E:\FixReplayAttacks\output\win32\txupd.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2024-05-30_076961dea604eeaf93a66330633d1a7e_magniber.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-05-30_076961dea604eeaf93a66330633d1a7e_magniber.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
2024-05-30_076961dea604eeaf93a66330633d1a7e_magniber
-
Size
4.2MB
-
MD5
076961dea604eeaf93a66330633d1a7e
-
SHA1
6edfa9cca691774b255fa456246cfe5730187a4b
-
SHA256
f91a2f493119a60d871bb2c83fbcf3b9e063eca7d2f7f4c1470fa0c0168ed9ce
-
SHA512
8153edf6cb2473ee6293dd16fb10913b5ef44d4227dfffeb638e51d1f06160ad202d00b9e6bd0159f7a9f61d45beefae59c41a18d63a5e427209864c6ca8f579
-
SSDEEP
49152:1ZfICio2RCV0sGbGVdylWojqkraXkFyWa+tdTeOWpNBRdL2PbX+tRs2v7cniI6vR:1C4yGVyvaXkyWa+tMOWLFsQfa6Tl
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-30_076961dea604eeaf93a66330633d1a7e_magniber
Files
-
2024-05-30_076961dea604eeaf93a66330633d1a7e_magniber.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Exports
Exports
??0BigNum@Ecdsa@@QAE@ABV01@@Z
??0BigNum@Ecdsa@@QAE@PAUbignum_st@@@Z
??0BigNum@Ecdsa@@QAE@PBD@Z
??0BigNum@Ecdsa@@QAE@XZ
??0CFmtString@@QAE@XZ
??0CGUnzipBuffer@@QAE@XZ
??0CGZipBuffer@@QAE@HH@Z
??0CHttpClient@@QAE@XZ
??0CLastErrorResume@Misc@Util@@QAE@XZ
??0CSafeHook@Misc@Util@@QAE@AAV?$vector@PAXV?$allocator@PAX@std@@@std@@@Z
??0CSafeHook@Misc@Util@@QAE@ABV012@@Z
??0CTXBSTR@@QAE@ABU_GUID@@@Z
??0CTXBSTR@@QAE@ABV0@@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??0CTXBSTR@@QAE@H@Z
??0CTXBSTR@@QAE@HPB_W@Z
??0CTXBSTR@@QAE@PB_W@Z
??0CTXBSTR@@QAE@XZ
??0CTXCommPack@@QAE@ABV0@@Z
??0CTXCommPack@@QAE@XZ
??0CTXCriticalSection@@QAE@ABV0@@Z
??0CTXCriticalSection@@QAE@XZ
??0CTXDataField@@QAE@ABV0@@Z
??0CTXHttpDownload@@QAE@XZ
??0CTXHttpDownloadSink@@IAE@XZ
??0CTXHttpDownloadSink@@QAE@ABV0@@Z
??0CTXStringA@@QAE@ABV0@@Z
??0CTXStringA@@QAE@DH@Z
??0CTXStringA@@QAE@PBD@Z
??0CTXStringA@@QAE@PBDH@Z
??0CTXStringA@@QAE@UtagEN@@PB_WH@Z
??0CTXStringA@@QAE@UtagGBK@@PB_WH@Z
??0CTXStringA@@QAE@UtagUTF8@@PB_WH@Z
??0CTXStringA@@QAE@XZ
??0CTXStringW@@QAE@ABU_GUID@@@Z
??0CTXStringW@@QAE@ABUtagVARIANT@@@Z
??0CTXStringW@@QAE@ABV0@@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
??0CTXStringW@@QAE@H@Z
??0CTXStringW@@QAE@PA_W@Z
??0CTXStringW@@QAE@PB_W@Z
??0CTXStringW@@QAE@PB_WH@Z
