy_browse
diagnostics_relay_client_start_service
lockdownd_client_new_with_handshake
lockdownd_service_descriptor_free
np_client_new
afc_remove_path
diagnostics_relay_query_mobilegestalt
afc_client_free
afc_make_directory
instproxy_client_options_add
np_post_notification
np_observe_notifications
afc_file_write
mobilebackup2_receive_message
afc_file_lock
mobilebackup2_version_exchange
mobilebackup2_send_raw
diagnostics_relay_goodbye
np_client_free
afc_file_close
mobilebackup2_send_message
afc_file_read
instproxy_client_start_service
sbservices_get_icon_pngdata
sbservices_client_free
mobilebackup2_client_free
lockdownd_start_service_with_escrow_bag
instproxy_client_free
instproxy_client_options_free
afc_file_open
np_set_notify_callback
lockdownd_get_value
lockdownd_start_service
afc_get_file_info
idevice_get_udid
lockdownd_client_free
idevice_new_with_options
idevice_set_debug_level
diagnostics_relay_client_free
mobilebackup2_send_request
mobilebackup2_receive_raw

plist

plist_from_bin
plist_dict_new_iter
plist_get_real_val
plist_from_xml
plist_get_node_type
plist_get_bool_val
plist_dict_get_item
plist_get_uint_val
plist_new_string
plist_dict_set_item
plist_new_data
plist_new_uint
plist_dict_get_size
plist_new_date
plist_new_bool
plist_copy
plist_access_path
plist_new_dict
plist_array_append_item
plist_array_get_item
plist_new_array
plist_free
plist_array_get_size
plist_to_xml
plist_get_string_val
plist_dict_next_item

vcruntime140

memcpy
strchr
__C_specific_handler
__current_exception
__current_exception_context
memset
strrchr

api-ms-win-crt-stdio-l1-1-0

__p__commode
fread
fputc
__stdio_common_vsprintf
fwrite
rewind
__stdio_common_vfprintf
fseek
_set_fmode
fclose
fopen
__stdio_common_vsscanf
ftell
fflush
__acrt_iob_func
fputs

api-ms-win-crt-utility-l1-1-0

srand
rand

api-ms-win-crt-string-l1-1-0

_strdup
isprint
toupper
strcmp

api-ms-win-crt-heap-l1-1-0

_set_new_mode
free
malloc

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_exit
_get_initial_narrow_environment
__p___argv
_configure_narrow_argv
__p___argc
exit
_set_app_type
_seh_filter_exe
strerror
signal
_register_thread_local_exe_atexit_callback
_initialize_narrow_environment
_c_exit
_cexit
_errno
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_set_errno
_initterm

api-ms-win-crt-convert-l1-1-0

wcstombs_s
mbstowcs_s
atol

api-ms-win-crt-filesystem-l1-1-0

rename
_stat64i32
_stat64

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-conio-l1-1-0

_getch

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/utils/idevicerecovery.exe
.exe windows:4 windows x64 arch:x64

59da0a590bebb821bfdeed92f2ad09c9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

libcrypto-1_1-x64

EVP_CIPHER_CTX_free
EVP_CIPHER_CTX_new
EVP_CIPHER_CTX_set_padding
EVP_DecryptFinal
EVP_DecryptInit
EVP_DecryptUpdate
EVP_aes_256_cbc

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
GetStartupInfoA
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_errno
_fmode
_initterm
_lock
_onexit
_unlock
abort
calloc
exit
fclose
fopen
fprintf
fputc
fread
free
fseek
ftell
fwrite
getc
getenv
islower
isspace
isupper
isxdigit
localeconv
malloc
memcmp
memcpy
memset
puts
realloc
rewind
signal
strcmp
strcpy
strerror
strlen
strncmp
strstr
strtol
strtoul
tolower
ungetc
vfprintf
wcslen

libusb-1.0

libusb_alloc_transfer
libusb_bulk_transfer
libusb_cancel_transfer
libusb_claim_interface
libusb_close
libusb_control_transfer
libusb_exit
libusb_free_transfer
libusb_get_configuration
libusb_handle_events_timeout_completed
libusb_init
libusb_open_device_with_vid_pid
libusb_release_interface
libusb_reset_device
libusb_set_configuration
libusb_submit_transfer

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/97
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/113
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/utils/imobiledevice-net-lighthouse.dll
.dll windows:6 windows x64 arch:x64

e533a869d1bcfad4b2b0d69c5d8dfc25

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\FrederikCarlier\Source\Repos\adk-nuget\AdkNuGetGenerator\lighthouse\windows\x64\Release\pinvoke-lighthouse.pdb

Imports

kernel32

GetModuleFileNameW
GetLastError
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

vcruntime140

memset
__C_specific_handler
__std_type_info_destroy_list

api-ms-win-crt-string-l1-1-0

wcscpy_s

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_onexit_table
_cexit

Exports

Exports

get_moduleFileName

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/utils/imobiledevice.dll
.dll windows:6 windows x64 arch:x64

ce81ddd56c2d4f8f9a044c960d4c9204

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\1\s\x64\Release\imobiledevice.pdb

Imports

ws2_32

select

kernel32

RtlVirtualUnwind
RtlCaptureContext
RtlLookupFunctionEntry
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
WaitForSingleObject
Sleep
CloseHandle
CreateThread

plist

plist_get_string_val
plist_dict_get_item
plist_to_bin
plist_from_bin
plist_new_string
plist_dict_set_item
plist_new_data
plist_from_xml
plist_get_node_type
plist_get_data_val
plist_get_bool_val
plist_to_xml
plist_get_uint_val
plist_new_real
plist_dict_remove_item
plist_access_path
plist_new_dict
plist_new_bool
plist_free
plist_new_array
plist_array_append_item
plist_copy
plist_new_uint
plist_array_get_item
plist_get_real_val
plist_array_get_size

usbmuxd

usbmuxd_get_device
usbmuxd_set_tcp_endpoint
usbmuxd_send
usbmuxd_save_pair_record_with_device_id
usbmuxd_delete_pair_record
usbmuxd_read_pair_record
usbmuxd_connect
usbmuxd_disconnect
usbmuxd_subscribe
usbmuxd_set_socket_type
usbmuxd_get_device_list
usbmuxd_get_socket_type
usbmuxd_get_tcp_endpoint
usbmuxd_recv
usbmuxd_recv_timeout
usbmuxd_unsubscribe
usbmuxd_device_list_free
usbmuxd_read_buid

libcrypto-1_1-x64

RSA_new
X509_set_pubkey
X509_set1_notBefore
ASN1_TIME_free
X509_set_version
PEM_write_bio_X509
X509V3_EXT_conf_nid
BIO_ctrl
ASN1_INTEGER_new
BN_set_word
X509_new
RSA_generate_key_ex
PEM_read_bio_RSAPublicKey
BIO_int_ctrl
ERR_error_string
PEM_read_bio_X509
PEM_read_bio_RSAPrivateKey
ERR_get_error
RSA_free
BIO_s_socket
X509_add_ext
ASN1_INTEGER_free
ASN1_TIME_set
X509_EXTENSION_free
BN_free
BIO_s_mem
BIO_new
X509_sign
X509_set_serialNumber
BIO_new_mem_buf
EVP_PKEY_assign
X509_free
PEM_write_bio_PrivateKey
ASN1_INTEGER_set
X509V3_EXT_cleanup
X509V3_set_ctx
BN_new
EVP_sha1
BIO_free
X509_set1_notAfter
EVP_PKEY_free
ASN1_TIME_new
EVP_PKEY_new

libssl-1_1-x64

SSL_get_error
SSL_get_current_cipher
SSL_CTX_set_security_level
SSL_shutdown
SSL_CIPHER_get_name
SSL_set_verify
SSL_read
SSL_set_connect_state
SSL_pending
SSL_CTX_use_RSAPrivateKey
SSL_set_bio
SSL_write
SSL_CTX_new
SSL_get_version
SSL_CTX_ctrl
SSL_CTX_free
SSL_CTX_use_certificate
SSL_do_handshake
TLS_method
SSL_free
SSL_new

vcruntime140

memset
memcpy
__C_specific_handler
__std_type_info_destroy_list

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
__stdio_common_vfprintf
__acrt_iob_func
__stdio_common_vsscanf

api-ms-win-crt-time-l1-1-0

_localtime64
strftime
_time64

api-ms-win-crt-heap-l1-1-0

free
malloc
realloc

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_initterm_e
_initterm
_cexit
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_errno
_configure_narrow_argv
strerror

api-ms-win-crt-string-l1-1-0

strncmp
isspace
_strdup
strcmp

api-ms-win-crt-utility-l1-1-0

srand
rand

Exports

Exports

afc_client_free
afc_client_new
afc_client_new_from_house_arrest_client
afc_client_new_with_service_client
afc_client_start_service
afc_dictionary_free
afc_file_close
afc_file_lock
afc_file_open
afc_file_read
afc_file_seek
afc_file_tell
afc_file_truncate
afc_file_write
afc_get_device_info
afc_get_device_info_key
afc_get_file_info
afc_make_directory
afc_make_link
afc_read_directory
afc_remove_path
afc_remove_path_and_contents
afc_rename_path
afc_set_file_time
afc_truncate
debug_info_real
debugserver_client_free
debugserver_client_new
debugserver_client_receive
debugserver_client_receive_response
debugserver_client_receive_with_timeout
debugserver_client_send
debugserver_client_send_command
debugserver_client_set_ack_mode
debugserver_client_set_argv
debugserver_client_set_environment_hex_encoded
debugserver_client_start_service
debugserver_command_free
debugserver_command_new
debugserver_decode_string
debugserver_encode_string
diagnostics_relay_client_free
diagnostics_relay_client_new
diagnostics_relay_client_start_service
diagnostics_relay_goodbye
diagnostics_relay_query_ioregistry_entry
diagnostics_relay_query_ioregistry_plane
diagnostics_relay_query_mobilegestalt
diagnostics_relay_request_diagnostics
diagnostics_relay_restart
diagnostics_relay_shutdown
diagnostics_relay_sleep
file_relay_client_free
file_relay_client_new
file_relay_client_start_service
file_relay_request_sources
file_relay_request_sources_timeout
heartbeat_client_free
heartbeat_client_new
heartbeat_client_start_service
heartbeat_receive
heartbeat_receive_with_timeout
heartbeat_send
house_arrest_client_free
house_arrest_client_new
house_arrest_client_start_service
house_arrest_get_result
house_arrest_send_command
house_arrest_send_request
idevice_connect
idevice_connection_disable_bypass_ssl
idevice_connection_disable_ssl
idevice_connection_enable_ssl
idevice_connection_get_fd
idevice_connection_receive
idevice_connection_receive_timeout
idevice_connection_send
idevice_device_list_extended_free
idevice_device_list_free
idevice_disconnect
idevice_event_subscribe
idevice_event_unsubscribe
idevice_free
idevice_get_device_list
idevice_get_device_list_extended
idevice_get_handle
idevice_get_socket_type
idevice_get_tcp_endpoint
idevice_get_udid
idevice_new
idevice_new_with_options
idevice_set_debug_callback
idevice_set_debug_level
idevice_set_socket_type
idevice_set_tcp_endpoint
instproxy_archive
instproxy_browse
instproxy_browse_with_callback
instproxy_check_capabilities_match
instproxy_client_free
instproxy_client_get_path_for_bundle_identifier
instproxy_client_new
instproxy_client_options_add
instproxy_client_options_free
instproxy_client_options_new
instproxy_client_options_set_return_attributes
instproxy_client_start_service
instproxy_command_get_name
instproxy_install
instproxy_lookup
instproxy_lookup_archives
instproxy_remove_archive
instproxy_restore
instproxy_status_get_current_list
instproxy_status_get_error
instproxy_status_get_name
instproxy_status_get_percent_complete
instproxy_uninstall
instproxy_upgrade
lockdownd_activate
lockdownd_client_free
lockdownd_client_new
lockdownd_client_new_with_handshake
lockdownd_client_set_label
lockdownd_data_classes_free
lockdownd_deactivate
lockdownd_enter_recovery
lockdownd_get_device_name
lockdownd_get_device_udid
lockdownd_get_sync_data_classes
lockdownd_get_value
lockdownd_goodbye
lockdownd_pair
lockdownd_pair_with_options
lockdownd_query_type
lockdownd_receive
lockdownd_remove_value
lockdownd_send
lockdownd_service_descriptor_free
lockdownd_set_value
lockdownd_start_service
lockdownd_start_service_with_escrow_bag
lockdownd_start_session
lockdownd_stop_session
lockdownd_strerror
lockdownd_unpair
lockdownd_validate_pair
misagent_client_free
misagent_client_new
misagent_client_start_service
misagent_copy
misagent_copy_all
misagent_get_status_code
misagent_install
misagent_remove
mobile_image_mounter_free
mobile_image_mounter_hangup
mobile_image_mounter_lookup_image
mobile_image_mounter_mount_image
mobile_image_mounter_new
mobile_image_mounter_start_service
mobile_image_mounter_upload_image
mobileactivation_activate
mobileactivation_activate_with_session
mobileactivation_client_free
mobileactivation_client_new
mobileactivation_client_start_service
mobileactivation_create_activation_info
mobileactivation_create_activation_info_with_session
mobileactivation_create_activation_session_info
mobileactivation_deactivate
mobileactivation_get_activation_state
mobilebackup2_client_free
mobilebackup2_client_new
mobilebackup2_client_start_service
mobilebackup2_receive_message
mobilebackup2_receive_raw
mobilebackup2_send_message
mobilebackup2_send_raw
mobilebackup2_send_request
mobilebackup2_send_status_response
mobilebackup2_version_exchange
mobilebackup_client_free
mobilebackup_client_new
mobilebackup_client_start_service
mobilebackup_receive
mobilebackup_receive_restore_application_received
mobilebackup_receive_restore_file_received
mobilebackup_request_backup
mobilebackup_request_restore
mobilebackup_send
mobilebackup_send_backup_file_received
mobilebackup_send_error
mobilebackup_send_restore_complete
mobilesync_acknowledge_changes_from_device
mobilesync_actions_add
mobilesync_actions_free
mobilesync_actions_new
mobilesync_anchors_free
mobilesync_anchors_new
mobilesync_cancel
mobilesync_clear_all_records_on_device
mobilesync_client_free
mobilesync_client_new
mobilesync_client_start_service
mobilesync_finish
mobilesync_get_all_records_from_device
mobilesync_get_changes_from_device
mobilesync_ready_to_send_changes_from_computer
mobilesync_receive
mobilesync_receive_changes
mobilesync_remap_identifiers
mobilesync_send
mobilesync_send_changes
mobilesync_start
np_client_free
np_client_new
np_client_start_service
np_observe_notification
np_observe_notifications
np_post_notification
np_set_notify_callback
pinvoke_free_string
pinvoke_get_string_length
preboard_client_free
preboard_client_new
preboard_client_start_service
preboard_commit_stashbag
preboard_create_stashbag
preboard_receive
preboard_receive_with_timeout
preboard_send
property_list_service_client_free
property_list_service_client_new
property_list_service_disable_ssl
property_list_service_enable_ssl
property_list_service_receive_plist
property_list_service_receive_plist_with_timeout
property_list_service_send_binary_plist
property_list_service_send_xml_plist
restored_client_free
restored_client_new
restored_client_set_label
restored_get_value
restored_goodbye
restored_query_type
restored_query_value
restored_reboot
restored_receive
restored_send
restored_start_restore
sbservices_client_free
sbservices_client_new
sbservices_client_start_service
sbservices_get_home_screen_wallpaper_pngdata
sbservices_get_icon_pngdata
sbservices_get_icon_state
sbservices_get_interface_orientation
sbservices_set_icon_state
screenshotr_client_free
screenshotr_client_new
screenshotr_client_start_service
screenshotr_screenshot_free
screenshotr_take_screenshot
service_client_factory_start_service
service_client_free
service_client_new
service_disable_bypass_ssl
service_disable_ssl
service_enable_ssl
service_receive
service_receive_with_timeout
service_send
syslog_relay_client_free
syslog_relay_client_new
syslog_relay_client_start_service
syslog_relay_receive
syslog_relay_receive_with_timeout
syslog_relay_start_capture
syslog_relay_start_capture_raw
syslog_relay_stop_capture
webinspector_client_free
webinspector_client_new
webinspector_client_start_service
webinspector_receive
webinspector_receive_with_timeout
webinspector_send

Sections

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/utils/libcrypto-1_1-x64.dll
.dll windows:4 windows x64 arch:x64

4739128d0fc7f89b14065a7f377ab260

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
DeregisterEventSource
RegisterEventSourceA
RegisterEventSourceW
ReportEventA
ReportEventW

kernel32

CloseHandle
ConvertFiberToThread
ConvertThreadToFiber
CreateFiber
DeleteCriticalSection
DeleteFiber
EnterCriticalSection
FindClose
FindFirstFileW
FindNextFileW
FormatMessageW
FreeLibrary
GetConsoleMode
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentVariableW
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetProcAddress
GetStdHandle
GetSystemTime
GetSystemTimeAsFileTime
GetVersion
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
MultiByteToWideChar
QueryPerformanceCounter
ReadConsoleA
ReadConsoleW
RtlVirtualUnwind
SetConsoleMode
SetLastError
Sleep
SwitchToFiber
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteFile

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_chmod
_close
_errno
_exit
_fileno
_fstat64
_gmtime64
_initterm
_lock
_lseek
_onexit
_read
_setmode
_stat64
_stricmp
_strdup
_strdup
_strnicmp
_time64
_unlock
_vsnprintf
_vsnwprintf
_wfopen
_write
abort
atoi
calloc
clearerr
fclose
feof
ferror
fflush
fgets
fopen
fputc
fputs
fread
free
fseek
ftell
fwrite
getc
getenv
islower
isspace
isupper
isxdigit
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
perror
qsort
raise
realloc
setbuf
signal
strcat
strchr
strcmp
strcpy
strcspn
strerror
strlen
strncmp
strncpy
strrchr
strspn
strstr
strtol
strtoul
tolower
ungetc
vfprintf
wcscpy
wcslen
wcsstr

user32

GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW

ws2_32

WSACleanup
WSAGetLastError
WSASetLastError
WSAStartup
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostbyname
getnameinfo
getsockname
getsockopt
ioctlsocket
listen
ntohs
recv
recvfrom
send
sendto
setsockopt
shutdown
socket

Exports

Exports

ACCESS_DESCRIPTION_free
ACCESS_DESCRIPTION_it
ACCESS_DESCRIPTION_new
ADMISSIONS_free
ADMISSIONS_get0_admissionAuthority
ADMISSIONS_get0_namingAuthority
ADMISSIONS_get0_professionInfos
ADMISSIONS_it
ADMISSIONS_new
ADMISSIONS_set0_admissionAuthority
ADMISSIONS_set0_namingAuthority
ADMISSIONS_set0_professionInfos
ADMISSION_SYNTAX_free
ADMISSION_SYNTAX_get0_admissionAuthority
ADMISSION_SYNTAX_get0_contentsOfAdmissions
ADMISSION_SYNTAX_it
ADMISSION_SYNTAX_new
ADMISSION_SYNTAX_set0_admissionAuthority
ADMISSION_SYNTAX_set0_contentsOfAdmissions
AES_bi_ige_encrypt
AES_cbc_encrypt
AES_cfb128_encrypt
AES_cfb1_encrypt
AES_cfb8_encrypt
AES_decrypt
AES_ecb_encrypt
AES_encrypt
AES_ige_encrypt
AES_ofb128_encrypt
AES_options
AES_set_decrypt_key
AES_set_encrypt_key
AES_unwrap_key
AES_wrap_key
ASIdOrRange_free
ASIdOrRange_it
ASIdOrRange_new
ASIdentifierChoice_free
ASIdentifierChoice_it
ASIdentifierChoice_new
ASIdentifiers_free
ASIdentifiers_it
ASIdentifiers_new
ASN1_ANY_it
ASN1_BIT_STRING_check
ASN1_BIT_STRING_free
ASN1_BIT_STRING_get_bit
ASN1_BIT_STRING_it
ASN1_BIT_STRING_name_print
ASN1_BIT_STRING_new
ASN1_BIT_STRING_num_asc
ASN1_BIT_STRING_set
ASN1_BIT_STRING_set_asc
ASN1_BIT_STRING_set_bit
ASN1_BMPSTRING_free
ASN1_BMPSTRING_it
ASN1_BMPSTRING_new
ASN1_BOOLEAN_it
ASN1_ENUMERATED_free
ASN1_ENUMERATED_get
ASN1_ENUMERATED_get_int64
ASN1_ENUMERATED_it
ASN1_ENUMERATED_new
ASN1_ENUMERATED_set
ASN1_ENUMERATED_set_int64
ASN1_ENUMERATED_to_BN
ASN1_FBOOLEAN_it
ASN1_GENERALIZEDTIME_adj
ASN1_GENERALIZEDTIME_check
ASN1_GENERALIZEDTIME_free
ASN1_GENERALIZEDTIME_it
ASN1_GENERALIZEDTIME_new
ASN1_GENERALIZEDTIME_print
ASN1_GENERALIZEDTIME_set
ASN1_GENERALIZEDTIME_set_string
ASN1_GENERALSTRING_free
ASN1_GENERALSTRING_it
ASN1_GENERALSTRING_new
ASN1_IA5STRING_free
ASN1_IA5STRING_it
ASN1_IA5STRING_new
ASN1_INTEGER_cmp
ASN1_INTEGER_dup
ASN1_INTEGER_free
ASN1_INTEGER_get
ASN1_INTEGER_get_int64
ASN1_INTEGER_get_uint64
ASN1_INTEGER_it
ASN1_INTEGER_new
ASN1_INTEGER_set
ASN1_INTEGER_set_int64
ASN1_INTEGER_set_uint64
ASN1_INTEGER_to_BN
ASN1_ITEM_get
ASN1_ITEM_lookup
ASN1_NULL_free
ASN1_NULL_it
ASN1_NULL_new
ASN1_OBJECT_create
ASN1_OBJECT_free
ASN1_OBJECT_it
ASN1_OBJECT_new
ASN1_OCTET_STRING_NDEF_it
ASN1_OCTET_STRING_cmp
ASN1_OCTET_STRING_dup
ASN1_OCTET_STRING_free
ASN1_OCTET_STRING_it
ASN1_OCTET_STRING_new
ASN1_OCTET_STRING_set
ASN1_PCTX_free
ASN1_PCTX_get_cert_flags
ASN1_PCTX_get_flags
ASN1_PCTX_get_nm_flags
ASN1_PCTX_get_oid_flags
ASN1_PCTX_get_str_flags
ASN1_PCTX_new
ASN1_PCTX_set_cert_flags
ASN1_PCTX_set_flags
ASN1_PCTX_set_nm_flags
ASN1_PCTX_set_oid_flags
ASN1_PCTX_set_str_flags
ASN1_PRINTABLESTRING_free
ASN1_PRINTABLESTRING_it
ASN1_PRINTABLESTRING_new
ASN1_PRINTABLE_free
ASN1_PRINTABLE_it
ASN1_PRINTABLE_new
ASN1_PRINTABLE_type
ASN1_SCTX_free
ASN1_SCTX_get_app_data
ASN1_SCTX_get_flags
ASN1_SCTX_get_item
ASN1_SCTX_get_template
ASN1_SCTX_new
ASN1_SCTX_set_app_data
ASN1_SEQUENCE_ANY_it
ASN1_SEQUENCE_it
ASN1_SET_ANY_it
ASN1_STRING_TABLE_add
ASN1_STRING_TABLE_cleanup
ASN1_STRING_TABLE_get
ASN1_STRING_clear_free
ASN1_STRING_cmp
ASN1_STRING_copy
ASN1_STRING_data
ASN1_STRING_dup
ASN1_STRING_free
ASN1_STRING_get0_data
ASN1_STRING_get_default_mask
ASN1_STRING_length
ASN1_STRING_length_set
ASN1_STRING_new
ASN1_STRING_print
ASN1_STRING_print_ex
ASN1_STRING_print_ex_fp
ASN1_STRING_set
ASN1_STRING_set0
ASN1_STRING_set_by_NID
ASN1_STRING_set_default_mask
ASN1_STRING_set_default_mask_asc
ASN1_STRING_to_UTF8
ASN1_STRING_type
ASN1_STRING_type_new
ASN1_T61STRING_free
ASN1_T61STRING_it
ASN1_T61STRING_new
ASN1_TBOOLEAN_it
ASN1_TIME_adj
ASN1_TIME_check
ASN1_TIME_cmp_time_t
ASN1_TIME_compare
ASN1_TIME_diff
ASN1_TIME_free
ASN1_TIME_it
ASN1_TIME_new
ASN1_TIME_normalize
ASN1_TIME_print
ASN1_TIME_set
ASN1_TIME_set_string
ASN1_TIME_set_string_X509
ASN1_TIME_to_generalizedtime
ASN1_TIME_to_tm
ASN1_TYPE_cmp
ASN1_TYPE_free
ASN1_TYPE_get
ASN1_TYPE_get_int_octetstring
ASN1_TYPE_get_octetstring
ASN1_TYPE_new
ASN1_TYPE_pack_sequence
ASN1_TYPE_set
ASN1_TYPE_set1
ASN1_TYPE_set_int_octetstring
ASN1_TYPE_set_octetstring
ASN1_TYPE_unpack_sequence
ASN1_UNIVERSALSTRING_free
ASN1_UNIVERSALSTRING_it
ASN1_UNIVERSALSTRING_new
ASN1_UNIVERSALSTRING_to_string
ASN1_UTCTIME_adj
ASN1_UTCTIME_check
ASN1_UTCTIME_cmp_time_t
ASN1_UTCTIME_free
ASN1_UTCTIME_it
ASN1_UTCTIME_new
ASN1_UTCTIME_print
ASN1_UTCTIME_set
ASN1_UTCTIME_set_string
ASN1_UTF8STRING_free
ASN1_UTF8STRING_it
ASN1_UTF8STRING_new
ASN1_VISIBLESTRING_free
ASN1_VISIBLESTRING_it
ASN1_VISIBLESTRING_new
ASN1_add_oid_module
ASN1_add_stable_module
ASN1_bn_print
ASN1_buf_print
ASN1_check_infinite_end
ASN1_const_check_infinite_end
ASN1_d2i_bio
ASN1_d2i_fp
ASN1_digest
ASN1_dup
ASN1_generate_nconf
ASN1_generate_v3
ASN1_get_object
ASN1_i2d_bio
ASN1_i2d_fp
ASN1_item_d2i
ASN1_item_d2i_bio
ASN1_item_d2i_fp
ASN1_item_digest
ASN1_item_dup
ASN1_item_ex_d2i
ASN1_item_ex_free
ASN1_item_ex_i2d
ASN1_item_ex_new
ASN1_item_free
ASN1_item_i2d
ASN1_item_i2d_bio
ASN1_item_i2d_fp
ASN1_item_ndef_i2d
ASN1_item_new
ASN1_item_pack
ASN1_item_print
ASN1_item_sign
ASN1_item_sign_ctx
ASN1_item_unpack
ASN1_item_verify
ASN1_mbstring_copy
ASN1_mbstring_ncopy
ASN1_object_size
ASN1_parse
ASN1_parse_dump
ASN1_put_eoc
ASN1_put_object
ASN1_sign
ASN1_str2mask
ASN1_tag2bit
ASN1_tag2str
ASN1_verify
ASRange_free
ASRange_it
ASRange_new
ASYNC_WAIT_CTX_clear_fd
ASYNC_WAIT_CTX_free
ASYNC_WAIT_CTX_get_all_fds
ASYNC_WAIT_CTX_get_changed_fds
ASYNC_WAIT_CTX_get_fd
ASYNC_WAIT_CTX_new
ASYNC_WAIT_CTX_set_wait_fd
ASYNC_block_pause
ASYNC_cleanup_thread
ASYNC_get_current_job
ASYNC_get_wait_ctx
ASYNC_init_thread
ASYNC_is_capable
ASYNC_pause_job
ASYNC_start_job
ASYNC_unblock_pause
AUTHORITY_INFO_ACCESS_free
AUTHORITY_INFO_ACCESS_it
AUTHORITY_INFO_ACCESS_new
AUTHORITY_KEYID_free
AUTHORITY_KEYID_it
AUTHORITY_KEYID_new
BASIC_CONSTRAINTS_free
BASIC_CONSTRAINTS_it
BASIC_CONSTRAINTS_new
BF_cbc_encrypt
BF_cfb64_encrypt
BF_decrypt
BF_ecb_encrypt
BF_encrypt
BF_ofb64_encrypt
BF_options
BF_set_key
BIGNUM_it
BIO_ADDRINFO_address
BIO_ADDRINFO_family
BIO_ADDRINFO_free
BIO_ADDRINFO_next
BIO_ADDRINFO_protocol
BIO_ADDRINFO_socktype
BIO_ADDR_clear
BIO_ADDR_family
BIO_ADDR_free
BIO_ADDR_hostname_string
BIO_ADDR_new
BIO_ADDR_path_string
BIO_ADDR_rawaddress
BIO_ADDR_rawmake
BIO_ADDR_rawport
BIO_ADDR_service_string
BIO_accept
BIO_accept_ex
BIO_asn1_get_prefix
BIO_asn1_get_suffix
BIO_asn1_set_prefix
BIO_asn1_set_suffix
BIO_bind
BIO_callback_ctrl
BIO_clear_flags
BIO_closesocket
BIO_connect
BIO_copy_next_retry
BIO_ctrl
BIO_ctrl_get_read_request
BIO_ctrl_get_write_guarantee
BIO_ctrl_pending
BIO_ctrl_reset_read_request
BIO_ctrl_wpending
BIO_debug_callback
BIO_dgram_non_fatal_error
BIO_dump
BIO_dump_cb
BIO_dump_fp
BIO_dump_indent
BIO_dump_indent_cb
BIO_dump_indent_fp
BIO_dup_chain
BIO_f_asn1
BIO_f_base64
BIO_f_buffer
BIO_f_cipher
BIO_f_linebuffer
BIO_f_md
BIO_f_nbio_test
BIO_f_null
BIO_f_reliable
BIO_f_zlib
BIO_fd_non_fatal_error
BIO_fd_should_retry
BIO_find_type
BIO_free
BIO_free_all
BIO_get_accept_socket
BIO_get_callback
BIO_get_callback_arg
BIO_get_callback_ex
BIO_get_data
BIO_get_ex_data
BIO_get_host_ip
BIO_get_init
BIO_get_new_index
BIO_get_port
BIO_get_retry_BIO
BIO_get_retry_reason
BIO_get_shutdown
BIO_gethostbyname
BIO_gets
BIO_hex_string
BIO_indent
BIO_int_ctrl
BIO_listen
BIO_lookup
BIO_lookup_ex
BIO_meth_free
BIO_meth_get_callback_ctrl
BIO_meth_get_create
BIO_meth_get_ctrl
BIO_meth_get_destroy
BIO_meth_get_gets
BIO_meth_get_puts
BIO_meth_get_read
BIO_meth_get_read_ex
BIO_meth_get_write
BIO_meth_get_write_ex
BIO_meth_new
BIO_meth_set_callback_ctrl
BIO_meth_set_create
BIO_meth_set_ctrl
BIO_meth_set_destroy
BIO_meth_set_gets
BIO_meth_set_puts
BIO_meth_set_read
BIO_meth_set_read_ex
BIO_meth_set_write
BIO_meth_set_write_ex
BIO_method_name
BIO_method_type
BIO_new
BIO_new_CMS
BIO_new_NDEF
BIO_new_PKCS7
BIO_new_accept
BIO_new_bio_pair
BIO_new_connect
BIO_new_dgram
BIO_new_fd
BIO_new_file
BIO_new_fp
BIO_new_mem_buf
BIO_new_socket
BIO_next
BIO_nread
BIO_nread0
BIO_number_read
BIO_number_written
BIO_nwrite
BIO_nwrite0
BIO_parse_hostserv
BIO_pop
BIO_printf
BIO_ptr_ctrl
BIO_push
BIO_puts
BIO_read
BIO_read_ex
BIO_s_accept
BIO_s_bio
BIO_s_connect
BIO_s_datagram
BIO_s_fd
BIO_s_file
BIO_s_log
BIO_s_mem
BIO_s_null
BIO_s_secmem
BIO_s_socket
BIO_set_callback
BIO_set_callback_arg
BIO_set_callback_ex
BIO_set_cipher
BIO_set_data
BIO_set_ex_data
BIO_set_flags
BIO_set_init
BIO_set_next
BIO_set_retry_reason
BIO_set_shutdown
BIO_set_tcp_ndelay
BIO_snprintf
BIO_sock_error
BIO_sock_info
BIO_sock_init
BIO_sock_non_fatal_error
BIO_sock_should_retry
BIO_socket
BIO_socket_ioctl
BIO_socket_nbio
BIO_test_flags
BIO_up_ref
BIO_vfree
BIO_vprintf
BIO_vsnprintf
BIO_write
BIO_write_ex
BN_BLINDING_convert
BN_BLINDING_convert_ex
BN_BLINDING_create_param
BN_BLINDING_free
BN_BLINDING_get_flags
BN_BLINDING_invert
BN_BLINDING_invert_ex
BN_BLINDING_is_current_thread
BN_BLINDING_lock
BN_BLINDING_new
BN_BLINDING_set_current_thread
BN_BLINDING_set_flags
BN_BLINDING_unlock
BN_BLINDING_update
BN_CTX_end
BN_CTX_free
BN_CTX_get
BN_CTX_new
BN_CTX_secure_new
BN_CTX_start
BN_GENCB_call
BN_GENCB_free
BN_GENCB_get_arg
BN_GENCB_new
BN_GENCB_set
BN_GENCB_set_old
BN_GF2m_add
BN_GF2m_arr2poly
BN_GF2m_mod
BN_GF2m_mod_arr
BN_GF2m_mod_div
BN_GF2m_mod_div_arr