??0CTXStringW@@QAE@UtagEN@@PBDH@Z
??0CTXStringW@@QAE@UtagGBK@@PBDH@Z
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z
??0CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@_WH@Z
??0CTXThread@@QAE@XZ
??0CTXThreadModel@@IAE@XZ
??0CTXTime@@QAE@ABU_FILETIME@@H@Z
??0CTXTime@@QAE@ABU_SYSTEMTIME@@H@Z
??0CTXTime@@QAE@ABUtagDBTIMESTAMP@@H@Z
??0CTXTime@@QAE@ABV0@@Z
??0CTXTime@@QAE@GGH@Z
??0CTXTime@@QAE@HHHHHHH@Z
??0CTXTime@@QAE@XZ
??0CTXTime@@QAE@_J@Z
??0CTXTimeSpan@@QAE@ABV0@@Z
??0CTXTimeSpan@@QAE@JHHH@Z
??0CTXTimeSpan@@QAE@XZ
??0CTXTimeSpan@@QAE@_J@Z
??0CTXVariant@@QAE@ABVCTXBuffer@@@Z
??0CUnZipFile@@QAE@$$QAV0@@Z
??0CUnZipFile@@QAE@ABV0@@Z
??0CUnZipFile@@QAE@XZ
??0CUnzipBuffers@@QAE@ABV0@@Z
??0CUnzipBuffers@@QAE@XZ
??0CZipBuffers@@QAE@$$QAV0@@Z
??0CZipBuffers@@QAE@ABV0@@Z
??0CZipBuffers@@QAE@XZ
??0CZipFiles@@QAE@$$QAV0@@Z
??0CZipFiles@@QAE@ABV0@@Z
??0CZipFiles@@QAE@XZ
??0EcdsaKey@Ecdsa@@QAE@ABV01@@Z
??0EcdsaKey@Ecdsa@@QAE@ABVBigNum@1@00000@Z
??0EcdsaKey@Ecdsa@@QAE@PAUec_key_st@@@Z
??0EcdsaKey@Ecdsa@@QAE@W4_EccType@01@@Z
??0EcdsaSignature@Ecdsa@@QAE@PAUECDSA_SIG_st@@@Z
??0EcdsaSignature@Ecdsa@@QAE@XZ
??0TiXmlAttribute@@QAE@PBD0@Z
??0TiXmlAttribute@@QAE@XZ
??0TiXmlAttributeSet@@QAE@XZ
??0TiXmlBase@@QAE@XZ
??0TiXmlComment@@QAE@ABV0@@Z
??0TiXmlComment@@QAE@PBD@Z
??0TiXmlComment@@QAE@XZ
??0TiXmlDeclaration@@QAE@ABV0@@Z
??0TiXmlDeclaration@@QAE@PBD00@Z
??0TiXmlDeclaration@@QAE@XZ
??0TiXmlDocument@@IAE@PBD@Z
??0TiXmlDocument@@QAE@ABV0@@Z
??0TiXmlDocument@@QAE@XZ
??0TiXmlElement@@QAE@ABV0@@Z
??0TiXmlElement@@QAE@PBD@Z
??0TiXmlNode@@IAE@W4NodeType@0@@Z
??0TiXmlPrinter@@QAE@$$QAV0@@Z
??0TiXmlPrinter@@QAE@ABV0@@Z
??0TiXmlPrinter@@QAE@XZ
??0TiXmlText@@QAE@ABV0@@Z
??0TiXmlText@@QAE@PBD@Z
??0TiXmlUnknown@@QAE@ABV0@@Z
??0TiXmlUnknown@@QAE@XZ
??1BigNum@Ecdsa@@QAE@XZ
??1CFmtString@@QAE@XZ
??1CGUnzipBuffer@@QAE@XZ
??1CGZipBuffer@@QAE@XZ
??1CHttpClient@@QAE@XZ
??1CLastErrorResume@Misc@Util@@QAE@XZ
??1CSafeHook@Misc@Util@@QAE@XZ
??1CTXBSTR@@QAE@XZ
??1CTXCommPack@@UAE@XZ
??1CTXCriticalSection@@UAE@XZ
??1CTXHttpDownload@@UAE@XZ
??1CTXHttpDownloadSink@@UAE@XZ
??1CTXStringA@@QAE@XZ
??1CTXStringW@@QAE@XZ
??1CTXThread@@UAE@XZ
??1CTXThreadModel@@MAE@XZ
??1CUnZipFile@@QAE@XZ
??1CUnzipBuffers@@QAE@XZ
??1CWriteBuffer@@QAE@XZ
??1CZipBuffers@@QAE@XZ
??1CZipFiles@@QAE@XZ
??1EcdsaKey@Ecdsa@@QAE@XZ
??1EcdsaSignature@Ecdsa@@QAE@XZ
??1TiXmlAttribute@@UAE@XZ
??1TiXmlAttributeSet@@QAE@XZ
??1TiXmlBase@@UAE@XZ
??1TiXmlComment@@UAE@XZ
??1TiXmlDeclaration@@UAE@XZ
??1TiXmlDocument@@UAE@XZ
??1TiXmlElement@@UAE@XZ
??1TiXmlNode@@UAE@XZ
??1TiXmlPrinter@@UAE@XZ
??1TiXmlText@@UAE@XZ
??1TiXmlUnknown@@UAE@XZ
??4BigNum@Ecdsa@@QAEAAV01@ABV01@@Z
??4CGUnzipBuffer@@QAEAAV0@ABV0@@Z
??4CGZipBuffer@@QAEAAV0@ABV0@@Z
??4CLastErrorResume@Misc@Util@@QAEAAV012@ABV012@@Z
??4CSafeHook@Misc@Util@@QAEAAV012@ABV012@@Z
??4CTXBSTR@@QAEAAV0@ABV0@@Z
??4CTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
??4CTXCriticalSection@@QAEAAV0@ABV0@@Z
??4CTXHttpDownloadSink@@QAEAAV0@ABV0@@Z
??4CTXStringA@@QAEAAV0@ABV0@@Z
??4CTXStringA@@QAEAAV0@D@Z
??4CTXStringA@@QAEAAV0@PBD@Z
??4CTXStringW@@QAEAAV0@ABUtagVARIANT@@@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
??4CTXStringW@@QAEAAV0@_W@Z
??4CTXTime@@QAEAAV0@V0@@Z
??4CTXTime@@QAEAAV0@_J@Z
??4CTXTimeSpan@@QAEAAV0@V0@@Z
??4CUnZipFile@@QAEAAV0@$$QAV0@@Z
??4CUnZipFile@@QAEAAV0@ABV0@@Z
??4CUnzipBuffers@@QAEAAV0@ABV0@@Z
??4CZipBuffers@@QAEAAV0@$$QAV0@@Z
??4CZipBuffers@@QAEAAV0@ABV0@@Z
??4CZipFiles@@QAEAAV0@$$QAV0@@Z
??4CZipFiles@@QAEAAV0@ABV0@@Z
??4EcdsaKey@Ecdsa@@QAEAAV01@ABV01@@Z
??4HttpClientUtil@@QAEAAV0@$$QAV0@@Z
??4HttpClientUtil@@QAEAAV0@ABV0@@Z
??4TiXmlComment@@QAEXABV0@@Z
??4TiXmlDeclaration@@QAEXABV0@@Z
??4TiXmlDocument@@QAEXABV0@@Z
??4TiXmlElement@@QAEXABV0@@Z
??4TiXmlPrinter@@QAEAAV0@$$QAV0@@Z
??4TiXmlPrinter@@QAEAAV0@ABV0@@Z
??4TiXmlText@@QAEXABV0@@Z
??4TiXmlUnknown@@QAEXABV0@@Z
??7CTXStringA@@QBE_NXZ
??7CTXStringW@@QBE_NXZ
??8@YA_NABVCTXStringA@@0@Z
??8@YA_NABVCTXStringA@@D@Z
??8@YA_NABVCTXStringA@@PBD@Z
??8@YA_NABVCTXStringW@@0@Z
??8@YA_NABVCTXStringW@@PB_W@Z
??8@YA_NABVCTXStringW@@_W@Z
??8@YA_NDABVCTXStringA@@@Z
??8@YA_NPA_WABVCTXBSTR@@@Z
??8@YA_NPA_WABVCTXStringW@@@Z
??8@YA_NPBDABVCTXStringA@@@Z
??8@YA_NPB_WABVCTXBSTR@@@Z
??8@YA_NPB_WABVCTXStringW@@@Z
??8@YA_N_WABVCTXStringW@@@Z
??8CTXBSTR@@QBE_NABV0@@Z
??8CTXBSTR@@QBE_NPA_W@Z
??8CTXBSTR@@QBE_NPB_W@Z
??8CTXTime@@QBE_NV0@@Z
??8CTXTimeSpan@@QBE_NV0@@Z
??8TiXmlAttribute@@QBE_NABV0@@Z
??9@YA_NABVCTXStringA@@0@Z
??9@YA_NABVCTXStringA@@D@Z
??9@YA_NABVCTXStringA@@PBD@Z
??9@YA_NABVCTXStringW@@0@Z
??9@YA_NABVCTXStringW@@PB_W@Z