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 483KB - Virtual size: 483KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/utils/libimobiledevice-1.0.dll
.dll windows:4 windows x64 arch:x64

c1b92d23895031a80d7e43b9cd3bbd1e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetFileAttributesA
GetLastError
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_findclose
_findfirst64
_findnext64
_fullpath
_initterm
_lock
_strdup
_time64
_unlock
_vscprintf
_vsnprintf
abort
calloc
fputc
free
fwrite
getc
islower
isspace
isupper
isxdigit
localeconv
malloc
memcpy
memset
realloc
strcat
strcmp
strcpy
strerror
strlen
strncmp
strncpy
strrchr
strtol
strtoul
tolower
ungetc
vfprintf
wcslen

ole32

CoTaskMemFree

shell32

SHGetPathFromIDListW
SHGetSpecialFolderLocation

libcrypto-1_1-x64

ASN1_INTEGER_free
ASN1_INTEGER_new
ASN1_INTEGER_set
ASN1_TIME_free
ASN1_TIME_new
ASN1_TIME_set
BIO_ctrl
BIO_free
BIO_get_callback_arg
BIO_new
BIO_new_mem_buf
BIO_s_mem
BIO_s_null
BIO_set_callback
BIO_set_callback_arg
BN_free
BN_new
BN_set_word
EVP_PKEY_assign
EVP_PKEY_free
EVP_PKEY_new
EVP_sha1
PEM_read_bio_RSAPrivateKey
PEM_read_bio_RSAPublicKey
PEM_read_bio_X509
PEM_write_bio_PrivateKey
PEM_write_bio_X509
RSA_free
RSA_generate_key_ex
RSA_new
X509V3_EXT_cleanup
X509V3_EXT_conf_nid
X509V3_set_ctx
X509_EXTENSION_free
X509_add_ext
X509_free
X509_new
X509_set1_notAfter
X509_set1_notBefore
X509_set_pubkey
X509_set_serialNumber
X509_set_version
X509_sign

libimobiledevice-glue-1.0

generate_uuid
mutex_destroy
mutex_init
mutex_lock
mutex_unlock
socket_addr_to_string
socket_close
socket_connect
socket_connect_addr
socket_receive
socket_receive_timeout
socket_send
string_append
string_concat
thread_free
thread_join
thread_new
thread_once

libplist-2.0

plist_access_path
plist_array_append_item
plist_array_get_item
plist_array_get_size
plist_copy
plist_dict_get_item
plist_dict_merge
plist_dict_remove_item
plist_dict_set_item
plist_free
plist_from_bin
plist_from_memory
plist_from_xml
plist_get_bool_val
plist_get_data_val
plist_get_node_type
plist_get_real_val
plist_get_string_val
plist_get_uint_val
plist_new_array
plist_new_bool
plist_new_data
plist_new_dict
plist_new_real
plist_new_string
plist_new_uint
plist_string_val_compare
plist_to_bin
plist_to_xml

libssl-1_1-x64

SSL_CTX_ctrl
SSL_CTX_free
SSL_CTX_new
SSL_CTX_set_security_level
SSL_CTX_use_RSAPrivateKey
SSL_CTX_use_certificate
SSL_do_handshake
SSL_free
SSL_get_error
SSL_new
SSL_read
SSL_set_bio
SSL_set_connect_state
SSL_set_verify
SSL_shutdown
SSL_write
TLS_method

libusbmuxd-2.0

usbmuxd_connect
usbmuxd_delete_pair_record
usbmuxd_device_list_free
usbmuxd_disconnect
usbmuxd_get_device
usbmuxd_get_device_list
usbmuxd_read_buid
usbmuxd_read_pair_record
usbmuxd_recv
usbmuxd_recv_timeout
usbmuxd_save_pair_record_with_device_id
usbmuxd_send
usbmuxd_subscribe
usbmuxd_unsubscribe

Exports

Exports

afc_client_free
afc_client_new
afc_client_new_from_house_arrest_client
afc_client_new_with_service_client
afc_client_start_service
afc_dictionary_free
afc_file_close
afc_file_lock
afc_file_open
afc_file_read
afc_file_seek
afc_file_tell
afc_file_truncate
afc_file_write
afc_get_device_info
afc_get_device_info_key
afc_get_file_info
afc_make_directory
afc_make_link
afc_read_directory
afc_remove_path
afc_remove_path_and_contents
afc_rename_path
afc_set_file_time
afc_truncate
companion_proxy_client_free
companion_proxy_client_new
companion_proxy_client_start_service
companion_proxy_get_device_registry
companion_proxy_get_value_from_registry
companion_proxy_receive
companion_proxy_send
companion_proxy_start_forwarding_service_port
companion_proxy_start_listening_for_devices
companion_proxy_stop_forwarding_service_port
companion_proxy_stop_listening_for_devices
debugserver_client_free
debugserver_client_new
debugserver_client_receive
debugserver_client_receive_response
debugserver_client_receive_with_timeout
debugserver_client_send
debugserver_client_send_command
debugserver_client_set_ack_mode
debugserver_client_set_argv
debugserver_client_set_environment_hex_encoded
debugserver_client_start_service
debugserver_command_free
debugserver_command_new
debugserver_decode_string
debugserver_encode_string
diagnostics_relay_client_free
diagnostics_relay_client_new
diagnostics_relay_client_start_service
diagnostics_relay_goodbye
diagnostics_relay_query_ioregistry_entry
diagnostics_relay_query_ioregistry_plane
diagnostics_relay_query_mobilegestalt
diagnostics_relay_request_diagnostics
diagnostics_relay_restart
diagnostics_relay_shutdown
diagnostics_relay_sleep
file_relay_client_free
file_relay_client_new
file_relay_client_start_service
file_relay_request_sources
file_relay_request_sources_timeout
heartbeat_client_free
heartbeat_client_new
heartbeat_client_start_service
heartbeat_receive
heartbeat_receive_with_timeout
heartbeat_send
house_arrest_client_free
house_arrest_client_new
house_arrest_client_start_service
house_arrest_get_result
house_arrest_send_command
house_arrest_send_request
idevice_connect
idevice_connection_disable_bypass_ssl
idevice_connection_disable_ssl
idevice_connection_enable_ssl
idevice_connection_get_fd
idevice_connection_receive
idevice_connection_receive_timeout
idevice_connection_send
idevice_device_list_extended_free
idevice_device_list_free
idevice_disconnect
idevice_event_subscribe
idevice_event_unsubscribe
idevice_free
idevice_get_device_list
idevice_get_device_list_extended
idevice_get_handle
idevice_get_udid
idevice_new
idevice_new_with_options
idevice_set_debug_level
instproxy_archive
instproxy_browse
instproxy_browse_with_callback
instproxy_check_capabilities_match
instproxy_client_free
instproxy_client_get_path_for_bundle_identifier
instproxy_client_new
instproxy_client_options_add
instproxy_client_options_free
instproxy_client_options_new
instproxy_client_options_set_return_attributes
instproxy_client_start_service
instproxy_command_get_name
instproxy_install
instproxy_lookup
instproxy_lookup_archives
instproxy_remove_archive
instproxy_restore
instproxy_status_get_current_list
instproxy_status_get_error
instproxy_status_get_name
instproxy_status_get_percent_complete
instproxy_uninstall
instproxy_upgrade
lockdownd_activate
lockdownd_client_free
lockdownd_client_new
lockdownd_client_new_with_handshake
lockdownd_client_set_label
lockdownd_data_classes_free
lockdownd_deactivate
lockdownd_enter_recovery
lockdownd_get_device_name
lockdownd_get_device_udid
lockdownd_get_sync_data_classes
lockdownd_get_value
lockdownd_goodbye
lockdownd_pair
lockdownd_pair_with_options
lockdownd_query_type
lockdownd_receive
lockdownd_remove_value
lockdownd_send
lockdownd_service_descriptor_free
lockdownd_set_value
lockdownd_start_service
lockdownd_start_service_with_escrow_bag
lockdownd_start_session
lockdownd_stop_session
lockdownd_strerror
lockdownd_unpair
lockdownd_validate_pair
misagent_client_free
misagent_client_new
misagent_client_start_service
misagent_copy
misagent_copy_all
misagent_get_status_code
misagent_install
misagent_remove
mobile_image_mounter_free
mobile_image_mounter_hangup
mobile_image_mounter_lookup_image
mobile_image_mounter_mount_image
mobile_image_mounter_new
mobile_image_mounter_start_service
mobile_image_mounter_upload_image
mobileactivation_activate
mobileactivation_activate_with_session
mobileactivation_client_free
mobileactivation_client_new
mobileactivation_client_start_service
mobileactivation_create_activation_info
mobileactivation_create_activation_info_with_session
mobileactivation_create_activation_session_info
mobileactivation_deactivate
mobileactivation_get_activation_state
mobilebackup2_client_free
mobilebackup2_client_new
mobilebackup2_client_start_service
mobilebackup2_receive_message
mobilebackup2_receive_raw
mobilebackup2_send_message
mobilebackup2_send_raw
mobilebackup2_send_request
mobilebackup2_send_status_response
mobilebackup2_version_exchange
mobilebackup_client_free
mobilebackup_client_new
mobilebackup_client_start_service
mobilebackup_receive
mobilebackup_receive_restore_application_received
mobilebackup_receive_restore_file_received
mobilebackup_request_backup
mobilebackup_request_restore
mobilebackup_send
mobilebackup_send_backup_file_received
mobilebackup_send_error
mobilebackup_send_restore_complete
mobilesync_acknowledge_changes_from_device
mobilesync_actions_add
mobilesync_actions_free
mobilesync_actions_new
mobilesync_anchors_free
mobilesync_anchors_new
mobilesync_cancel
mobilesync_clear_all_records_on_device
mobilesync_client_free
mobilesync_client_new
mobilesync_client_start_service
mobilesync_finish
mobilesync_get_all_records_from_device
mobilesync_get_changes_from_device
mobilesync_ready_to_send_changes_from_computer
mobilesync_receive
mobilesync_receive_changes
mobilesync_remap_identifiers
mobilesync_send
mobilesync_send_changes
mobilesync_start
np_client_free
np_client_new
np_client_start_service
np_observe_notification
np_observe_notifications
np_post_notification
np_set_notify_callback
preboard_client_free
preboard_client_new
preboard_client_start_service
preboard_commit_stashbag
preboard_create_stashbag
preboard_receive
preboard_receive_with_timeout
preboard_send
property_list_service_client_free
property_list_service_client_new
property_list_service_disable_ssl
property_list_service_enable_ssl
property_list_service_receive_plist
property_list_service_receive_plist_with_timeout
property_list_service_send_binary_plist
property_list_service_send_xml_plist
restored_client_free
restored_client_new
restored_client_set_label
restored_get_value
restored_goodbye
restored_query_type
restored_query_value
restored_reboot
restored_receive
restored_send
restored_start_restore
reverse_proxy_client_create_with_port
reverse_proxy_client_create_with_service
reverse_proxy_client_free
reverse_proxy_client_set_data_callback
reverse_proxy_client_set_log_callback
reverse_proxy_client_set_status_callback
reverse_proxy_client_start_proxy
reverse_proxy_get_type
sbservices_client_free
sbservices_client_new
sbservices_client_start_service
sbservices_get_home_screen_wallpaper_pngdata
sbservices_get_icon_pngdata
sbservices_get_icon_state
sbservices_get_interface_orientation
sbservices_set_icon_state
screenshotr_client_free
screenshotr_client_new
screenshotr_client_start_service
screenshotr_take_screenshot
service_client_factory_start_service
service_client_free
service_client_new
service_disable_bypass_ssl
service_disable_ssl
service_enable_ssl
service_receive
service_receive_with_timeout
service_send
syslog_relay_client_free
syslog_relay_client_new
syslog_relay_client_start_service
syslog_relay_receive
syslog_relay_receive_with_timeout
syslog_relay_start_capture
syslog_relay_start_capture_raw
syslog_relay_stop_capture
webinspector_client_free
webinspector_client_new
webinspector_client_start_service
webinspector_receive
webinspector_receive_with_timeout
webinspector_send

Sections

.text
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 359KB - Virtual size: 359KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 382KB - Virtual size: 381KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/utils/libimobiledevice-glue-1.0.dll
.dll windows:4 windows x64 arch:x64

997614dec22d4f2f952232f66625c9e3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

iphlpapi

ConvertLengthToIpv4Mask
GetAdaptersAddresses

kernel32

CloseHandle
CreateSemaphoreA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FormatMessageW
GetConsoleMode
GetConsoleScreenBufferInfo
GetLastError
GetStdHandle
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
ReleaseSemaphore
SetConsoleMode
SetConsoleTextAttribute
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_assert
_errno
_initterm
_isatty
_localtime64
_lock
_strdup
_time64
_unlock
abort
calloc
fclose
fopen
fputc
fputs
fread
free
fseek
ftell
fwrite
getenv
localeconv
malloc
memcpy
memmove
memset
perror
realloc
rand
rewind
srand
strcpy
strerror
strftime
strlen
strncmp
strtol
toupper
vfprintf
wcslen
wcstombs

ws2_32

WSAAddressToStringA
WSAGetLastError
WSAStartup
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
getsockopt
htons
ioctlsocket
listen
ntohl
recv
select
send
setsockopt
shutdown
socket

libplist-2.0

plist_array_get_item
plist_array_get_size
plist_dict_new_iter
plist_dict_next_item
plist_from_bin
plist_from_xml
plist_get_bool_val
plist_get_data_val
plist_get_date_val
plist_get_key_val
plist_get_node_type
plist_get_real_val
plist_get_string_val
plist_get_uint_val
plist_to_bin
plist_to_xml

Exports

Exports

buffer_read_from_filename
buffer_write_to_filename
cfprintf
collection_add
collection_copy
collection_count
collection_free
collection_init
collection_remove
cond_destroy
cond_init
cond_signal
cond_wait
cond_wait_timeout
cprintf
cvfprintf
generate_uuid
get_primary_mac_address
mutex_destroy
mutex_init
mutex_lock
mutex_unlock
plist_print_to_stream
plist_print_to_stream_with_indentation
plist_read_from_filename
plist_write_to_filename
socket_accept
socket_addr_to_string
socket_check_fd
socket_close
socket_connect
socket_connect_addr
socket_create
socket_peek
socket_receive
socket_receive_timeout
socket_send
socket_set_verbose
socket_shutdown
string_append
string_build_path
string_concat
string_format_size
string_toupper
term_colors_init
term_colors_set_enabled
thread_alive
thread_cancel
thread_detach
thread_free
thread_join
thread_new
thread_once

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/utils/libimobiledevice.dll
.exe windows:4 windows x64 arch:x64

b40d3471c67442bfb5f21c2b46648490

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

libimobiledevice-1.0

idevice_free
idevice_get_udid
idevice_new
idevice_set_debug_level
lockdownd_client_free
lockdownd_client_new
lockdownd_client_new_with_handshake
lockdownd_pair
lockdownd_query_type
lockdownd_unpair

kernel32

DeleteCriticalSection
EnterCriticalSection
GetEnvironmentVariableW
GetFileAttributesA
GetLastError
GetStartupInfoA
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__argv
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_errno
_findclose
_findfirst64
_findnext64
_fmode
_fullpath
_initterm
_lock
_onexit
_strdup
_time64
_unlock
abort
calloc
exit
fprintf
fputc
free
fwrite
localeconv
malloc
memcpy
memset
realloc
signal
strchr
strcmp
strcpy
strerror
strlen
strncmp
strncpy
strrchr
vfprintf
wcslen

ole32

CoTaskMemFree

shell32

SHGetPathFromIDListW
SHGetSpecialFolderLocation

libcrypto-1_1-x64

ASN1_INTEGER_free
ASN1_INTEGER_new
ASN1_INTEGER_set
ASN1_TIME_free
ASN1_TIME_new
ASN1_TIME_set
BIO_ctrl
BIO_free
BIO_new
BIO_new_mem_buf
BIO_s_mem
BN_free
BN_new
BN_set_word
EVP_PKEY_assign
EVP_PKEY_free
EVP_PKEY_new
EVP_sha1
PEM_read_bio_RSAPublicKey
PEM_write_bio_PrivateKey
PEM_write_bio_X509
RSA_generate_key_ex
RSA_new
X509V3_EXT_cleanup
X509V3_EXT_conf_nid
X509V3_set_ctx
X509_EXTENSION_free
X509_add_ext
X509_free
X509_new
X509_set1_notAfter
X509_set1_notBefore
X509_set_pubkey
X509_set_serialNumber
X509_set_version
X509_sign

libimobiledevice-glue-1.0

string_concat

libplist-2.0

plist_dict_get_item
plist_dict_set_item
plist_free
plist_from_memory
plist_get_data_val
plist_get_node_type
plist_get_string_val
plist_new_data
plist_new_string
plist_to_bin

libusbmuxd-2.0

usbmuxd_delete_pair_record
usbmuxd_read_buid
usbmuxd_read_pair_record
usbmuxd_save_pair_record_with_device_id

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/utils/libimobileinfo-1.0.dll
.exe windows:4 windows x64 arch:x64

03c1cf86aff9462df45abf97870a9370

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

libimobiledevice-1.0

idevice_free
idevice_new_with_options
idevice_set_debug_level
lockdownd_client_free
lockdownd_client_new
lockdownd_client_new_with_handshake
lockdownd_get_value
lockdownd_strerror

kernel32

DeleteCriticalSection
EnterCriticalSection
GetEnvironmentVariableW
GetLastError
GetStartupInfoA
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__argv
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_errno
_fmode
_initterm
_lock
_onexit
_unlock
abort
calloc
exit
fprintf
fputc
free
fwrite
localeconv
malloc
memcpy
memset
signal
strchr
strerror
strlen
strncmp
strrchr
strstr
vfprintf
wcslen

libimobiledevice-glue-1.0

plist_print_to_stream

libplist-2.0

plist_free
plist_to_xml

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/utils/libirecovery-1.0-dev.dll
.exe windows:4 windows x64 arch:x64

8282e07bc0c1fb8f85fecf754b612cf7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

libirecovery-1.0

irecv_close
irecv_devices_get_all
irecv_devices_get_device_by_client
irecv_event_subscribe
irecv_execute_script
irecv_get_device_info
irecv_get_mode
irecv_getenv
irecv_open_with_ecid
irecv_reboot
irecv_receive
irecv_reset
irecv_saveenv
irecv_send_command
irecv_send_file
irecv_set_debug_level
irecv_setenv
irecv_strerror
irecv_trigger_limera1n_exploit

kernel32

DeleteCriticalSection
EnterCriticalSection
GetEnvironmentVariableW
GetLastError
GetStartupInfoA
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte
__C_specific_handler

msvcrt

___lc_codepage_func
___mb_cur_max_func
__argv
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_errno
_fmode
_initterm
_lock
_onexit
_strdup
_unlock
abort
calloc
exit
fclose
fflush
fopen
fprintf
fputc
fread
free
fseek
ftell
fwrite
islower
isspace
isupper
localeconv
malloc
memcpy
memset
rewind
signal
strchr
strcmp
strerror
strlen
strncmp
strrchr
strstr
strtok
vfprintf
wcslen

libreadline8

add_history
read_history
readline
write_history

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/utils/libirecovery-1.0.dll
.dll windows:4 windows x64 arch:x64