??9@YA_NABVCTXStringW@@_W@Z
??9@YA_NDABVCTXStringA@@@Z
??9@YA_NPA_WABVCTXBSTR@@@Z
??9@YA_NPBDABVCTXStringA@@@Z
??9@YA_NPB_WABVCTXBSTR@@@Z
??9@YA_NPB_WABVCTXStringW@@@Z
??9@YA_N_WABVCTXStringW@@@Z
??9CTXBSTR@@QBE_NABV0@@Z
??9CTXBSTR@@QBE_NPA_W@Z
??9CTXBSTR@@QBE_NPB_W@Z
??9CTXTime@@QBE_NV0@@Z
??9CTXTimeSpan@@QBE_NV0@@Z
??ACTXStringA@@QBEDH@Z
??ACTXStringW@@QBE_WH@Z
??BBigNum@Ecdsa@@QAEPAUbignum_st@@XZ
??BBigNum@Ecdsa@@QBEPBUbignum_st@@XZ
??BCTXBSTR@@QBEPA_WXZ
??BCTXCriticalSection@@QAEPAU_RTL_CRITICAL_SECTION@@XZ
??BCTXStringA@@QBEPBDXZ
??BCTXStringW@@QBEPB_WXZ
??BEcdsaKey@Ecdsa@@QAEPAUec_key_st@@XZ
??BEcdsaKey@Ecdsa@@QBEPBUec_key_st@@XZ
??BEcdsaSignature@Ecdsa@@QAEPAUECDSA_SIG_st@@XZ
??BEcdsaSignature@Ecdsa@@QBEPBUECDSA_SIG_st@@XZ
??GCTXTime@@QBE?AV0@VCTXTimeSpan@@@Z
??GCTXTime@@QBE?AVCTXTimeSpan@@V0@@Z
??GCTXTimeSpan@@QBE?AV0@V0@@Z
??H@YA?AVCTXStringA@@ABV0@0@Z
??H@YA?AVCTXStringA@@ABV0@D@Z
??H@YA?AVCTXStringA@@ABV0@PBD@Z
??H@YA?AVCTXStringA@@DABV0@@Z
??H@YA?AVCTXStringA@@PBDABV0@@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??H@YA?AVCTXStringW@@ABV0@_W@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
??H@YA?AVCTXStringW@@_WABV0@@Z
??HCTXTime@@QBE?AV0@VCTXTimeSpan@@@Z
??HCTXTimeSpan@@QBE?AV0@V0@@Z
??ICTXBSTR@@QAEPAPA_WXZ
??M@YA_NABVCTXStringA@@0@Z
??M@YA_NABVCTXStringA@@PBD@Z
??M@YA_NABVCTXStringW@@0@Z
??M@YA_NABVCTXStringW@@PB_W@Z
??M@YA_NPBDABVCTXStringA@@@Z
??M@YA_NPB_WABVCTXStringW@@@Z
??MCTXBSTR@@QBE_NABV0@@Z
??MCTXBSTR@@QBE_NPA_W@Z
??MCTXBSTR@@QBE_NPB_W@Z
??MCTXTime@@QBE_NV0@@Z
??MCTXTimeSpan@@QBE_NV0@@Z
??MTiXmlAttribute@@QBE_NABV0@@Z
??N@YA_NABVCTXStringA@@0@Z
??N@YA_NABVCTXStringA@@PBD@Z
??N@YA_NABVCTXStringW@@0@Z
??N@YA_NABVCTXStringW@@PB_W@Z
??N@YA_NPBDABVCTXStringA@@@Z
??N@YA_NPB_WABVCTXStringW@@@Z
??NCTXTime@@QBE_NV0@@Z
??NCTXTimeSpan@@QBE_NV0@@Z
??O@YA_NABVCTXStringA@@0@Z
??O@YA_NABVCTXStringA@@PBD@Z
??O@YA_NABVCTXStringW@@0@Z
??O@YA_NABVCTXStringW@@PB_W@Z
??O@YA_NPBDABVCTXStringA@@@Z
??O@YA_NPB_WABVCTXStringW@@@Z
??OCTXBSTR@@QBE_NABV0@@Z
??OCTXBSTR@@QBE_NPA_W@Z
??OCTXBSTR@@QBE_NPB_W@Z
??OCTXTime@@QBE_NV0@@Z
??OCTXTimeSpan@@QBE_NV0@@Z
??OTiXmlAttribute@@QBE_NABV0@@Z
??P@YA_NABVCTXStringA@@0@Z
??P@YA_NABVCTXStringA@@PBD@Z
??P@YA_NABVCTXStringW@@0@Z
??P@YA_NABVCTXStringW@@PB_W@Z
??P@YA_NPBDABVCTXStringA@@@Z
??P@YA_NPB_WABVCTXStringW@@@Z
??PCTXTime@@QBE_NV0@@Z
??PCTXTimeSpan@@QBE_NV0@@Z
??YCTXBSTR@@QAEAAV0@ABV0@@Z
??YCTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z
??YCTXBSTR@@QAEAAV0@PB_W@Z
??YCTXStringA@@QAEAAV0@ABV0@@Z
??YCTXStringA@@QAEAAV0@D@Z
??YCTXStringA@@QAEAAV0@PBD@Z
??YCTXStringW@@QAEAAV0@ABUtagVARIANT@@@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
??YCTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
??YCTXStringW@@QAEAAV0@_W@Z
??YCTXTime@@QAEAAV0@VCTXTimeSpan@@@Z
??YCTXTimeSpan@@QAEAAV0@V0@@Z
??ZCTXTime@@QAEAAV0@VCTXTimeSpan@@@Z
??ZCTXTimeSpan@@QAEAAV0@V0@@Z
??_7CTXCommPack@@6B@
??_7CTXCriticalSection@@6B@
??_7CTXHttpDownload@@6BCHttpTCPConnectorSink@@@
??_7CTXHttpDownload@@6BCTXThreadModel@@@
??_7CTXHttpDownloadSink@@6B@
??_7TiXmlAttribute@@6B@
??_7TiXmlBase@@6B@
??_7TiXmlComment@@6B@
??_7TiXmlDeclaration@@6B@
??_7TiXmlDocument@@6B@
??_7TiXmlElement@@6B@
??_7TiXmlNode@@6B@
??_7TiXmlPrinter@@6B@
??_7TiXmlText@@6B@
??_7TiXmlUnknown@@6B@
??_FCGZipBuffer@@QAEXXZ
??_FEcdsaKey@Ecdsa@@QAEXXZ
?Accept@TiXmlComment@@UBE_NPAVTiXmlVisitor@@@Z
?Accept@TiXmlDeclaration@@UBE_NPAVTiXmlVisitor@@@Z
?Accept@TiXmlDocument@@UBE_NPAVTiXmlVisitor@@@Z
?Accept@TiXmlElement@@UBE_NPAVTiXmlVisitor@@@Z
?Accept@TiXmlText@@UBE_NPAVTiXmlVisitor@@@Z
?Accept@TiXmlUnknown@@UBE_NPAVTiXmlVisitor@@@Z
?Add@TiXmlAttributeSet@@QAEXPAVTiXmlAttribute@@@Z
?AddArkHttpClientResult@HttpStat@@YAXH@Z
?AddBuf@CTXCommPack@@QAEHABVCTXBuffer@@@Z
?AddBuf@CTXCommPack@@QAEHPBEI@Z
?AddBufLenByte@CTXCommPack@@QAEHABVCTXBuffer@@@Z
?AddBufLenDWord@CTXCommPack@@QAEHABVCTXBuffer@@H@Z
?AddBufLenWord@CTXCommPack@@QAEHABVCTXBuffer@@H@Z
?AddBuffer@CZipBuffers@@QAE_NPBXIPBD@Z
?AddByte@CTXCommPack@@QAEHE@Z
?AddCookie@CHttpClient@@QAEXPB_W@Z
?AddCustomHeader@CHttpClient@@QAAXPB_W0ZZ
?AddDWord@CTXCommPack@@QAEHKH@Z
?AddErrorSink@FS@@YAHPAUITXFileSystemErrorSink@@@Z
?AddEvent@CTXThreadModel@@IAEXPAX@Z
?AddFile@CZipFiles@@QAE_NABVCTXStringW@@0@Z
?AddFileSystem@FS@@YAJW4FILESYSTEM_TYPE@@PB_W1HHH@Z
?AddFormData@CHttpClient@@QAAXPB_W0ZZ
?AddFormData@CTXHttpDownload@@QAEXABVCTXStringW@@0@Z
?AddFormFile@CHttpClient@@QAEXPB_W00@Z
?AddFormFileBuffer@CHttpClient@@QAEXPB_WPBXH0@Z
?AddHttpClientResult@HttpStat@@YAXH@Z
?AddHttpDownloadResult@HttpStat@@YAXH@Z