21edb90c38b14eb68f39eae55496a09c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

CancelIo
CloseHandle
CreateEventA
CreateFileA
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
GetLastError
GetOverlappedResult
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_fileno
_fstat64
_initterm
_lock
_stricmp
_strdup
_unlock
abort
calloc
fclose
fopen
fputc
fread
free
fwrite
getc
getenv
islower
isspace
isupper
isxdigit
localeconv
malloc
memcpy
memset
realloc
strchr
strcmp
strerror
strlen
strncmp
strrchr
strstr
strtok
strtol
strtoul
tolower
toupper
ungetc
vfprintf
wcslen

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceRegistryPropertyA

libimobiledevice-glue-1.0

collection_add
collection_count
collection_free
collection_init
collection_remove
cond_destroy
cond_init
cond_signal
cond_wait
mutex_destroy
mutex_init
mutex_lock
mutex_unlock
thread_alive
thread_free
thread_join
thread_new
thread_once

Exports

Exports

irecv_close
irecv_device_event_subscribe
irecv_device_event_unsubscribe
irecv_devices_get_all
irecv_devices_get_device_by_client
irecv_devices_get_device_by_hardware_model
irecv_devices_get_device_by_product_type
irecv_event_subscribe
irecv_event_unsubscribe
irecv_execute_script
irecv_exit
irecv_finish_transfer
irecv_get_device_info
irecv_get_mode
irecv_getenv
irecv_getret
irecv_init
irecv_open_with_ecid
irecv_open_with_ecid_and_attempts
irecv_reboot
irecv_receive
irecv_reconnect
irecv_recv_buffer
irecv_reset
irecv_reset_counters
irecv_saveenv
irecv_send_buffer
irecv_send_command
irecv_send_command_breq
irecv_send_file
irecv_set_debug_level
irecv_setenv
irecv_strerror
irecv_trigger_limera1n_exploit
irecv_usb_bulk_transfer
irecv_usb_control_transfer
irecv_usb_set_configuration
irecv_usb_set_interface

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/utils/libplist++-2.0.dll
.dll windows:4 windows x64 arch:x64

3beb89e5c78aade87dd639191e366360

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

libplist-2.0

plist_array_append_item
plist_array_get_item_index
plist_array_get_size
plist_array_insert_item
plist_array_new_iter
plist_array_next_item
plist_array_remove_item
plist_copy
plist_dict_get_item_key
plist_dict_get_size
plist_dict_new_iter
plist_dict_next_item
plist_dict_remove_item
plist_dict_set_item
plist_free
plist_from_bin
plist_from_xml
plist_get_bool_val
plist_get_data_val
plist_get_date_val
plist_get_key_val
plist_get_node_type
plist_get_real_val
plist_get_string_val
plist_get_uid_val
plist_get_uint_val
plist_new_array
plist_new_bool
plist_new_data
plist_new_date
plist_new_dict
plist_new_real
plist_new_string
plist_new_uid
plist_new_uint
plist_set_bool_val
plist_set_data_val
plist_set_date_val
plist_set_key_val
plist_set_real_val
plist_set_string_val
plist_set_uid_val
plist_set_uint_val
plist_to_bin
plist_to_xml

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__iob_func
_amsg_exit
_initterm
_lock
_unlock
abort
calloc
free
fwrite
memcmp
memcpy
memmove
realloc
strlen
strncmp
vfprintf

libgcc_s_seh-1

_Unwind_Resume

libstdc++-6

_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE10_M_disposeEv
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_createERyy
_ZSt18_Rb_tree_decrementPSt18_Rb_tree_node_base
_ZSt18_Rb_tree_incrementPKSt18_Rb_tree_node_base
_ZSt18_Rb_tree_incrementPSt18_Rb_tree_node_base
_ZSt19__throw_logic_errorPKc
_ZSt20__throw_length_errorPKc
_ZSt24__throw_out_of_range_fmtPKcz
_ZSt28_Rb_tree_rebalance_for_erasePSt18_Rb_tree_node_baseRS_
_ZSt29_Rb_tree_insert_and_rebalancebPSt18_Rb_tree_node_baseS0_RS_
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZdlPvy
_Znwy
__cxa_begin_catch
__cxa_end_catch
__cxa_pure_virtual
__cxa_rethrow
__gxx_personality_seh0

Exports

Exports

_ZN5PList10Dictionary10GetNodeKeyB5cxx11EPNS_4NodeE
_ZN5PList10Dictionary3EndB5cxx11Ev
_ZN5PList10Dictionary3SetERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEPKNS_4NodeE
_ZN5PList10Dictionary3SetERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERKNS_4NodeE
_ZN5PList10Dictionary4FindERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5PList10Dictionary5BeginB5cxx11Ev
_ZN5PList10Dictionary6InsertERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEPNS_4NodeE
_ZN5PList10Dictionary6RemoveEPNS_4NodeE
_ZN5PList10Dictionary6RemoveERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5PList10DictionaryC1EPNS_4NodeE
_ZN5PList10DictionaryC1EPvPNS_4NodeE
_ZN5PList10DictionaryC1ERKS0_
_ZN5PList10DictionaryC2EPNS_4NodeE
_ZN5PList10DictionaryC2EPvPNS_4NodeE
_ZN5PList10DictionaryC2ERKS0_
_ZN5PList10DictionaryD0Ev
_ZN5PList10DictionaryD1Ev
_ZN5PList10DictionaryD2Ev
_ZN5PList10DictionaryaSERKS0_
_ZN5PList10DictionaryixERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5PList3Key8SetValueERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5PList3KeyC1EPNS_4NodeE
_ZN5PList3KeyC1EPvPNS_4NodeE
_ZN5PList3KeyC1ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5PList3KeyC1ERKS0_
_ZN5PList3KeyC2EPNS_4NodeE
_ZN5PList3KeyC2EPvPNS_4NodeE
_ZN5PList3KeyC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5PList3KeyC2ERKS0_
_ZN5PList3KeyD0Ev
_ZN5PList3KeyD1Ev
_ZN5PList3KeyD2Ev
_ZN5PList3KeyaSERKS0_
_ZN5PList3Uid8SetValueEy
_ZN5PList3UidC1EPNS_4NodeE
_ZN5PList3UidC1EPvPNS_4NodeE
_ZN5PList3UidC1ERKS0_
_ZN5PList3UidC1Ey
_ZN5PList3UidC2EPNS_4NodeE
_ZN5PList3UidC2EPvPNS_4NodeE
_ZN5PList3UidC2ERKS0_
_ZN5PList3UidC2Ey
_ZN5PList3UidD0Ev
_ZN5PList3UidD1Ev
_ZN5PList3UidD2Ev
_ZN5PList3UidaSERKS0_
_ZN5PList4Data8SetValueERKSt6vectorIcSaIcEE
_ZN5PList4DataC1EPNS_4NodeE
_ZN5PList4DataC1EPvPNS_4NodeE
_ZN5PList4DataC1ERKS0_
_ZN5PList4DataC1ERKSt6vectorIcSaIcEE
_ZN5PList4DataC2EPNS_4NodeE
_ZN5PList4DataC2EPvPNS_4NodeE
_ZN5PList4DataC2ERKS0_
_ZN5PList4DataC2ERKSt6vectorIcSaIcEE
_ZN5PList4DataD0Ev
_ZN5PList4DataD1Ev
_ZN5PList4DataD2Ev
_ZN5PList4DataaSERKS0_
_ZN5PList4Date8SetValueE7timeval
_ZN5PList4DateC1E7timeval
_ZN5PList4DateC1EPNS_4NodeE
_ZN5PList4DateC1EPvPNS_4NodeE
_ZN5PList4DateC1ERKS0_
_ZN5PList4DateC2E7timeval
_ZN5PList4DateC2EPNS_4NodeE
_ZN5PList4DateC2EPvPNS_4NodeE
_ZN5PList4DateC2ERKS0_
_ZN5PList4DateD0Ev
_ZN5PList4DateD1Ev
_ZN5PList4DateD2Ev
_ZN5PList4DateaSERKS0_
_ZN5PList4Node9FromPlistEPvPS0_
_ZN5PList4NodeC1E10plist_typePS0_
_ZN5PList4NodeC1EPS0_
_ZN5PList4NodeC1EPvPS0_
_ZN5PList4NodeC2E10plist_typePS0_
_ZN5PList4NodeC2EPS0_
_ZN5PList4NodeC2EPvPS0_
_ZN5PList4NodeD0Ev
_ZN5PList4NodeD1Ev
_ZN5PList4NodeD2Ev
_ZN5PList4Real8SetValueEd
_ZN5PList4RealC1EPNS_4NodeE
_ZN5PList4RealC1EPvPNS_4NodeE
_ZN5PList4RealC1ERKS0_
_ZN5PList4RealC1Ed
_ZN5PList4RealC2EPNS_4NodeE
_ZN5PList4RealC2EPvPNS_4NodeE
_ZN5PList4RealC2ERKS0_
_ZN5PList4RealC2Ed
_ZN5PList4RealD0Ev
_ZN5PList4RealD1Ev
_ZN5PList4RealD2Ev
_ZN5PList4RealaSERKS0_
_ZN5PList5Array6AppendEPNS_4NodeE
_ZN5PList5Array6InsertEPNS_4NodeEj
_ZN5PList5Array6RemoveEPNS_4NodeE
_ZN5PList5Array6RemoveEj
_ZN5PList5ArrayC1EPNS_4NodeE
_ZN5PList5ArrayC1EPvPNS_4NodeE
_ZN5PList5ArrayC1ERKS0_
_ZN5PList5ArrayC2EPNS_4NodeE
_ZN5PList5ArrayC2EPvPNS_4NodeE
_ZN5PList5ArrayC2ERKS0_
_ZN5PList5ArrayD0Ev
_ZN5PList5ArrayD1Ev
_ZN5PList5ArrayD2Ev
_ZN5PList5ArrayaSERKS0_
_ZN5PList5ArrayixEj
_ZN5PList6String8SetValueERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5PList6StringC1EPNS_4NodeE
_ZN5PList6StringC1EPvPNS_4NodeE
_ZN5PList6StringC1ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5PList6StringC1ERKS0_
_ZN5PList6StringC2EPNS_4NodeE
_ZN5PList6StringC2EPvPNS_4NodeE
_ZN5PList6StringC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5PList6StringC2ERKS0_
_ZN5PList6StringD0Ev
_ZN5PList6StringD1Ev
_ZN5PList6StringD2Ev
_ZN5PList6StringaSERKS0_
_ZN5PList7Boolean8SetValueEb
_ZN5PList7BooleanC1EPNS_4NodeE
_ZN5PList7BooleanC1EPvPNS_4NodeE
_ZN5PList7BooleanC1ERKS0_
_ZN5PList7BooleanC1Eb
_ZN5PList7BooleanC2EPNS_4NodeE
_ZN5PList7BooleanC2EPvPNS_4NodeE
_ZN5PList7BooleanC2ERKS0_
_ZN5PList7BooleanC2Eb
_ZN5PList7BooleanD0Ev
_ZN5PList7BooleanD1Ev
_ZN5PList7BooleanD2Ev
_ZN5PList7BooleanaSERKS0_
_ZN5PList7Integer8SetValueEy
_ZN5PList7IntegerC1EPNS_4NodeE
_ZN5PList7IntegerC1EPvPNS_4NodeE
_ZN5PList7IntegerC1ERKS0_
_ZN5PList7IntegerC1Ey
_ZN5PList7IntegerC2EPNS_4NodeE
_ZN5PList7IntegerC2EPvPNS_4NodeE
_ZN5PList7IntegerC2ERKS0_
_ZN5PList7IntegerC2Ey
_ZN5PList7IntegerD0Ev
_ZN5PList7IntegerD1Ev
_ZN5PList7IntegerD2Ev
_ZN5PList7IntegeraSERKS0_
_ZN5PList9Structure16UpdateNodeParentEPNS_4NodeE
_ZN5PList9Structure7FromBinERKSt6vectorIcSaIcEE
_ZN5PList9Structure7FromXmlERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5PList9StructureC1E10plist_typePNS_4NodeE
_ZN5PList9StructureC1EPNS_4NodeE
_ZN5PList9StructureC2E10plist_typePNS_4NodeE
_ZN5PList9StructureC2EPNS_4NodeE
_ZN5PList9StructureD0Ev
_ZN5PList9StructureD1Ev
_ZN5PList9StructureD2Ev
_ZNK5PList10Dictionary3EndB5cxx11Ev
_ZNK5PList10Dictionary4FindERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZNK5PList10Dictionary5BeginB5cxx11Ev
_ZNK5PList10Dictionary5CloneEv
_ZNK5PList3Key5CloneEv
_ZNK5PList3Key8GetValueB5cxx11Ev
_ZNK5PList3Uid5CloneEv
_ZNK5PList3Uid8GetValueEv
_ZNK5PList4Data5CloneEv
_ZNK5PList4Data8GetValueEv
_ZNK5PList4Date5CloneEv
_ZNK5PList4Date8GetValueEv
_ZNK5PList4Node7GetTypeEv
_ZNK5PList4Node8GetPlistEv
_ZNK5PList4Node9GetParentEv
_ZNK5PList4Real5CloneEv
_ZNK5PList4Real8GetValueEv
_ZNK5PList5Array12GetNodeIndexEPNS_4NodeE
_ZNK5PList5Array5CloneEv
_ZNK5PList6String5CloneEv
_ZNK5PList6String8GetValueB5cxx11Ev
_ZNK5PList7Boolean5CloneEv
_ZNK5PList7Boolean8GetValueEv
_ZNK5PList7Integer5CloneEv
_ZNK5PList7Integer8GetValueEv
_ZNK5PList9Structure5ToBinEv
_ZNK5PList9Structure5ToXmlB5cxx11Ev
_ZNK5PList9Structure7GetSizeEv
_ZNSt12_Vector_baseIPN5PList4NodeESaIS2_EED2Ev
_ZNSt12_Vector_baseIcSaIcEED2Ev
_ZNSt6vectorIPN5PList4NodeESaIS2_EE17_M_realloc_insertIJRKS2_EEEvN9__gnu_cxx17__normal_iteratorIPS2_S4_EEDpOT_
_ZNSt6vectorIPN5PList4NodeESaIS2_EE17_M_realloc_insertIJS2_EEEvN9__gnu_cxx17__normal_iteratorIPS2_S4_EEDpOT_
_ZNSt6vectorIPN5PList4NodeESaIS2_EE8_M_eraseEN9__gnu_cxx17__normal_iteratorIPS2_S4_EE
_ZNSt8_Rb_treeINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_PN5PList4NodeEESt10_Select1stISB_ESt4lessIS5_ESaISB_EE11equal_rangeERS7_
_ZNSt8_Rb_treeINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_PN5PList4NodeEESt10_Select1stISB_ESt4lessIS5_ESaISB_EE24_M_get_insert_unique_posERS7_
_ZNSt8_Rb_treeINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_PN5PList4NodeEESt10_Select1stISB_ESt4lessIS5_ESaISB_EE29_M_get_insert_hint_unique_posESt23_Rb_tree_const_iteratorISB_ERS7_
_ZNSt8_Rb_treeINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_PN5PList4NodeEESt10_Select1stISB_ESt4lessIS5_ESaISB_EE4findERS7_
_ZTIN5PList10DictionaryE
_ZTIN5PList3KeyE
_ZTIN5PList3UidE
_ZTIN5PList4DataE
_ZTIN5PList4DateE
_ZTIN5PList4NodeE
_ZTIN5PList4RealE
_ZTIN5PList5ArrayE
_ZTIN5PList6StringE
_ZTIN5PList7BooleanE
_ZTIN5PList7IntegerE
_ZTIN5PList9StructureE
_ZTSN5PList10DictionaryE
_ZTSN5PList3KeyE
_ZTSN5PList3UidE
_ZTSN5PList4DataE
_ZTSN5PList4DateE
_ZTSN5PList4NodeE
_ZTSN5PList4RealE
_ZTSN5PList5ArrayE
_ZTSN5PList6StringE
_ZTSN5PList7BooleanE
_ZTSN5PList7IntegerE
_ZTSN5PList9StructureE
_ZTVN5PList10DictionaryE
_ZTVN5PList3KeyE
_ZTVN5PList3UidE
_ZTVN5PList4DataE
_ZTVN5PList4DateE
_ZTVN5PList4NodeE
_ZTVN5PList4RealE
_ZTVN5PList5ArrayE
_ZTVN5PList6StringE
_ZTVN5PList7BooleanE
_ZTVN5PList7IntegerE
_ZTVN5PList9StructureE

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 272B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 543KB - Virtual size: 543KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/utils/libplist-2.0.dll
.dll windows:4 windows x64 arch:x64

9f6d5ff59007f095862c71837f0b3389

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
__setusermatherr
_amsg_exit
_assert
_errno
_initterm
_localtime64
_lock
_mktime64
_strdup
_unlock
abort
atof
calloc
fputc
free
fwrite
getc
islower
isspace
isupper
isxdigit
localeconv
malloc
memcmp
memcpy
memmove
memset
realloc
strcmp
strerror
strftime
strlen
strncmp
strncpy
strstr
strtol
strtoul
tolower
ungetc
vfprintf
wcslen