?AddInfo@CTXHttpDownload@@QAEHABVCTXStringW@@0@Z
?AddInfo@CTXHttpDownload@@QAEHABVCTXStringW@@@Z
?AddInfo@CTXHttpDownload@@QAEHABVCTXStringW@@K@Z
?AddInfo@CTXHttpDownload@@QAEHABVCTXStringW@@PBEK@Z
?AddPack@CTXCommPack@@QAEHABV1@@Z
?AddPlugin@CoreCenter@Util@@YAHPA_WPAUITXData@@@Z
?AddPluginEx@CoreCenter@Util@@YAHPAUITXData@@PA_W0@Z
?AddRelativeFileSystem@FS@@YAJPB_W00HH@Z
?AddStrA@CTXCommPack@@QAEHABVCTXStringA@@@Z
?AddStrAEndChar@CTXCommPack@@QAEHABVCTXStringA@@E@Z
?AddStrALenByte@CTXCommPack@@QAEHABVCTXStringA@@@Z
?AddStrALenDWord@CTXCommPack@@QAEHABVCTXStringA@@H@Z
?AddStrALenWord@CTXCommPack@@QAEHABVCTXStringA@@H@Z
?AddStrW@CTXCommPack@@QAEHABVCTXStringW@@@Z
?AddStrWEndChar@CTXCommPack@@QAEHABVCTXStringW@@E@Z
?AddStrWLenByte@CTXCommPack@@QAEHABVCTXStringW@@@Z
?AddStrWLenDWord@CTXCommPack@@QAEHABVCTXStringW@@H@Z
?AddStrWLenWord@CTXCommPack@@QAEHABVCTXStringW@@H@Z
?AddTLV@CTXCommPack@@QAEHEABVCTXBuffer@@W4TXCommPackDataType@@@Z
?AddTLV@CTXCommPack@@QAEHGABVCTXBuffer@@W4TXCommPackDataType@@@Z
?AddTLV@CTXCommPack@@QAEHKABVCTXBuffer@@W4TXCommPackDataType@@@Z
?AddToDeadQueue@Misc@Util@@YAXHP6AXXZ@Z
?AddUInt64@CTXCommPack@@QAEH_KH@Z
?AddVBuf@CTXCommPack@@IAEHABVCTXBuffer@@W4TXCommPackDataType@@@Z
?AddWord@CTXCommPack@@QAEHGH@Z
?AllocBuffer@Misc@Util@@YAPAXI@Z
?AllocSysString@CTXStringW@@QBEPA_WXZ
?AnalyseResponseData@CTXHttpDownload@@AAEHAAH@Z
?AnalyseResponseHead@CTXHttpDownload@@AAEHXZ
?AnsiToUnicode@Convert@Util@@YA_NAAVCTXStringW@@PBDH@Z
?Append@CTXBSTR@@QAEJABV1@@Z
?Append@CTXBSTR@@QAEJD@Z
?Append@CTXBSTR@@QAEJPB_W@Z
?Append@CTXBSTR@@QAEJPB_WH@Z
?Append@CTXBSTR@@QAEJ_W@Z
?Append@CTXStringA@@QAEXABV1@@Z
?Append@CTXStringA@@QAEXPBD@Z
?Append@CTXStringA@@QAEXPBDH@Z
?Append@CTXStringW@@QAEXABV1@@Z
?Append@CTXStringW@@QAEXPB_W@Z
?Append@CTXStringW@@QAEXPB_WH@Z
?AppendBSTR@CTXBSTR@@QAEJPA_W@Z
?AppendBSTR@CTXStringW@@QAEXPA_W@Z
?AppendBytes@CTXBSTR@@QAEJPBDH@Z
?AppendChar@CTXStringA@@QAEXD@Z
?AppendChar@CTXStringW@@QAEX_W@Z
?AppendFormat@CTXStringW@@QAAXPB_WZZ
?ArrayToBSTR@CTXBSTR@@QAEJPBUtagSAFEARRAY@@@Z
?AssertLog@@YAXHPB_WHH0PAD@Z
?AssignBSTR@CTXBSTR@@QAEJQA_W@Z
?AsyncCheckFileTrusted@Misc@Util@@YAXPB_W0PAUITXCallbackKey@@K@Z
?AsyncIsTencentTrusted@Misc@Util@@YAXPB_WPAUITXCallbackKey@@K@Z
?AsyncWaitThreadStopAndStart@CTXHttpDownload@@AAEXXZ