Exports

Exports

plist_access_path
plist_access_pathv
plist_array_append_item
plist_array_get_item
plist_array_get_item_index
plist_array_get_size
plist_array_insert_item
plist_array_item_remove
plist_array_new_iter
plist_array_next_item
plist_array_remove_item
plist_array_set_item
plist_bool_val_is_true
plist_compare_node_value
plist_copy
plist_data_val_compare
plist_data_val_compare_with_size
plist_data_val_contains
plist_date_val_compare
plist_dict_get_item
plist_dict_get_item_key
plist_dict_get_size
plist_dict_insert_item
plist_dict_item_get_key
plist_dict_merge
plist_dict_new_iter
plist_dict_next_item
plist_dict_remove_item
plist_dict_set_item
plist_free
plist_from_bin
plist_from_json
plist_from_memory
plist_from_xml
plist_get_bool_val
plist_get_data_ptr
plist_get_data_val
plist_get_date_val
plist_get_key_val
plist_get_node_type
plist_get_parent
plist_get_real_val
plist_get_string_ptr
plist_get_string_val
plist_get_uid_val
plist_get_uint_val
plist_is_binary
plist_key_val_compare
plist_key_val_compare_with_size
plist_key_val_contains
plist_mem_free
plist_new_array
plist_new_bool
plist_new_data
plist_new_date
plist_new_dict
plist_new_null
plist_new_real
plist_new_string
plist_new_uid
plist_new_uint
plist_real_val_compare
plist_set_bool_val
plist_set_data_val
plist_set_date_val
plist_set_key_val
plist_set_real_val
plist_set_string_val
plist_set_uid_val
plist_set_uint_val
plist_string_val_compare
plist_string_val_compare_with_size
plist_string_val_contains
plist_to_bin
plist_to_json
plist_to_xml
plist_uid_val_compare
plist_uint_val_compare

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 207KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 310KB - Virtual size: 310KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/utils/libre.dll
MagicCFGWin_v1.2/resources/utils/libreadline8.dll
.dll windows:4 windows x64 arch:x64

3204f5ba2f9d9d7a6c5decab6893e002

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libtermcap-0

tgetent
tgetflag
tgetnum
tgetstr
tputs

kernel32

DeleteCriticalSection
EnterCriticalSection
GetConsoleMode
GetConsoleScreenBufferInfo
GetFileAttributesA
GetLastError
GetStdHandle
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MoveFileExA
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_close
_errno
_findclose
_fileno
_findfirst64
_findnext64
_fstat64
_fullpath
_get_osfhandle
_getch
_getpid
_initterm
_isatty
_kbhit
_lock
_open
_putenv
_read
_setjmp
_stat64
_stricmp
_strnicmp
_time64
_unlink
_unlock
_write
abort
atoi
calloc
exit
fflush
fputc
free
fwrite
getenv
isalnum
isalpha
islower
isprint
ispunct
isupper
isxdigit
localeconv
longjmp
malloc
memcpy
memmove
memset
putc
qsort
raise
realloc
setlocale
signal
strcat
strchr
strcmp
strcpy
strerror
strlen
strncmp
strncpy
strpbrk
strrchr
strtol
tolower
toupper
vfprintf
wcslen

user32

CloseClipboard
GetClipboardData
OpenClipboard

Exports

Exports

BC
PC
UP
_hs_append_history_line
_hs_history_patsearch
_hs_replace_history_data
_rl_abort_internal
_rl_add_macro_char
_rl_allow_pathname_alphabetic_chars
_rl_any_typein
_rl_arg_callback
_rl_arg_dispatch
_rl_arg_getchar
_rl_arg_init
_rl_arg_overflow
_rl_argcxt
_rl_backspace
_rl_backward_char_internal
_rl_bell_preference
_rl_bind_stty_chars
_rl_block_sigint
_rl_block_sigwinch
_rl_bracketed_text
_rl_callback_data
_rl_callback_data_alloc
_rl_callback_data_dispose
_rl_callback_func
_rl_caught_signal
_rl_char_search_internal
_rl_clean_up_for_exit
_rl_clear_screen
_rl_clear_to_eol
_rl_color_ext_list
_rl_color_indicator
_rl_colored_completion_prefix
_rl_colored_stats
_rl_comment_begin
_rl_complete_mark_directories
_rl_complete_mark_symlink_dirs
_rl_complete_show_all
_rl_complete_show_unmodified
_rl_completion_case_fold
_rl_completion_case_map
_rl_completion_columns
_rl_completion_prefix_display_length
_rl_control_keypad
_rl_convert_meta_chars_to_ascii
_rl_copy_undo_entry
_rl_copy_undo_list
_rl_current_display_line
_rl_digit_p
_rl_digit_value
_rl_disable_meta_key
_rl_disable_tty_signals
_rl_dispatch
_rl_dispatch_callback
_rl_dispatch_subseq
_rl_dispatching_keymap
_rl_doing_an_undo
_rl_echo_control_chars
_rl_echoctl
_rl_echoing_p
_rl_emacs_mode_str
_rl_emacs_modestr_len
_rl_enable_bracketed_paste
_rl_enable_keypad
_rl_enable_meta
_rl_enable_meta_key
_rl_enable_paren_matching
_rl_eof_char
_rl_eof_found
_rl_erase_at_end_of_line
_rl_erase_entire_line
_rl_errmsg
_rl_executing_keyseq_size
_rl_find_completion_word
_rl_find_next_mbchar
_rl_find_prev_mbchar
_rl_fix_last_undo_of_type
_rl_fix_point
_rl_forward_char_internal
_rl_free_history_entry
_rl_free_match_list
_rl_free_saved_history_line
_rl_free_undo_list
_rl_get_screen_size
_rl_history_preserve_point
_rl_history_saved_point
_rl_horizontal_scroll_mode
_rl_in_stream
_rl_init_eightbit
_rl_init_line_state
_rl_init_locale
_rl_init_terminal_io
_rl_input_available
_rl_input_queued
_rl_insert_char
_rl_insert_typein
_rl_internal_char_cleanup
_rl_interrupt_immediately
_rl_intr_char
_rl_iscxt
_rl_isearch_callback
_rl_isearch_cleanup
_rl_isearch_dispatch
_rl_isearch_terminators
_rl_keymap
_rl_keyseq_chain_dispose
_rl_keyseq_cxt_alloc
_rl_keyseq_cxt_dispose
_rl_keyseq_timeout
_rl_kill_kbd_macro
_rl_kscxt
_rl_last_c_pos
_rl_last_command_was_kill
_rl_last_v_pos
_rl_lowercase_p
_rl_make_prompt_for_search
_rl_mark_modified_lines
_rl_match_hidden_files
_rl_menu_complete_prefix_first
_rl_meta_flag
_rl_move_cursor_relative
_rl_move_vert
_rl_next_macro_key
_rl_nscxt
_rl_nsearch_callback
_rl_nsearch_cleanup
_rl_null_function
_rl_optimize_typeahead
_rl_out_stream
_rl_output_character_function
_rl_output_meta_chars
_rl_output_some_chars
_rl_overwrite_char
_rl_overwrite_rubout
_rl_page_completions
_rl_parse_colors
_rl_parsing_conditionalized_out
_rl_peek_macro_key
_rl_pop_executing_macro
_rl_possible_control_prefixes
_rl_possible_meta_prefixes
_rl_prep_non_filename_text
_rl_prev_macro_key
_rl_print_color_indicator
_rl_print_completions_horizontally
_rl_print_prefix_color
_rl_pure_alphabetic
_rl_push_executing_macro
_rl_pushed_input_available
_rl_put_indicator
_rl_qsort_string_compare
_rl_quit_char
_rl_redisplay_after_sigwinch
_rl_release_sigint
_rl_release_sigwinch
_rl_replace_text
_rl_reset_argument
_rl_reset_completion_state
_rl_reset_prompt
_rl_restore_tty_signals
_rl_revert_all_at_newline
_rl_revert_all_lines
_rl_rubout_char
_rl_saved_line_for_history
_rl_savestring
_rl_screenchars
_rl_screenheight
_rl_screenwidth
_rl_scxt_alloc
_rl_scxt_dispose
_rl_search_getchar
_rl_set_cursor
_rl_set_insert_mode
_rl_set_mark_at_pos
_rl_set_normal_color
_rl_set_screen_size
_rl_set_the_line
_rl_show_mode_in_prompt
_rl_sigcleanarg
_rl_sigcleanup
_rl_signal_handler
_rl_sigwinch_resize_terminal
_rl_skip_completed_text
_rl_start_using_history
_rl_strindex
_rl_strip_prompt
_rl_suppress_redisplay
_rl_susp_char
_rl_term_DC
_rl_term_IC
_rl_term_autowrap
_rl_term_backspace
_rl_term_clreol
_rl_term_clrpag
_rl_term_clrscroll
_rl_term_cr
_rl_term_dc
_rl_term_ei
_rl_term_forward_char
_rl_term_goto
_rl_term_ic
_rl_term_im
_rl_term_ip
_rl_term_pc
_rl_term_up
_rl_terminal_can_insert
_rl_to_lower
_rl_to_upper
_rl_top_level
_rl_ttyflush
_rl_ttymsg
_rl_undo_group_level
_rl_unget_char
_rl_untranslate_macro_value
_rl_update_final
_rl_uppercase_p
_rl_utf8locale
_rl_vi_cmd_mode_str
_rl_vi_cmd_modestr_len
_rl_vi_domove_callback
_rl_vi_domove_motion_cleanup
_rl_vi_done_inserting
_rl_vi_initialize_line
_rl_vi_ins_mode_str
_rl_vi_ins_modestr_len
_rl_vi_last_command
_rl_vi_motion_command
_rl_vi_redoing
_rl_vi_reset_last
_rl_vi_set_last
_rl_vi_textmod_command
_rl_vimvcxt
_rl_vis_botlin
_rl_want_redisplay
_rl_with_macro_input
add_history
add_history_time
alloc_history_entry
alphabetic
append_history
clear_history
completion_matches
copy_history_entry
crlf
current_history
ding
emacs_ctlx_keymap
emacs_meta_keymap
emacs_standard_keymap
filename_completion_function
free_history_entry
free_undo_list
funmap
funmap_program_specific_entry_start
get_history_event
history_arg_extract
history_base
history_comment_char
history_expand
history_expansion_char
history_file_version
history_get
history_get_history_state
history_get_time
history_inhibit_expansion_function
history_is_stifled
history_length
history_lines_read_from_file
history_lines_written_to_file
history_list
history_max_entries
history_multiline_entries
history_no_expand_chars
history_offset
history_quotes_inhibit_expansion
history_quoting_state
history_search
history_search_delimiter_chars
history_search_pos
history_search_prefix
history_set_history_state
history_set_pos
history_subst_char
history_tokenize
history_total_bytes
history_truncate_file
history_word_delimiters
history_write_timestamps
max_input_history
maybe_replace_line
maybe_save_line
maybe_unsave_line
next_history
previous_history
read_history
read_history_range
readline
readline_internal_char
readline_internal_setup
readline_internal_teardown
remove_history
remove_history_range
replace_history_entry
rl_abort
rl_add_defun
rl_add_funmap_entry
rl_add_undo
rl_alphabetic
rl_already_prompted
rl_arg_sign
rl_arrow_keys
rl_attempted_completion_function
rl_attempted_completion_over
rl_backward
rl_backward_byte
rl_backward_char
rl_backward_char_search
rl_backward_kill_line
rl_backward_kill_word
rl_backward_menu_complete
rl_backward_word
rl_basic_quote_characters
rl_basic_word_break_characters
rl_beg_of_line
rl_begin_undo_group
rl_beginning_of_history
rl_bind_key
rl_bind_key_if_unbound
rl_bind_key_if_unbound_in_map
rl_bind_key_in_map
rl_bind_keyseq
rl_bind_keyseq_if_unbound
rl_bind_keyseq_if_unbound_in_map
rl_bind_keyseq_in_map
rl_binding_keymap
rl_blink_matching_paren
rl_bracketed_paste_begin
rl_byte_oriented
rl_call_last_kbd_macro
rl_callback_handler_install
rl_callback_handler_remove
rl_callback_read_char
rl_callback_sigcleanup
rl_capitalize_word
rl_catch_signals
rl_catch_sigwinch
rl_change_environment
rl_char_is_quoted_p
rl_char_search
rl_character_len
rl_check_signals
rl_cleanup_after_signal
rl_clear_history
rl_clear_message
rl_clear_pending_input
rl_clear_screen
rl_clear_signals
rl_clear_visible_line
rl_complete
rl_complete_internal
rl_complete_with_tilde_expansion
rl_completer_quote_characters
rl_completer_word_break_characters
rl_completion_append_character
rl_completion_display_matches_hook
rl_completion_entry_function
rl_completion_found_quote
rl_completion_invoking_key
rl_completion_mark_symlink_dirs
rl_completion_matches
rl_completion_mode
rl_completion_query_items
rl_completion_quote_character
rl_completion_suppress_append
rl_completion_suppress_quote
rl_completion_type
rl_completion_word_break_hook
rl_copy_backward_word
rl_copy_forward_word
rl_copy_keymap
rl_copy_region_to_kill
rl_copy_text
rl_crlf
rl_delete
rl_delete_horizontal_space
rl_delete_or_show_completions
rl_delete_text
rl_deprep_term_function
rl_deprep_terminal
rl_digit_argument
rl_ding
rl_directory_completion_hook
rl_directory_rewrite_hook
rl_discard_argument
rl_discard_keymap
rl_dispatching
rl_display_fixed
rl_display_match_list
rl_display_prompt
rl_do_lowercase_version
rl_do_undo
rl_done
rl_downcase_word
rl_dump_functions
rl_dump_macros
rl_dump_variables
rl_echo_signal_char
rl_editing_mode
rl_emacs_editing_mode
rl_empty_keymap
rl_end
rl_end_kbd_macro
rl_end_of_history
rl_end_of_line
rl_end_undo_group
rl_erase_empty_line
rl_event_hook
rl_exchange_point_and_mark
rl_execute_next
rl_executing_key
rl_executing_keymap
rl_executing_keyseq
rl_executing_macro
rl_expand_prompt
rl_explicit_arg
rl_extend_line_buffer
rl_filename_completion_desired
rl_filename_completion_function
rl_filename_dequoting_function
rl_filename_quote_characters
rl_filename_quoting_desired
rl_filename_quoting_function
rl_filename_rewrite_hook
rl_filename_stat_hook
rl_forced_update_display
rl_forward
rl_forward_byte
rl_forward_char
rl_forward_search_history
rl_forward_word
rl_free
rl_free_keymap
rl_free_line_state
rl_free_undo_list
rl_function_dumper
rl_function_of_keyseq
rl_function_of_keyseq_len
rl_funmap_names
rl_generic_bind
rl_get_keymap
rl_get_keymap_by_name
rl_get_keymap_name
rl_get_keymap_name_from_edit_mode
rl_get_next_history
rl_get_previous_history
rl_get_screen_size
rl_get_termcap
rl_getc
rl_getc_function
rl_gnu_readline_p
rl_history_search_backward
rl_history_search_forward
rl_history_substr_search_backward
rl_history_substr_search_forward
rl_ignore_completion_duplicates
rl_ignore_some_completions_function
rl_inhibit_completion
rl_initialize
rl_initialize_funmap
rl_input_available_hook
rl_insert
rl_insert_close
rl_insert_comment
rl_insert_completions
rl_insert_mode
rl_insert_text
rl_instream
rl_invoking_keyseqs
rl_invoking_keyseqs_in_map
rl_key_sequence_length
rl_kill_full_line
rl_kill_line
rl_kill_region
rl_kill_text
rl_kill_word
rl_last_func
rl_library_version
rl_line_buffer
rl_line_buffer_len
rl_linefunc
rl_list_funmap_names
rl_macro_bind
rl_macro_dumper
rl_make_bare_keymap
rl_make_keymap
rl_mark
rl_maybe_replace_line
rl_maybe_save_line

Sections

.text
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/utils/libssl-1_1-x64.dll
.dll windows:4 windows x64 arch:x64

c521392180028a24177ab60a3a7e6f4d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libcrypto-1_1-x64

ASN1_ANY_it
ASN1_OCTET_STRING_it
ASN1_TYPE_get
ASN1_item_d2i
ASN1_item_free
ASN1_item_i2d
ASN1_item_new
ASYNC_WAIT_CTX_free
ASYNC_WAIT_CTX_get_all_fds
ASYNC_WAIT_CTX_get_changed_fds
ASYNC_WAIT_CTX_new
ASYNC_get_current_job
ASYNC_start_job
BIO_ADDR_clear
BIO_ADDR_free
BIO_ADDR_new
BIO_callback_ctrl
BIO_clear_flags
BIO_copy_next_retry
BIO_ctrl
BIO_dump_indent
BIO_f_buffer
BIO_find_type
BIO_free
BIO_free_all
BIO_get_data
BIO_get_init
BIO_get_retry_reason
BIO_get_shutdown
BIO_int_ctrl
BIO_method_type
BIO_new
BIO_next
BIO_pop
BIO_printf
BIO_push
BIO_puts
BIO_read
BIO_s_connect
BIO_s_file
BIO_s_mem
BIO_s_socket
BIO_set_data
BIO_set_flags
BIO_set_init
BIO_set_next
BIO_set_retry_reason
BIO_set_shutdown
BIO_snprintf
BIO_test_flags
BIO_up_ref
BIO_write
BN_bin2bn
BN_bn2bin
BN_clear_free
BN_copy
BN_dup
BN_free
BN_get_rfc2409_prime_1024
BN_get_rfc3526_prime_2048
BN_get_rfc3526_prime_3072
BN_get_rfc3526_prime_4096
BN_get_rfc3526_prime_8192
BN_is_zero
BN_new
BN_num_bits
BN_set_word
BN_ucmp
BUF_MEM_free
BUF_MEM_grow
BUF_MEM_grow_clean
BUF_MEM_new
BUF_reverse
COMP_CTX_free
COMP_CTX_get_method
COMP_CTX_new
COMP_compress_block
COMP_expand_block
COMP_get_name
COMP_get_type
COMP_zlib
CONF_parse_list
CRYPTO_THREAD_lock_free
CRYPTO_THREAD_lock_new
CRYPTO_THREAD_read_lock
CRYPTO_THREAD_run_once
CRYPTO_THREAD_unlock
CRYPTO_THREAD_write_lock
CRYPTO_clear_free
CRYPTO_dup_ex_data
CRYPTO_free
CRYPTO_free_ex_data
CRYPTO_get_ex_data
CRYPTO_get_ex_new_index
CRYPTO_malloc
CRYPTO_mem_ctrl
CRYPTO_memcmp
CRYPTO_memdup
CRYPTO_new_ex_data
CRYPTO_realloc
CRYPTO_secure_free
CRYPTO_secure_zalloc
CRYPTO_set_ex_data
CRYPTO_strdup
CRYPTO_strndup
CRYPTO_zalloc
CTLOG_STORE_free
CTLOG_STORE_load_default_file
CTLOG_STORE_load_file
CTLOG_STORE_new
CT_POLICY_EVAL_CTX_free
CT_POLICY_EVAL_CTX_new
CT_POLICY_EVAL_CTX_set1_cert
CT_POLICY_EVAL_CTX_set1_issuer
CT_POLICY_EVAL_CTX_set_shared_CTLOG_STORE
CT_POLICY_EVAL_CTX_set_time
DH_check_params
DH_free
DH_get0_key
DH_get0_pqg
DH_new
DH_set0_key
DH_set0_pqg
EC_GROUP_get_curve_name
EC_GROUP_method_of
EC_KEY_can_sign
EC_KEY_free
EC_KEY_get0_group
EC_KEY_get_conv_form
EC_KEY_new_by_curve_name
EC_METHOD_get_field_type
EC_curve_nist2nid
ENGINE_finish
ENGINE_get_ssl_client_cert_function
ENGINE_init
ENGINE_load_ssl_client_cert
ERR_add_error_data
ERR_clear_error
ERR_func_error_string
ERR_load_strings_const
ERR_peek_error
ERR_peek_last_error
ERR_pop_to_mark
ERR_put_error
ERR_set_mark
EVP_CIPHER_CTX_block_size
EVP_CIPHER_CTX_cipher
EVP_CIPHER_CTX_ctrl
EVP_CIPHER_CTX_free
EVP_CIPHER_CTX_iv_length
EVP_CIPHER_CTX_new
EVP_CIPHER_CTX_reset
EVP_CIPHER_block_size
EVP_CIPHER_flags
EVP_CIPHER_iv_length
EVP_CIPHER_key_length
EVP_Cipher
EVP_CipherFinal_ex
EVP_CipherInit_ex
EVP_CipherUpdate
EVP_DecryptFinal
EVP_DecryptInit_ex
EVP_DecryptUpdate
EVP_Digest
EVP_DigestFinal
EVP_DigestFinal_ex
EVP_DigestInit
EVP_DigestInit_ex
EVP_DigestSign
EVP_DigestSignFinal
EVP_DigestSignInit
EVP_DigestUpdate
EVP_DigestVerify
EVP_DigestVerifyFinal
EVP_DigestVerifyInit
EVP_EncryptFinal
EVP_EncryptInit_ex
EVP_EncryptUpdate
EVP_MD_CTX_copy
EVP_MD_CTX_copy_ex
EVP_MD_CTX_ctrl
EVP_MD_CTX_free
EVP_MD_CTX_md
EVP_MD_CTX_new
EVP_MD_CTX_set_flags
EVP_MD_size
EVP_MD_type
EVP_PKEY_CTX_ctrl
EVP_PKEY_CTX_free
EVP_PKEY_CTX_new
EVP_PKEY_CTX_new_id
EVP_PKEY_asn1_find_str
EVP_PKEY_asn1_get0_info
EVP_PKEY_assign
EVP_PKEY_cmp
EVP_PKEY_copy_parameters
EVP_PKEY_decrypt
EVP_PKEY_decrypt_init
EVP_PKEY_derive
EVP_PKEY_derive_init
EVP_PKEY_derive_set_peer
EVP_PKEY_encrypt
EVP_PKEY_encrypt_init
EVP_PKEY_free
EVP_PKEY_get0
EVP_PKEY_get0_DH
EVP_PKEY_get0_EC_KEY
EVP_PKEY_get0_RSA
EVP_PKEY_get1_tls_encodedpoint
EVP_PKEY_get_default_digest_nid
EVP_PKEY_id
EVP_PKEY_keygen
EVP_PKEY_keygen_init
EVP_PKEY_missing_parameters
EVP_PKEY_new
EVP_PKEY_new_mac_key
EVP_PKEY_new_raw_private_key
EVP_PKEY_paramgen
EVP_PKEY_paramgen_init
EVP_PKEY_security_bits
EVP_PKEY_set1_DH
EVP_PKEY_set1_tls_encodedpoint
EVP_PKEY_set_type
EVP_PKEY_size
EVP_PKEY_up_ref
EVP_add_cipher
EVP_add_digest
EVP_aes_128_cbc
EVP_aes_128_cbc_hmac_sha1
EVP_aes_128_cbc_hmac_sha256
EVP_aes_128_ccm
EVP_aes_128_gcm
EVP_aes_192_cbc
EVP_aes_256_cbc
EVP_aes_256_cbc_hmac_sha1
EVP_aes_256_cbc_hmac_sha256
EVP_aes_256_ccm
EVP_aes_256_gcm
EVP_aria_128_gcm
EVP_aria_256_gcm
EVP_camellia_128_cbc
EVP_camellia_256_cbc
EVP_chacha20_poly1305
EVP_des_cbc
EVP_des_ede3_cbc
EVP_enc_null
EVP_get_cipherbyname
EVP_get_digestbyname
EVP_idea_cbc
EVP_md5
EVP_md5_sha1
EVP_rc2_40_cbc
EVP_rc2_cbc
EVP_rc4
EVP_rc4_hmac_md5
EVP_seed_cbc
EVP_sha1
EVP_sha224
EVP_sha256
EVP_sha384
EVP_sha512
HMAC_CTX_free
HMAC_CTX_new
HMAC_Final
HMAC_Init_ex
HMAC_Update
HMAC_size
INT32_it
MD5_Init
MD5_Transform
OBJ_NAME_add
OBJ_bsearch_
OBJ_ln2nid
OBJ_nid2sn
OBJ_sn2nid
OCSP_BASICRESP_free
OCSP_RESPID_free
OCSP_RESPONSE_free
OCSP_SINGLERESP_get1_ext_d2i
OCSP_resp_count
OCSP_resp_get0
OCSP_response_get1_basic
OPENSSL_DIR_end
OPENSSL_DIR_read
OPENSSL_LH_delete
OPENSSL_LH_doall_arg
OPENSSL_LH_free
OPENSSL_LH_get_down_load
OPENSSL_LH_insert
OPENSSL_LH_new
OPENSSL_LH_num_items
OPENSSL_LH_retrieve
OPENSSL_LH_set_down_load
OPENSSL_atexit
OPENSSL_cleanse
OPENSSL_init_crypto
OPENSSL_sk_delete
OPENSSL_sk_dup
OPENSSL_sk_find
OPENSSL_sk_free
OPENSSL_sk_insert
OPENSSL_sk_new
OPENSSL_sk_new_null
OPENSSL_sk_new_reserve
OPENSSL_sk_num
OPENSSL_sk_pop
OPENSSL_sk_pop_free
OPENSSL_sk_push
OPENSSL_sk_set_cmp_func
OPENSSL_sk_shift
OPENSSL_sk_sort
OPENSSL_sk_value
PEM_ASN1_read
PEM_ASN1_read_bio
PEM_ASN1_write
PEM_ASN1_write_bio
PEM_read_bio
PEM_read_bio_DHparams
PEM_read_bio_PrivateKey
PEM_read_bio_RSAPrivateKey
PEM_read_bio_X509
PEM_read_bio_X509_AUX
RAND_bytes
RAND_priv_bytes
RSA_free
RSA_pkey_ctx_ctrl
RSA_private_decrypt
RSA_size
RSA_up_ref
SCT_LIST_free
SCT_LIST_validate
SCT_get_validation_status
SCT_set_source
SHA1_Init
SHA1_Transform
SHA224_Init
SHA256_Init
SHA256_Transform
SHA384_Init
SHA512_Init
SHA512_Transform
SRP_Calc_A
SRP_Calc_B
SRP_Calc_client_key
SRP_Calc_server_key
SRP_Calc_u
SRP_Calc_x
SRP_Verify_A_mod_N
SRP_Verify_B_mod_N
SRP_check_known_gN_param
SRP_create_verifier_BN
SRP_get_default_gN
UINT32_it
X509_EXTENSION_free
X509_LOOKUP_ctrl
X509_LOOKUP_file
X509_LOOKUP_hash_dir
X509_NAME_cmp
X509_NAME_dup
X509_NAME_free
X509_NAME_hash
X509_STORE_CTX_free
X509_STORE_CTX_get0_chain
X509_STORE_CTX_get0_param
X509_STORE_CTX_get1_chain
X509_STORE_CTX_get_error
X509_STORE_CTX_init
X509_STORE_CTX_new
X509_STORE_CTX_set0_dane
X509_STORE_CTX_set_default
X509_STORE_CTX_set_ex_data
X509_STORE_CTX_set_flags
X509_STORE_CTX_set_verify_cb
X509_STORE_add_cert
X509_STORE_add_lookup
X509_STORE_free
X509_STORE_load_locations
X509_STORE_new
X509_STORE_set_default_paths
X509_STORE_up_ref
X509_VERIFY_PARAM_add1_host
X509_VERIFY_PARAM_free
X509_VERIFY_PARAM_get0_peername
X509_VERIFY_PARAM_get_depth
X509_VERIFY_PARAM_inherit
X509_VERIFY_PARAM_move_peername
X509_VERIFY_PARAM_new
X509_VERIFY_PARAM_set1
X509_VERIFY_PARAM_set1_host
X509_VERIFY_PARAM_set_auth_level
X509_VERIFY_PARAM_set_depth
X509_VERIFY_PARAM_set_hostflags
X509_VERIFY_PARAM_set_purpose
X509_VERIFY_PARAM_set_trust
X509_chain_check_suiteb
X509_chain_up_ref
X509_check_private_key
X509_cmp
X509_free
X509_get0_pubkey
X509_get_ext_d2i
X509_get_extension_flags
X509_get_issuer_name
X509_get_key_usage
X509_get_pubkey
X509_get_signature_info
X509_get_signature_nid
X509_get_subject_name
X509_it
X509_up_ref
X509_verify_cert
X509_verify_cert_error_string
ZINT32_it
ZINT64_it
ZUINT32_it
ZUINT64_it
conf_ssl_get
conf_ssl_get_cmd
conf_ssl_name_find
d2i_OCSP_RESPID
d2i_OCSP_RESPONSE
d2i_PUBKEY
d2i_PrivateKey
d2i_PrivateKey_bio
d2i_RSAPrivateKey
d2i_RSAPrivateKey_bio
d2i_X509
d2i_X509_EXTENSIONS
d2i_X509_NAME
d2i_X509_bio
err_free_strings_int
i2d_OCSP_RESPID
i2d_X509
i2d_X509_EXTENSIONS
i2d_X509_NAME
o2i_SCT_LIST

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
GetSystemTime
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
SetLastError
Sleep
SystemTimeToFileTime
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_initterm
_lock
_stricmp
_strnicmp
_time64
_unlock
abort
atoi
calloc
fputc
free
fwrite
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
qsort
realloc
strchr
strcmp
strcpy
strerror
strlen
strncmp
vfprintf
wcslen

Exports

Exports

BIO_f_ssl
BIO_new_buffer_ssl_connect
BIO_new_ssl
BIO_new_ssl_connect
BIO_ssl_copy_session_id
BIO_ssl_shutdown
DTLS_client_method
DTLS_get_data_mtu
DTLS_method
DTLS_server_method
DTLS_set_timer_cb
DTLSv1_2_client_method
DTLSv1_2_method
DTLSv1_2_server_method
DTLSv1_client_method
DTLSv1_listen
DTLSv1_method
DTLSv1_server_method
ERR_load_SSL_strings
OPENSSL_cipher_name
OPENSSL_init_ssl
PEM_read_SSL_SESSION
PEM_read_bio_SSL_SESSION
PEM_write_SSL_SESSION
PEM_write_bio_SSL_SESSION
SRP_Calc_A_param
SSL_CIPHER_description
SSL_CIPHER_find
SSL_CIPHER_get_auth_nid
SSL_CIPHER_get_bits
SSL_CIPHER_get_cipher_nid
SSL_CIPHER_get_digest_nid
SSL_CIPHER_get_handshake_digest
SSL_CIPHER_get_id
SSL_CIPHER_get_kx_nid
SSL_CIPHER_get_name
SSL_CIPHER_get_protocol_id
SSL_CIPHER_get_version
SSL_CIPHER_is_aead
SSL_CIPHER_standard_name
SSL_COMP_add_compression_method
SSL_COMP_get0_name
SSL_COMP_get_compression_methods
SSL_COMP_get_id
SSL_COMP_get_name
SSL_COMP_set0_compression_methods
SSL_CONF_CTX_clear_flags
SSL_CONF_CTX_finish
SSL_CONF_CTX_free
SSL_CONF_CTX_new
SSL_CONF_CTX_set1_prefix
SSL_CONF_CTX_set_flags
SSL_CONF_CTX_set_ssl
SSL_CONF_CTX_set_ssl_ctx
SSL_CONF_cmd
SSL_CONF_cmd_argv
SSL_CONF_cmd_value_type
SSL_CTX_SRP_CTX_free
SSL_CTX_SRP_CTX_init
SSL_CTX_add1_to_CA_list
SSL_CTX_add_client_CA
SSL_CTX_add_client_custom_ext
SSL_CTX_add_custom_ext
SSL_CTX_add_server_custom_ext
SSL_CTX_add_session
SSL_CTX_callback_ctrl
SSL_CTX_check_private_key
SSL_CTX_clear_options
SSL_CTX_config
SSL_CTX_ct_is_enabled
SSL_CTX_ctrl
SSL_CTX_dane_clear_flags
SSL_CTX_dane_enable
SSL_CTX_dane_mtype_set
SSL_CTX_dane_set_flags
SSL_CTX_enable_ct
SSL_CTX_flush_sessions
SSL_CTX_free
SSL_CTX_get0_CA_list
SSL_CTX_get0_certificate
SSL_CTX_get0_ctlog_store
SSL_CTX_get0_param
SSL_CTX_get0_privatekey
SSL_CTX_get0_security_ex_data
SSL_CTX_get_cert_store
SSL_CTX_get_ciphers
SSL_CTX_get_client_CA_list
SSL_CTX_get_client_cert_cb
SSL_CTX_get_default_passwd_cb
SSL_CTX_get_default_passwd_cb_userdata
SSL_CTX_get_ex_data
SSL_CTX_get_info_callback
SSL_CTX_get_keylog_callback
SSL_CTX_get_max_early_data
SSL_CTX_get_num_tickets
SSL_CTX_get_options
SSL_CTX_get_quiet_shutdown
SSL_CTX_get_record_padding_callback_arg
SSL_CTX_get_recv_max_early_data
SSL_CTX_get_security_callback
SSL_CTX_get_security_level
SSL_CTX_get_ssl_method
SSL_CTX_get_timeout
SSL_CTX_get_verify_callback
SSL_CTX_get_verify_depth
SSL_CTX_get_verify_mode
SSL_CTX_has_client_custom_ext
SSL_CTX_load_verify_locations
SSL_CTX_new
SSL_CTX_remove_session
SSL_CTX_sess_get_get_cb
SSL_CTX_sess_get_new_cb
SSL_CTX_sess_get_remove_cb
SSL_CTX_sess_set_get_cb
SSL_CTX_sess_set_new_cb
SSL_CTX_sess_set_remove_cb
SSL_CTX_sessions
SSL_CTX_set0_CA_list
SSL_CTX_set0_ctlog_store
SSL_CTX_set0_security_ex_data
SSL_CTX_set1_cert_store
SSL_CTX_set1_param
SSL_CTX_set_allow_early_data_cb
SSL_CTX_set_alpn_protos
SSL_CTX_set_alpn_select_cb
SSL_CTX_set_block_padding
SSL_CTX_set_cert_cb
SSL_CTX_set_cert_store
SSL_CTX_set_cert_verify_callback
SSL_CTX_set_cipher_list
SSL_CTX_set_ciphersuites
SSL_CTX_set_client_CA_list
SSL_CTX_set_client_cert_cb
SSL_CTX_set_client_cert_engine
SSL_CTX_set_client_hello_cb
SSL_CTX_set_cookie_generate_cb
SSL_CTX_set_cookie_verify_cb
SSL_CTX_set_ct_validation_callback
SSL_CTX_set_ctlog_list_file
SSL_CTX_set_default_ctlog_list_file
SSL_CTX_set_default_passwd_cb
SSL_CTX_set_default_passwd_cb_userdata
SSL_CTX_set_default_read_buffer_len
SSL_CTX_set_default_verify_dir
SSL_CTX_set_default_verify_file
SSL_CTX_set_default_verify_paths
SSL_CTX_set_ex_data
SSL_CTX_set_generate_session_id
SSL_CTX_set_info_callback
SSL_CTX_set_keylog_callback
SSL_CTX_set_max_early_data
SSL_CTX_set_msg_callback
SSL_CTX_set_next_proto_select_cb
SSL_CTX_set_next_protos_advertised_cb
SSL_CTX_set_not_resumable_session_callback
SSL_CTX_set_num_tickets
SSL_CTX_set_options
SSL_CTX_set_post_handshake_auth
SSL_CTX_set_psk_client_callback
SSL_CTX_set_psk_find_session_callback
SSL_CTX_set_psk_server_callback
SSL_CTX_set_psk_use_session_callback
SSL_CTX_set_purpose
SSL_CTX_set_quiet_shutdown
SSL_CTX_set_record_padding_callback
SSL_CTX_set_record_padding_callback_arg
SSL_CTX_set_recv_max_early_data
SSL_CTX_set_security_callback
SSL_CTX_set_security_level
SSL_CTX_set_session_id_context
SSL_CTX_set_session_ticket_cb
SSL_CTX_set_srp_cb_arg
SSL_CTX_set_srp_client_pwd_callback
SSL_CTX_set_srp_password
SSL_CTX_set_srp_strength
SSL_CTX_set_srp_username
SSL_CTX_set_srp_username_callback
SSL_CTX_set_srp_verify_param_callback
SSL_CTX_set_ssl_version
SSL_CTX_set_stateless_cookie_generate_cb
SSL_CTX_set_stateless_cookie_verify_cb
SSL_CTX_set_timeout
SSL_CTX_set_tlsext_max_fragment_length
SSL_CTX_set_tlsext_use_srtp
SSL_CTX_set_tmp_dh_callback
SSL_CTX_set_trust
SSL_CTX_set_verify
SSL_CTX_set_verify_depth
SSL_CTX_up_ref
SSL_CTX_use_PrivateKey
SSL_CTX_use_PrivateKey_ASN1
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_RSAPrivateKey
SSL_CTX_use_RSAPrivateKey_ASN1
SSL_CTX_use_RSAPrivateKey_file
SSL_CTX_use_cert_and_key
SSL_CTX_use_certificate
SSL_CTX_use_certificate_ASN1
SSL_CTX_use_certificate_chain_file
SSL_CTX_use_certificate_file
SSL_CTX_use_psk_identity_hint
SSL_CTX_use_serverinfo
SSL_CTX_use_serverinfo_ex
SSL_CTX_use_serverinfo_file
SSL_SESSION_dup
SSL_SESSION_free
SSL_SESSION_get0_alpn_selected
SSL_SESSION_get0_cipher
SSL_SESSION_get0_hostname
SSL_SESSION_get0_id_context
SSL_SESSION_get0_peer
SSL_SESSION_get0_ticket
SSL_SESSION_get0_ticket_appdata
SSL_SESSION_get_compress_id
SSL_SESSION_get_ex_data
SSL_SESSION_get_id
SSL_SESSION_get_master_key
SSL_SESSION_get_max_early_data
SSL_SESSION_get_max_fragment_length
SSL_SESSION_get_protocol_version
SSL_SESSION_get_ticket_lifetime_hint
SSL_SESSION_get_time
SSL_SESSION_get_timeout
SSL_SESSION_has_ticket
SSL_SESSION_is_resumable
SSL_SESSION_new
SSL_SESSION_print
SSL_SESSION_print_fp
SSL_SESSION_print_keylog
SSL_SESSION_set1_alpn_selected
SSL_SESSION_set1_hostname
SSL_SESSION_set1_id
SSL_SESSION_set1_id_context
SSL_SESSION_set1_master_key
SSL_SESSION_set1_ticket_appdata
SSL_SESSION_set_cipher
SSL_SESSION_set_ex_data
SSL_SESSION_set_max_early_data
SSL_SESSION_set_protocol_version
SSL_SESSION_set_time
SSL_SESSION_set_timeout
SSL_SESSION_up_ref
SSL_SRP_CTX_free
SSL_SRP_CTX_init
SSL_accept
SSL_add1_host
SSL_add1_to_CA_list
SSL_add_client_CA
SSL_add_dir_cert_subjects_to_stack
SSL_add_file_cert_subjects_to_stack
SSL_add_ssl_module
SSL_alert_desc_string
SSL_alert_desc_string_long
SSL_alert_type_string
SSL_alert_type_string_long
SSL_alloc_buffers
SSL_bytes_to_cipher_list
SSL_callback_ctrl
SSL_certs_clear
SSL_check_chain
SSL_check_private_key
SSL_clear
SSL_clear_options
SSL_client_hello_get0_ciphers
SSL_client_hello_get0_compression_methods
SSL_client_hello_get0_ext
SSL_client_hello_get0_legacy_version
SSL_client_hello_get0_random
SSL_client_hello_get0_session_id
SSL_client_hello_get1_extensions_present
SSL_client_hello_isv2
SSL_client_version
SSL_config
SSL_connect
SSL_copy_session_id
SSL_ct_is_enabled
SSL_ctrl
SSL_dane_clear_flags
SSL_dane_enable
SSL_dane_set_flags
SSL_dane_tlsa_add
SSL_do_handshake
SSL_dup
SSL_dup_CA_list
SSL_enable_ct
SSL_export_keying_material
SSL_export_keying_material_early
SSL_extension_supported
SSL_free
SSL_free_buffers
SSL_get0_CA_list
SSL_get0_alpn_selected
SSL_get0_dane
SSL_get0_dane_authority
SSL_get0_dane_tlsa
SSL_get0_next_proto_negotiated
SSL_get0_param
SSL_get0_peer_CA_list
SSL_get0_peer_scts
SSL_get0_peername
SSL_get0_security_ex_data
SSL_get0_verified_chain
SSL_get1_session
SSL_get1_supported_ciphers
SSL_get_SSL_CTX
SSL_get_all_async_fds
SSL_get_certificate
SSL_get_changed_async_fds
SSL_get_cipher_list
SSL_get_ciphers
SSL_get_client_CA_list
SSL_get_client_ciphers
SSL_get_client_random
SSL_get_current_cipher
SSL_get_current_compression
SSL_get_current_expansion
SSL_get_default_passwd_cb
SSL_get_default_passwd_cb_userdata
SSL_get_default_timeout
SSL_get_early_data_status
SSL_get_error
SSL_get_ex_data
SSL_get_ex_data_X509_STORE_CTX_idx
SSL_get_fd
SSL_get_finished
SSL_get_info_callback
SSL_get_key_update_type
SSL_get_max_early_data
SSL_get_num_tickets
SSL_get_options
SSL_get_peer_cert_chain
SSL_get_peer_certificate
SSL_get_peer_finished
SSL_get_peer_signature_type_nid
SSL_get_pending_cipher
SSL_get_privatekey
SSL_get_psk_identity
SSL_get_psk_identity_hint
SSL_get_quiet_shutdown
SSL_get_rbio
SSL_get_read_ahead
SSL_get_record_padding_callback_arg
SSL_get_recv_max_early_data
SSL_get_rfd
SSL_get_security_callback
SSL_get_security_level
SSL_get_selected_srtp_profile
SSL_get_server_random
SSL_get_servername
SSL_get_servername_type
SSL_get_session
SSL_get_shared_ciphers
SSL_get_shared_sigalgs
SSL_get_shutdown
SSL_get_sigalgs
SSL_get_signature_type_nid
SSL_get_srp_N
SSL_get_srp_g
SSL_get_srp_userinfo
SSL_get_srp_username
SSL_get_srtp_profiles
SSL_get_ssl_method
SSL_get_state
SSL_get_verify_callback
SSL_get_verify_depth
SSL_get_verify_mode
SSL_get_verify_result
SSL_get_version
SSL_get_wbio
SSL_get_wfd
SSL_has_matching_session_id
SSL_has_pending
SSL_in_before
SSL_in_init
SSL_is_dtls
SSL_is_init_finished
SSL_is_server
SSL_key_update
SSL_load_client_CA_file
SSL_new
SSL_peek
SSL_peek_ex
SSL_pending
SSL_read
SSL_read_early_data
SSL_read_ex
SSL_renegotiate
SSL_renegotiate_abbreviated
SSL_renegotiate_pending
SSL_rstate_string
SSL_rstate_string_long
SSL_select_next_proto
SSL_session_reused
SSL_set0_CA_list
SSL_set0_rbio
SSL_set0_security_ex_data
SSL_set0_wbio
SSL_set1_host
SSL_set1_param
SSL_set_SSL_CTX
SSL_set_accept_state
SSL_set_allow_early_data_cb
SSL_set_alpn_protos
SSL_set_bio
SSL_set_block_padding
SSL_set_cert_cb
SSL_set_cipher_list
SSL_set_ciphersuites
SSL_set_client_CA_list
SSL_set_connect_state
SSL_set_ct_validation_callback
SSL_set_debug
SSL_set_default_passwd_cb
SSL_set_default_passwd_cb_userdata
SSL_set_default_read_buffer_len
SSL_set_ex_data
SSL_set_fd
SSL_set_generate_session_id
SSL_set_hostflags
SSL_set_info_callback
SSL_set_max_early_data
SSL_set_msg_callback
SSL_set_not_resumable_session_callback
SSL_set_num_tickets
SSL_set_options
SSL_set_post_handshake_auth
SSL_set_psk_client_callback
SSL_set_psk_find_session_callback
SSL_set_psk_server_callback
SSL_set_psk_use_session_callback
SSL_set_purpose
SSL_set_quiet_shutdown
SSL_set_read_ahead
SSL_set_record_padding_callback
SSL_set_record_padding_callback_arg
SSL_set_recv_max_early_data
SSL_set_rfd
SSL_set_security_callback
SSL_set_security_level
SSL_set_session
SSL_set_session_id_context
SSL_set_session_secret_cb
SSL_set_session_ticket_ext
SSL_set_session_ticket_ext_cb
SSL_set_shutdown
SSL_set_srp_server_param
SSL_set_srp_server_param_pw
SSL_set_ssl_method
SSL_set_tlsext_max_fragment_length
SSL_set_tlsext_use_srtp
SSL_set_tmp_dh_callback
SSL_set_trust
SSL_set_verify
SSL_set_verify_depth
SSL_set_verify_result
SSL_set_wfd
SSL_shutdown
SSL_srp_server_param_with_username
SSL_state_string
SSL_state_string_long
SSL_stateless
SSL_up_ref
SSL_use_PrivateKey
SSL_use_PrivateKey_ASN1
SSL_use_PrivateKey_file
SSL_use_RSAPrivateKey
SSL_use_RSAPrivateKey_ASN1
SSL_use_RSAPrivateKey_file
SSL_use_cert_and_key
SSL_use_certificate
SSL_use_certificate_ASN1
SSL_use_certificate_chain_file
SSL_use_certificate_file
SSL_use_psk_identity_hint
SSL_verify_client_post_handshake
SSL_version
SSL_waiting_for_async
SSL_want
SSL_write
SSL_write_early_data
SSL_write_ex
TLS_client_method
TLS_method
TLS_server_method
TLSv1_1_client_method
TLSv1_1_method
TLSv1_1_server_method
TLSv1_2_client_method
TLSv1_2_method
TLSv1_2_server_method
TLSv1_client_method
TLSv1_method
TLSv1_server_method
d2i_SSL_SESSION
i2d_SSL_SESSION

Sections

.text
Size: 379KB - Virtual size: 379KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/utils/libssl-1_1-x86.dll
.exe windows:4 windows x64 arch:x64

59da0a590bebb821bfdeed92f2ad09c9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

libcrypto-1_1-x64

EVP_CIPHER_CTX_free
EVP_CIPHER_CTX_new
EVP_CIPHER_CTX_set_padding
EVP_DecryptFinal
EVP_DecryptInit
EVP_DecryptUpdate
EVP_aes_256_cbc

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
GetStartupInfoA
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_errno
_fmode
_initterm
_lock
_onexit
_unlock
abort
calloc
exit
fclose
fopen
fprintf
fputc
fread
free
fseek
ftell
fwrite
getc
getenv
islower
isspace
isupper
isxdigit
localeconv
malloc
memcmp
memcpy
memset
puts
realloc
rewind
signal
strcmp
strcpy
strerror
strlen
strncmp
strstr
strtol
strtoul
tolower
ungetc
vfprintf
wcslen

libusb-1.0

libusb_alloc_transfer
libusb_bulk_transfer
libusb_cancel_transfer
libusb_claim_interface
libusb_close
libusb_control_transfer
libusb_exit
libusb_free_transfer
libusb_get_configuration
libusb_handle_events_timeout_completed
libusb_init
libusb_open_device_with_vid_pid
libusb_release_interface
libusb_reset_device
libusb_set_configuration
libusb_submit_transfer

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/97
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/113
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/utils/libtermcap-0.dll
.dll windows:4 windows x64 arch:x64

cbf821e3b3e9bfc9f635ac5440325527

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_close
_errno
_initterm
_lock
_lseek
_open
_read
_unlock
_write
abort
atoi
calloc
exit
fputc
free
fwrite
getenv
localeconv
malloc
memcpy
memset
realloc
strcat
strcmp
strcpy
strerror
strlen
strncmp
vfprintf
wcslen

Exports

Exports

BC
PC
UP
ospeed
tgetent
tgetflag
tgetnum
tgetstr
tgoto
tparam
tputs
tputs_baud_rate

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 261B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/utils/libusb-1.0.dll
.dll windows:4 windows x64 arch:x64

87929dc7c47943e1cc33d633721ccbef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

CancelIoEx
CancelWaitableTimer
CloseHandle
CreateEventA
CreateFileA
CreateIoCompletionPort
CreateWaitableTimerA
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
FormatMessageA
FreeLibrary
GetCurrentThreadId
GetLastError
GetOverlappedResult
GetProcAddress
GetQueuedCompletionStatus
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetVersionExA
InitializeConditionVariable
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
PostQueuedCompletionStatus
QueryPerformanceCounter
QueryPerformanceFrequency
ReadFile
ResetEvent
SetEvent
SetWaitableTimer
Sleep
SleepConditionVariableCS
SleepEx
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
VerSetConditionMask
VerifyVersionInfoA
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WakeAllConditionVariable
WideCharToMultiByte
WriteFile

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_assert
_beginthreadex
_errno
_initterm
_lock
_stricmp
_strdup
_unlock
abort
atoi
calloc
fputc
fputs
free
fwrite
getc
getenv
islower
isspace
isupper
isxdigit
localeconv
malloc
memcpy
memmove
memset
realloc
strchr
strcmp
strerror
strlen
strncmp
strrchr
strstr
strtok
strtol
strtoul
tolower
toupper
ungetc
vfprintf
wcslen

Exports

Exports

active_contexts_list
active_contexts_lock
discovered_devs_append
htab_hash
libusb_alloc_streams
libusb_alloc_transfer
libusb_attach_kernel_driver
libusb_bulk_transfer
libusb_cancel_transfer
libusb_claim_interface
libusb_clear_halt
libusb_close
libusb_control_transfer
libusb_detach_kernel_driver
libusb_dev_mem_alloc
libusb_dev_mem_free
libusb_error_name
libusb_event_handler_active
libusb_event_handling_ok
libusb_exit
libusb_free_bos_descriptor
libusb_free_config_descriptor
libusb_free_container_id_descriptor
libusb_free_device_list
libusb_free_pollfds
libusb_free_ss_endpoint_companion_descriptor
libusb_free_ss_usb_device_capability_descriptor
libusb_free_streams
libusb_free_transfer
libusb_free_usb_2_0_extension_descriptor
libusb_get_active_config_descriptor
libusb_get_bos_descriptor
libusb_get_bus_number
libusb_get_config_descriptor
libusb_get_config_descriptor_by_value
libusb_get_configuration
libusb_get_container_id_descriptor
libusb_get_device
libusb_get_device_address
libusb_get_device_descriptor
libusb_get_device_list
libusb_get_device_speed
libusb_get_max_iso_packet_size
libusb_get_max_packet_size
libusb_get_next_timeout
libusb_get_parent
libusb_get_pollfds
libusb_get_port_number
libusb_get_port_numbers
libusb_get_port_path
libusb_get_ss_endpoint_companion_descriptor
libusb_get_ss_usb_device_capability_descriptor
libusb_get_string_descriptor_ascii
libusb_get_usb_2_0_extension_descriptor
libusb_get_version
libusb_handle_events
libusb_handle_events_completed
libusb_handle_events_locked
libusb_handle_events_timeout
libusb_handle_events_timeout_completed
libusb_has_capability
libusb_hotplug_deregister_callback
libusb_hotplug_get_user_data
libusb_hotplug_register_callback
libusb_init
libusb_interrupt_event_handler
libusb_interrupt_transfer
libusb_kernel_driver_active
libusb_lock_event_waiters
libusb_lock_events
libusb_open
libusb_open_device_with_vid_pid
libusb_pollfds_handle_timeouts
libusb_ref_device
libusb_release_interface
libusb_reset_device
libusb_set_auto_detach_kernel_driver
libusb_set_configuration
libusb_set_debug
libusb_set_interface_alt_setting
libusb_set_log_cb
libusb_set_option
libusb_set_pollfd_notifiers
libusb_setlocale
libusb_strerror
libusb_submit_transfer
libusb_transfer_get_stream_id
libusb_transfer_set_stream_id
libusb_try_lock_events
libusb_unlock_event_waiters
libusb_unlock_events
libusb_unref_device
libusb_wait_for_event
libusb_wrap_sys_device
load_system_library
usb_api_backend
usbd_status_to_libusb_transfer_status
usbdk_backend
usbi_add_event_source
usbi_alloc_device
usbi_alloc_event_data
usbi_arm_timer
usbi_backend
usbi_clear_event
usbi_cond_timedwait
usbi_connect_device
usbi_create_event
usbi_create_timer
usbi_default_context
usbi_destroy_event
usbi_destroy_timer
usbi_disarm_timer
usbi_disconnect_device
usbi_get_device_by_session_id
usbi_get_monotonic_time
usbi_handle_disconnect
usbi_handle_transfer_cancellation
usbi_handle_transfer_completion
usbi_hotplug_exit
usbi_hotplug_init
usbi_hotplug_notification
usbi_hotplug_process
usbi_io_exit
usbi_io_init
usbi_log
usbi_remove_event_source
usbi_sanitize_device
usbi_signal_event
usbi_signal_transfer_completion
usbi_wait_for_events
windows_error_str
windows_force_sync_completion
windows_version
winusb_backend

Sections

.text
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 340KB - Virtual size: 339KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 380KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/utils/libusbmuxd-2.0.dll
.dll windows:4 windows x64 arch:x64

d1b6833df95f849899316d84eede3232

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
GetModuleFileNameA
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_initterm
_lock
_stricmp
_strdup
_unlock
abort
calloc
fflush
fputc
free
fwrite
getenv
localeconv
malloc
memcpy
memmove
memset
realloc
strcmp
strerror
strlen
strncmp
strncpy
strrchr
strtol
vfprintf
wcslen

ws2_32

htons

libimobiledevice-glue-1.0

collection_add
collection_count
collection_free
collection_init
collection_remove
mutex_init
mutex_lock
mutex_unlock
socket_close
socket_connect
socket_receive_timeout
socket_send
socket_set_verbose
socket_shutdown
thread_alive
thread_cancel
thread_free
thread_join
thread_new
thread_once

libplist-2.0

plist_array_get_item
plist_array_get_size
plist_copy
plist_dict_get_item
plist_dict_set_item
plist_free
plist_from_xml
plist_get_data_val
plist_get_node_type
plist_get_string_val
plist_get_uint_val
plist_new_data
plist_new_dict
plist_new_string
plist_new_uint
plist_to_xml

Exports

Exports

libusbmuxd_set_debug_level
libusbmuxd_set_use_inotify
usbmuxd_connect
usbmuxd_delete_pair_record
usbmuxd_device_list_free
usbmuxd_disconnect
usbmuxd_events_subscribe
usbmuxd_events_unsubscribe
usbmuxd_get_device
usbmuxd_get_device_by_udid
usbmuxd_get_device_list
usbmuxd_read_buid
usbmuxd_read_pair_record
usbmuxd_recv
usbmuxd_recv_timeout
usbmuxd_save_pair_record
usbmuxd_save_pair_record_with_device_id
usbmuxd_send
usbmuxd_subscribe
usbmuxd_unsubscribe

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 715B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/utils/libzip-1.0.dll
.exe windows:4 windows x64 arch:x64

41c55772e303b8488ea464a0538e35d5

Code Sign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

60:aa:d8:36:3a:fb:ef:e9:28:4e:eb:1b
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

12/06/2019, 06:15

Not After

20/08/2021, 08:09

Subject

CN=深圳市为爱普信息技术有限公司,O=深圳市为爱普信息技术有限公司,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:3a:f4:5a:8e:df:85:65:90:ad:0e:59:2f:9c:ee:f3:50:56:e2:eb
Signer

Actual PE Digest

90:3a:f4:5a:8e:df:85:65:90:ad:0e:59:2f:9c:ee:f3:50:56:e2:eb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

oleaut32

SysStringLen
VariantClear
VariantCopy
SysAllocString
SysStringByteLen
SysFreeString
SysAllocStringLen

user32

CharUpperW

advapi32

OpenProcessToken
GetFileSecurityW
SetFileSecurityW
RegOpenKeyExW
RegQueryValueExW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegCloseKey

msvcrt

_exit
_c_exit
_XcptFilter
_onexit
__dllonexit
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
__C_specific_handler
_beginthreadex
_isatty
memcmp
_purecall
strlen
memset
wcsstr
_cexit
wcscmp
strcmp
memmove
fflush
fputc
fputs
_iob
fgetc
fclose
free
_CxxThrowException
malloc
__CxxFrameHandler
memcpy
__initenv
exit
__getmainargs
_initterm
__setusermatherr
_commode
_fmode
__set_app_type

kernel32

WaitForSingleObject
CreateEventW
SetEvent
InitializeCriticalSection
GetVersionExW
VirtualFree
VirtualAlloc
GetConsoleMode
SetConsoleMode
SetFileApisToOEM
GetCommandLineW
GetConsoleScreenBufferInfo
SetConsoleCtrlHandler
IsProcessorFeaturePresent
GetProcessTimes
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetProcessAffinityMask
OpenEventW
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
GetStdHandle
GetSystemTimeAsFileTime
FileTimeToDosDateTime
GlobalMemoryStatusEx
GetSystemInfo
GetProcessAffinityMask
FileTimeToLocalFileTime
FileTimeToSystemTime
CompareFileTime
GetCurrentProcess
GetDiskFreeSpaceW
GetFileInformationByHandle
SetEndOfFile
WriteFile
ReadFile
SetFilePointer
GetFileSize
DeviceIoControl
GetLogicalDriveStringsW
GetLastError
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
LoadLibraryExW
LoadLibraryW
GetModuleFileNameW
LocalFree
FormatMessageW
CloseHandle
SetFileTime
CreateFileW
SetFileAttributesW
RemoveDirectoryW
MoveFileW
GetProcAddress
GetModuleHandleW
CreateDirectoryW
DeleteFileW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetTempPathW
SetLastError
GetCurrentProcessId
GetTickCount
GetCurrentThreadId
FindClose
FindFirstFileW
FindNextFileW
GetModuleHandleA
GetFileAttributesW

Sections

.text
Size: 311KB - Virtual size: 311KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/utils/openssh-1_0-dev.dll
.exe windows:4 windows x64 arch:x64

eee6c0c6a94faf30cb34d4ff5e14a3f2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

libusbmuxd-2.0

libusbmuxd_set_debug_level
usbmuxd_connect
usbmuxd_get_device
usbmuxd_get_device_list

kernel32

DeleteCriticalSection
EnterCriticalSection
GetEnvironmentVariableW
GetLastError
GetStartupInfoA
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__argv
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_errno
_fmode
_initterm
_lock
_onexit
_strdup
_unlock
abort
calloc
exit
fprintf
fputc
free
fwrite
localeconv
malloc
memcpy
memset
perror
signal
strchr
strerror
strlen
strncmp
strrchr
strtol
vfprintf
wcslen

ws2_32

__WSAFDIsSet
ioctlsocket
select

libimobiledevice-glue-1.0

socket_accept
socket_addr_to_string
socket_close
socket_connect_addr
socket_create
socket_receive_timeout
socket_send
thread_detach
thread_new

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/utils/openssh-1_0.dll
.exe windows:6 windows x64 arch:x64

a77aec4bcfe8ef82b697278e7f862e25

Code Sign

8e:3f:bf:b9:1b:e6:da:04:1b:a4:1f:7a:98:3a:d6:1e
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

06/11/2021, 00:00

Not After

05/11/2024, 23:59

Subject

CN=Simon Tatham,O=Simon Tatham,ST=Cambridgeshire,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 23:59

Subject

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

8e:3f:bf:b9:1b:e6:da:04:1b:a4:1f:7a:98:3a:d6:1e
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

06/11/2021, 00:00

Not After

05/11/2024, 23:59

Subject

CN=Simon Tatham,O=Simon Tatham,ST=Cambridgeshire,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 23:59

Subject

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

f7:8b:ae:25:5a:1f:0d:a6:4e:c7:f8:81:75:45:f4:d0:ab:08:d0:54:f8:6e:5d:83:ed:da:82:48:a4:de:d4:b5
Signer

Actual PE Digest

f7:8b:ae:25:5a:1f:0d:a6:4e:c7:f8:81:75:45:f4:d0:ab:08:d0:54:f8:6e:5d:83:ed:da:82:48:a4:de:d4:b5

Digest Algorithm

sha256

PE Digest Matches

true

a9:41:22:08:3d:93:46:9e:27:4b:e7:5d:bd:51:1c:71:60:f1:35:2c
Signer

Actual PE Digest

a9:41:22:08:3d:93:46:9e:27:4b:e7:5d:bd:51:1c:71:60:f1:35:2c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

ClearCommBreak
CloseHandle
CompareStringW
ConnectNamedPipe
CreateEventA
CreateFileA
CreateFileMappingA
CreateFileW
CreateMutexA
CreateNamedPipeA
CreatePipe
CreateProcessA
CreateThread
DeleteCriticalSection
DeleteFileA
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FindClose
FindFirstFileA
FindFirstFileExW
FindNextFileA
FindNextFileW
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommState
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileSizeEx
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetOverlappedResult
GetProcAddress
GetProcessHeap
GetProcessTimes
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetThreadTimes
GetTickCount
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetWindowsDirectoryA
GlobalMemoryStatus
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LocalAlloc
LocalFileTimeToFileTime
LocalFree
MapViewOfFile
MultiByteToWideChar
OpenProcess
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
ReleaseMutex
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetCommBreak
SetCommState
SetCommTimeouts
SetConsoleMode
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetHandleInformation
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
WaitForMultipleObjects
WaitForSingleObject
WaitNamedPipeA
WideCharToMultiByte
WriteConsoleW
WriteFile

user32

FindWindowA
GetCapture
GetClipboardOwner
GetCursorPos
GetForegroundWindow
GetQueueStatus
SendMessageA

advapi32

AllocateAndInitializeSid
CopySid
EqualSid
GetLengthSid
GetUserNameA
InitializeSecurityDescriptor
RegCloseKey
RegCreateKeyA
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner

Sections

.text
Size: 600KB - Virtual size: 600KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/utils/plist.dll
.dll windows:6 windows x64 arch:x64

cb6e7b4b2164c7e7b37a3be1038cb49d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\1\s\x64\Release\plist.pdb

Imports

kernel32

Sleep
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlCaptureContext
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlLookupFunctionEntry

vcruntime140

memcpy
memset
memmove
__C_specific_handler
__std_type_info_destroy_list
memcmp
strstr

api-ms-win-crt-heap-l1-1-0

free
calloc
malloc
realloc

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf
__stdio_common_vsprintf

api-ms-win-crt-runtime-l1-1-0

_errno
_initterm_e
_seh_filter_dll
_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_initterm

api-ms-win-crt-string-l1-1-0

_strdup
strncpy
strncmp

api-ms-win-crt-math-l1-1-0

fmin
_dclass

api-ms-win-crt-time-l1-1-0

strftime

api-ms-win-crt-convert-l1-1-0

atof
strtoull

Exports

Exports

plist_access_path
plist_access_pathv
plist_array_append_item
plist_array_get_item
plist_array_get_item_index
plist_array_get_size
plist_array_insert_item
plist_array_item_remove
plist_array_new_iter
plist_array_next_item
plist_array_remove_item
plist_array_set_item
plist_bool_val_is_true
plist_compare_node_value
plist_copy
plist_data_val_compare
plist_data_val_compare_with_size
plist_data_val_contains
plist_date_val_compare
plist_dict_get_item
plist_dict_get_item_key
plist_dict_get_size
plist_dict_insert_item
plist_dict_item_get_key
plist_dict_merge
plist_dict_new_iter
plist_dict_next_item
plist_dict_remove_item
plist_dict_set_item
plist_free
plist_from_bin
plist_from_memory
plist_from_xml
plist_get_bool_val
plist_get_data_ptr
plist_get_data_val
plist_get_date_val
plist_get_key_val
plist_get_node_type
plist_get_parent
plist_get_real_val
plist_get_string_ptr
plist_get_string_val
plist_get_uid_val
plist_get_uint_val
plist_is_binary
plist_key_val_compare
plist_key_val_compare_with_size
plist_key_val_contains
plist_new_array
plist_new_bool
plist_new_data
plist_new_date
plist_new_dict
plist_new_real
plist_new_string
plist_new_uid
plist_new_uint
plist_real_val_compare
plist_set_bool_val
plist_set_data_val
plist_set_date_val
plist_set_key_val
plist_set_real_val
plist_set_string_val
plist_set_uid_val
plist_set_uint_val
plist_string_val_compare
plist_string_val_compare_with_size
plist_string_val_contains
plist_to_bin
plist_to_bin_free
plist_to_xml
plist_to_xml_free
plist_uid_val_compare
plist_uint_val_compare

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicCFGWin_v1.2/resources/utils/usbmuxd.dll
.dll windows:6 windows x64 arch:x64

f843e73c87918f71be24742d662683d6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\1\s\x64\Release\usbmuxd.pdb

Imports

ws2_32

WSAStartup
send
socket
connect
getaddrinfo
getsockopt
htons
freeaddrinfo
ioctlsocket
setsockopt
shutdown
select
closesocket
WSAGetLastError
recv

kernel32

CreateThread
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
GetModuleFileNameA
RtlCaptureContext
CloseHandle
ExitProcess
FormatMessageA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
WaitForSingleObject
Sleep

plist

plist_get_node_type
plist_from_xml
plist_free
plist_new_data
plist_dict_set_item
plist_new_string
plist_new_dict
plist_get_data_val
plist_dict_get_item
plist_array_get_size
plist_get_uint_val
plist_copy
plist_new_uint
plist_get_string_val
plist_array_get_item
plist_to_xml

vcruntime140

memset
memmove
memcpy
__std_type_info_destroy_list
__C_specific_handler
strrchr

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__stdio_common_vsprintf
fflush
__acrt_iob_func

api-ms-win-crt-heap-l1-1-0

malloc
free
realloc

api-ms-win-crt-runtime-l1-1-0

_errno
perror
_cexit
strerror
_wassert
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table

api-ms-win-crt-string-l1-1-0

_strdup
strncmp
_stricmp
strncpy
strcmp

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

libusbmuxd_set_debug_level
libusbmuxd_set_use_inotify
usbmuxd_connect
usbmuxd_delete_pair_record
usbmuxd_device_list_free
usbmuxd_disconnect
usbmuxd_events_subscribe
usbmuxd_events_unsubscribe
usbmuxd_get_device
usbmuxd_get_device_by_udid
usbmuxd_get_device_list
usbmuxd_get_socket_type
usbmuxd_get_tcp_endpoint
usbmuxd_read_buid
usbmuxd_read_pair_record
usbmuxd_recv
usbmuxd_recv_timeout
usbmuxd_save_pair_record
usbmuxd_save_pair_record_with_device_id
usbmuxd_send
usbmuxd_set_socket_type
usbmuxd_set_tcp_endpoint
usbmuxd_subscribe
usbmuxd_unsubscribe

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:dbCertificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

58:f7:61:2a:89:fd:07:27:00:87:bc:4a:ed:f1:dd:3f:c5:e9:29:c2Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 150KB - Virtual size: 150KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

Headers

DLL Characteristics

File Characteristics

Sections

~T v  Y Size: 134KB - Virtual size: 134KB

~T v  Y Size: 134KB - Virtual size: 134KB

.text Size: 748KB - Virtual size: 747KB

.rsrc Size: 15KB - Virtual size: 15KB

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

dd:e4:54:0c:99:60:4b:1c:d7:75:bb:9f:7d:c3:a0:52:66:42:53:8a:ea:76:a1:ad:88:a1:38:83:d6:18:e7:a0Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 13KB - Virtual size: 12KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

d4:65:dc:35:86:93:2f:fb:0d:d0:c1:ac:2f:31:92:bd:28:75:14:21:57:3f:3b:7d:55:33:05:32:59:3d:d4:62Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 9KB - Virtual size: 8KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

58:f7:61:2a:89:fd:07:27:00:87:bc:4a:ed:f1:dd:3f:c5:e9:29:c2
Signer

.text
Size: 1.9MB - Virtual size: 1.9MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 150KB - Virtual size: 150KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

~Tv Y
Size: 134KB - Virtual size: 134KB

~Tv Y
Size: 134KB - Virtual size: 134KB

.text
Size: 748KB - Virtual size: 747KB

.rsrc
Size: 15KB - Virtual size: 15KB

33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

dd:e4:54:0c:99:60:4b:1c:d7:75:bb:9f:7d:c3:a0:52:66:42:53:8a:ea:76:a1:ad:88:a1:38:83:d6:18:e7:a0
Signer

.text
Size: 13KB - Virtual size: 12KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

d4:65:dc:35:86:93:2f:fb:0d:d0:c1:ac:2f:31:92:bd:28:75:14:21:57:3f:3b:7d:55:33:05:32:59:3d:d4:62
Signer

.text
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

a4:6c:07:cf:a9:38:ad:dd:05:7b:ae:24:e4:ad:78:9e:fa:07:82:fb:e0:b3:ea:d5:f5:bc:8e:78:ff:71:9b:27
Signer

.text
Size: 126KB - Virtual size: 126KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:00:c2:a0:09:c5:37:76:e9:f6:cd:00:00:00:00:00:c2
Certificate

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

99:0e:22:c8:fb:bc:e4:62:63:f1:99:41:db:03:50:70:a9:f7:d6:99:5f:43:9a:3b:2d:d5:4b:9c:fc:3d:7c:e6
Signer

12:57:a0:40:75:36:a1:51:f8:dd:f2:97:bc:f9:16:a8:2c:bd:f3:8d
Signer

.text
Size: 93KB - Virtual size: 93KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

a0:70:99:f3:f5:b7:ef:fb:27:e6:01:6f:08:b5:3a:37:53:0b:75:67:14:d0:60:c5:7a:94:ea:2c:97:22:88:f7
Signer

.text
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

e8:c3:5f:a8:e8:49:f6:6f:ce:7c:4e:41:6e:cd:0a:5b:2b:95:b7:d9:f0:22:47:29:d8:22:9f:86:e5:74:80:25
Signer