?Attach@CTXBSTR@@QAEXPA_W@Z
?Attribute@TiXmlElement@@QBEPBDPBD@Z
?Attribute@TiXmlElement@@QBEPBDPBDPAH@Z
?Attribute@TiXmlElement@@QBEPBDPBDPAN@Z
?BIG5ToUnicode@Convert@Util@@YA_NAAVCTXStringW@@PBDH@Z
?BSTRToArray@CTXBSTR@@QAEJPAPAUtagSAFEARRAY@@@Z
?Base64Decode@Encode@Util@@YA?AVCTXBuffer@@PBD@Z
?Base64Decode@Encode@Util@@YA?AVCTXBuffer@@PB_W@Z
?Base64Encode@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@H@Z
?Bind@CTXHttpDownload@@QAEHPB_WG@Z
?Blank@TiXmlText@@IBE_NXZ
?BuildRqHead@CTXHttpDownload@@AAEHAAVCTXStringA@@@Z
?ByteLength@CTXBSTR@@QBEIXZ
?CDATA@TiXmlText@@QBE_NXZ
?CRC32@@YAKKPBEH@Z
?CStr@TiXmlPrinter@@QAEPBDXZ
?Cancel@CHttpClient@@QAEXXZ
?CancelDownload@CTXHttpDownload@@QAEXXZ
?CancelResolve@HostResolve@Util@@YAJK@Z
?CheckBufEndChar@CTXCommPack@@QAEHE@Z
?CheckBuffer@CTXCommPack@@IAEHI@Z
?CheckOutOverflow@CTXCommPack@@IAEHI@Z
?CheckRunMode@CTXCommPack@@IAEHW4RunMode@1@@Z
?CheckUrlIfHttps@CTXHttpDownload@@AAEXPB_W@Z
?CheckVistaAndStartSelfMediumLevel@Sys@Util@@YAHXZ
?Clear@CGZipFile@@QAEXXZ
?Clear@CUnGZipFile@@QAEXXZ
?Clear@CUnZipFile@@QAEXXZ
?Clear@CZipBuffers@@QAEXXZ
?Clear@CZipFiles@@QAEXXZ
?Clear@TiXmlNode@@QAEXXZ
?ClearCacheForGetService@CoreCenter@Util@@YAXXZ
?ClearDeadQueue@Misc@Util@@YAXXZ
?ClearError@TiXmlDocument@@QAEXXZ
?ClearRequestHeader@CTXHttpDownload@@QAEXXZ
?ClearResult@CGUnzipBuffer@@QAEXXZ
?ClearResult@CGZipBuffer@@QAEXXZ
?ClearThis@TiXmlElement@@IAEXXZ
?Clone@TiXmlComment@@UBEPAVTiXmlNode@@XZ
?Clone@TiXmlDeclaration@@UBEPAVTiXmlNode@@XZ
?Clone@TiXmlDocument@@MBEPAVTiXmlNode@@XZ
?Clone@TiXmlElement@@UBEPAVTiXmlNode@@XZ
?Clone@TiXmlText@@MBEPAVTiXmlNode@@XZ
?Clone@TiXmlUnknown@@UBEPAVTiXmlNode@@XZ
?CloseReuseTCP@CTXHttpDownload@@QAEXXZ
?Collate@CTXStringW@@QBEHPB_W@Z
?CollateNoCase@CTXStringW@@QBEHPB_W@Z
?Column@TiXmlBase@@QBEHXZ
?CombinePath@FS@Util@@YA?AVCTXStringW@@ABV3@0@Z
?CombineQNC@FS@@YA?AVCTXStringW@@PB_W0@Z
?CommitChange@FS@@YAHPB_W@Z
?Compare@CTXStringA@@QBEHPBD@Z
?Compare@CTXStringW@@QBEHPB_W@Z
?CompareNoCase@CTXStringA@@QBEHPBD@Z
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
?ConnectToServer@CTXHttpDownload@@AAEHXZ
?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z
?ConvertUTF32ToUTF8@TiXmlBase@@KAXKPADPAH@Z
?Copy@CTXBSTR@@QBEPA_WXZ
?CopyBufferOut@CTXCommPack@@QBEHAAVCTXBuffer@@@Z
?CopyBufferOut@CTXCommPack@@QBEHPAEAAI@Z
?CopyDecodeBufferOut@CTXCommPack@@QBEHAAVCTXBuffer@@@Z
?CopyDecodeBufferOut@CTXCommPack@@QBEHPAEAAI@Z
?CopyDirectory@FS@@YAHPB_W0PAUITXCopyDirProgress@@@Z
?CopyFileInMem@FS@@YAHPB_W0PAUITXBuffer@@H@Z
?CopyFileW@FS@@YAHPB_W0H@Z
?CopyTXDataField@Data@Util@@YAHPAUITXDataRead@@PAUITXData@@PBD2@Z
?CopyTo@CTXBSTR@@QBEJPAPA_W@Z
?CopyTo@CTXBSTR@@QBEJPAUtagVARIANT@@@Z
?CopyTo@TiXmlComment@@IBEXPAV1@@Z
?CopyTo@TiXmlDeclaration@@IBEXPAV1@@Z
?CopyTo@TiXmlDocument@@ABEXPAV1@@Z
?CopyTo@TiXmlElement@@IBEXPAV1@@Z
?CopyTo@TiXmlNode@@IBEXPAV1@@Z
?CopyTo@TiXmlText@@IBEXPAV1@@Z
?CopyTo@TiXmlUnknown@@IBEXPAV1@@Z
?CrackUrl@CTXHttpDownload@@AAEHPB_W@Z
?CreateConnectTCP@Network@Util@@YAHHPAPAUITXConnectTCP@@@Z
?CreateDirectoryW@FS@@YAHPB_W@Z
?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?CreatePack@CTXCommPack@@SAPAV1@XZ
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?CreateTXArrayFormQQDoc@Data@Util@@YAHPAUITXBuffer@@PAPAUITXArray@@@Z
?CreateTXArraySafe@Data@Util@@YAHPAUITXArrayRead@@PAPAU3@@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
?CreateTXDataFormQQDoc@Data@Util@@YAHPAUITXBuffer@@PAPAUITXData@@@Z
?CreateTXDataSafe@Data@Util@@YAHPAUITXDataRead@@PAPAU3@@Z
?DBCToSBC@Convert@Util@@YA_NAAVCTXStringW@@@Z
?DWordToStringA@Convert@Util@@YA?AVCTXStringA@@K@Z
?DWordToStringW@Convert@Util@@YA?AVCTXStringW@@K@Z
?Decode16@Encode@Util@@YAHABVCTXStringW@@AAVCTXBuffer@@@Z
?DecodeHash@Encode@Util@@YAHPAPAUITXBuffer@@ABVCTXStringW@@@Z
?DecodeUrl@Encode@Util@@YA?AVCTXStringW@@ABV3@_N@Z
?DelErrorSink@FS@@YAHPAUITXFileSystemErrorSink@@@Z
?Delete@CTXStringA@@QAEHHH@Z
?Delete@CTXStringW@@QAEHHH@Z
?DeleteDirectory@FS@@YAHPB_W@Z
?DeleteFileW@FS@@YAHPB_W@Z
?Detach@CTXBSTR@@QAEPA_WXZ
?DisablePlugin@CoreCenter@Util@@YAHPA_W@Z
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
?DoFormatEx@CFmtString@@QAE?AV?$vector@UtagStringItem@@V?$allocator@UtagStringItem@@@std@@@std@@PB_W@Z
?DoIndent@TiXmlPrinter@@AAEXXZ
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 713KB - Virtual size: 712KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 64KB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 13B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rol Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE