C:\Users\Riley\OneDrive\Developer\AltServer\Release\AltServer.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8c0625e8a583aadf95e604a53480eaf11d717647cfb1457eefafcebb226d7c82.exe
Resource
win7-20240220-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
8c0625e8a583aadf95e604a53480eaf11d717647cfb1457eefafcebb226d7c82.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
8c0625e8a583aadf95e604a53480eaf11d717647cfb1457eefafcebb226d7c82
-
Size
2.1MB
-
MD5
0db5ad2cd60c9dd142bef768045bd35d
-
SHA1
3b2e8f904fd8edfdfab619374e5452ecde7c2580
-
SHA256
8c0625e8a583aadf95e604a53480eaf11d717647cfb1457eefafcebb226d7c82
-
SHA512
4274daab85c9064548150a48d55667a3a216ef031751ce3c553f5d6849bc360bab6a67ea9d164aa2ed4373aef115c89d41a1f36633b00e86f60f848e4eed03db
-
SSDEEP
49152:uBZHH/Z+BXCEyz2c6+v7lGLfuHK0VfMXUD8FeEseEohiscsh7uUruZFgNg2W5GWE:IZHH/UCEyz2c6+oLwjb8FeEseEohisca
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c0625e8a583aadf95e604a53480eaf11d717647cfb1457eefafcebb226d7c82
Files
-
8c0625e8a583aadf95e604a53480eaf11d717647cfb1457eefafcebb226d7c82.exe windows:6 windows x86 arch:x86
1a62972b99223849a36192efbae3b1d1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ws2_32
ntohl
closesocket
send
recv
htonl
accept
bind
select
listen
WSAStartup
getsockname
socket
ntohs
inet_ntoa
htons
WSAGetLastError
plist
plist_new_uint
plist_dict_next_item
plist_new_data
plist_dict_new_iter
plist_from_memory
plist_get_node_type
plist_get_data_val
plist_get_uint_val
plist_dict_set_item
plist_new_string
plist_new_array
plist_array_append_item
plist_new_dict
plist_to_xml
plist_dict_get_item
plist_array_get_size
plist_copy
plist_new_bool
plist_get_string_val
plist_dict_merge
plist_get_bool_val
plist_get_real_val
plist_get_date_val
plist_from_xml
plist_array_get_item
plist_compare_node_value
plist_free
winsparkle
win_sparkle_cleanup
win_sparkle_init
win_sparkle_set_appcast_url
win_sparkle_check_update_with_ui
kernel32
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
GetFinalPathNameByHandleW
SetFileInformationByHandle
AreFileApisANSI
CloseHandle
MoveFileExW
GetFileInformationByHandleEx
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
OutputDebugStringA
GetTempPathW
GetModuleFileNameA
IsWow64Process2
GetCurrentProcess
Sleep
GetModuleHandleW
IsWow64Process
GetLastError
LoadLibraryW
SetCurrentDirectoryW
GetSystemTimeAsFileTime
FormatMessageA
MultiByteToWideChar
WideCharToMultiByte
OutputDebugStringW
FreeLibrary
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
CreateMutexW
WaitForSingleObject
ReleaseMutex
InitOnceExecuteOnce
QueryPerformanceFrequency
InitOnceBeginInitialize
CreateDirectoryW
LocalFree
GetProcAddress
InitOnceComplete
user32
DialogBoxParamW
PostQuitMessage
AppendMenuW
SetForegroundWindow
RemoveMenu
LoadCursorW
LoadIconW
TranslateMessage
UpdateWindow
GetCursorPos
BeginPaint
EndPaint
EnableWindow
GetWindowTextW
GetDlgItem
TrackPopupMenu
GetDlgCtrlID
SetWindowTextW
MessageBoxIndirectW
LoadImageW
GetWindowTextLengthW
GetMessageW
DefWindowProcW
GetKeyState
PostMessageW
MessageBoxW
CreateWindowExW
SendMessageW
EndDialog
CreatePopupMenu
DispatchMessageW
RegisterClassExW
GetSubMenu
ShowWindow
gdi32
SetBkMode
GetStockObject
TextOutW
advapi32
RegQueryValueExA
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
shell32
SHGetMalloc
ShellExecuteW
ShellExecuteA
SHBrowseForFolderW
SHGetKnownFolderPath
SHGetPathFromIDListW
Shell_NotifyIconW
ole32
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoInitializeEx
CoCreateGuid
cpprest_2_10
?to_utf8string@conversions@utility@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@4@@Z
?str_iless@details@utility@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?append_query_encode_impl@uri_builder@web@@AAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
?serialize@value@json@web@@QBEXAAV?$basic_ostream@_WU?$char_traits@_W@std@@@std@@@Z
?make_decompressor@builtin@compression@http@web@@YA?AV?$unique_ptr@Vdecompress_provider@compression@http@web@@U?$default_delete@Vdecompress_provider@compression@http@web@@@std@@@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@6@@Z
??0http_client@client@http@web@@QAE@ABVuri@3@ABVhttp_client_config@123@@Z
?POST@methods@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B
?set_body@http_msg_base@details@http@web@@QAEXABV?$basic_istream@E@streams@Concurrency@@_KABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??1win32_encryption@details@web@@QAE@XZ
??0http_msg_base@details@http@web@@QAE@XZ
?type@value@json@web@@QBE?AW4value_type@123@XZ
?has_string_field@value@json@web@@QBE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?as_string@value@json@web@@QBEABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?as_array@value@json@web@@QAEAAVarray@23@XZ
?parse@value@json@web@@SA?AV123@AAV?$basic_istream@_WU?$char_traits@_W@std@@@std@@@Z
?object@value@json@web@@SA?AV123@_N@Z
??4value@json@web@@QAEAAV012@ABV012@@Z
??0value@json@web@@QAE@XZ
??0value@json@web@@QAE@ABV012@@Z
??0http_client@client@http@web@@QAE@ABVuri@3@@Z
??0value@json@web@@QAE@$$QAV012@@Z
?to_uri@uri_builder@web@@QBE?AVuri@2@XZ
_get_size
??1http_client@client@http@web@@QAE@XZ
?has_array_field@value@json@web@@QBE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?request@http_client@client@http@web@@QAE?AV?$task@Vhttp_response@http@web@@@Concurrency@@Vhttp_request@34@ABVcancellation_token@6@@Z
_seekwrpos_fsb
_getn_fsb
_seekrdtoend_fsb
?to_base64@conversions@utility@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$vector@EV?$allocator@E@std@@@4@@Z
?at@value@json@web@@QBEABV123@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?has_integer_field@value@json@web@@QBE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??Avalue@json@web@@QAEAAV012@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?as_integer@value@json@web@@QBEHXZ
?serialize@value@json@web@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?parse@value@json@web@@SA?AV123@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?string@value@json@web@@SA?AV123@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?number@value@json@web@@SA?AV123@N@Z
_seekrdpos_fsb
_putn_fsb
_sync_fsb
?number@value@json@web@@SA?AV123@H@Z
_close_fsb_nolock
_open_fsb_str
??0uri@web@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GET@methods@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B
?to_string@_http_request@details@http@web@@UBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
??0_http_request@details@http@web@@QAE@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?to_string@_http_response@details@http@web@@UBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?_complete@http_msg_base@details@http@web@@UAEX_KABVexception_ptr@std@@@Z
?to_string@http_msg_base@details@http@web@@UBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
??4value@json@web@@QAEAAV012@$$QAV012@@Z
?from_base64@conversions@utility@@YA?AV?$vector@EV?$allocator@E@std@@@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@4@@Z
??0uri@web@@QAE@PB_W@Z
?_extract_vector@http_msg_base@details@http@web@@QAE?AV?$vector@EV?$allocator@E@std@@@std@@XZ
?decode@uri@web@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV34@@Z
?encode_uri@uri@web@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV34@W4component@components@12@@Z
?set_request_uri@_http_request@details@http@web@@QAEXABVuri@4@@Z
?has_object_field@value@json@web@@QBE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?to_string@uri_builder@web@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
imobiledevice
mobile_image_mounter_mount_image
idevice_new_with_options
debugserver_client_start_service
debugserver_client_send_command
debugserver_command_free
idevice_free
debugserver_command_new
debugserver_decode_string
debugserver_client_free
instproxy_uninstall
afc_file_write
instproxy_client_options_new
afc_client_new
misagent_install
misagent_client_new
instproxy_install
idevice_get_device_list_extended
lockdownd_client_new_with_handshake
instproxy_status_get_percent_complete
idevice_connection_send
idevice_connection_receive_timeout
idevice_connection_get_fd
idevice_disconnect
np_set_notify_callback
np_client_free
np_observe_notifications
np_post_notification
lockdownd_service_descriptor_free
misagent_get_status_code
idevice_connect
instproxy_status_get_error
mobile_image_mounter_free
instproxy_client_free
afc_file_open
mobile_image_mounter_hangup
lockdownd_get_value
lockdownd_start_service
instproxy_status_get_name
np_client_new
instproxy_client_options_free
mobile_image_mounter_lookup_image
afc_get_file_info
lockdownd_client_free
idevice_event_subscribe
lockdownd_get_device_name
afc_file_close
misagent_remove
misagent_client_free
idevice_device_list_extended_free
misagent_copy_all
mobile_image_mounter_upload_image
instproxy_client_new
instproxy_client_options_add
afc_make_directory
lockdownd_client_new
afc_client_free
mobile_image_mounter_new
instproxy_browse
msvcp140
_Cnd_signal
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
??0_Locinfo@std@@QAE@PBD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
_Query_perf_frequency
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
_Strxfrm
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?id@?$ctype@D@std@@2V0locale@2@A
??1_Locinfo@std@@QAE@XZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
?tolower@?$ctype@D@std@@QBEDD@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?id@?$collate@D@std@@2V0locale@2@A
?_Syserror_map@std@@YAPBDH@Z
?__ExceptionPtrToBool@@YA_NPBX@Z
_Strcoll
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@I@Z
?_Winerror_map@std@@YAHH@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MAE@XZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_K@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Xinvalid_argument@std@@YAXPBD@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_W@Z
_Xtime_get_ticks
_Query_perf_counter
_Thrd_sleep
_Cnd_do_broadcast_at_thread_exit
?id@?$ctype@_W@std@@2V0locale@2@A
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_Schedule_chore@details@Concurrency@@YAHPAU_Threadpool_chore@12@@Z
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QAEX_N@Z
?_Release_chore@details@Concurrency@@YAXPAU_Threadpool_chore@12@@Z
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AAEXXZ
?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ
?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ
?_Assign@_ContextCallback@details@Concurrency@@AAEXPAX@Z
?_Reset@_ContextCallback@details@Concurrency@@AAEXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z
??0task_continuation_context@Concurrency@@AAE@XZ
?__ExceptionPtrCreate@@YAXPAX@Z
_Cnd_init_in_situ
?__ExceptionPtrCopy@@YAXPAXPBX@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?uncaught_exception@std@@YA_NXZ
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_function_call@std@@YAXXZ
?_Throw_C_error@std@@YAXH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Xlength_error@std@@YAXPBD@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
_Mtx_destroy_in_situ
?__ExceptionPtrDestroy@@YAXPAX@Z
_Mtx_lock
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrRethrow@@YAXPBX@Z
_Mtx_init_in_situ
_Cnd_wait
_Mtx_unlock
_Cnd_broadcast
_Cnd_destroy_in_situ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Throw_Cpp_error@std@@YAXH@Z
gdiplus
GdiplusStartup
concrt140
?_Acquire@_ReentrantBlockingLock@details@Concurrency@@QAEXXZ
?_Release@_ReentrantBlockingLock@details@Concurrency@@QAEXXZ
vcruntime140
__CxxFrameHandler3
memchr
__RTDynamicCast
_except_handler4_common
_CxxThrowException
memset
__current_exception_context
__current_exception
strrchr
strchr
__std_type_info_compare
memmove
__std_terminate
_purecall
__std_exception_copy
memcpy
__std_exception_destroy
api-ms-win-crt-runtime-l1-1-0
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
abort
strerror
_initterm
_get_narrow_winmain_command_line
_initterm_e
_controlfp_s
exit
_exit
_register_thread_local_exe_atexit_callback
_errno
terminate
_beginthreadex
_c_exit
_wassert
_invalid_parameter_noinfo_noreturn
api-ms-win-crt-stdio-l1-1-0
_get_stream_buffer_pointers
fread
_set_fmode
__stdio_common_vfprintf
fsetpos
ungetc
setvbuf
fgetpos
fwrite
__p__commode
fgetc
_fseeki64
fopen
fflush
fputc
ftell
ferror
clearerr
_read
fseek
_sopen_dispatch
_setmode
_close
_write
fgets
_fileno
_lseek
feof
__acrt_iob_func
fclose
api-ms-win-crt-heap-l1-1-0
_set_new_mode
realloc
malloc
_callnewh
free
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_chmod
_lock_file
api-ms-win-crt-convert-l1-1-0
strtol
atoi
_itoa
strtoull
api-ms-win-crt-string-l1-1-0
isalnum
strncpy
tolower
strlen
api-ms-win-crt-time-l1-1-0
strftime
_localtime64
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
_configthreadlocale
api-ms-win-crt-math-l1-1-0
__setusermatherr
ldid
?Find@SubFolder@ldid@@UBEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$Functor@$$A6AXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@2@ABV?$Functor@$$A6AXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$Functor@$$A6A?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ@ldid@@@Z@2@@Z
?Entitlements@ldid@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V23@@Z
?Save@UnionFolder@ldid@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_NPBXABV?$Functor@$$A6AXAAV?$basic_streambuf@DU?$char_traits@D@std@@@std@@@Z@2@@Z
?Look@UnionFolder@ldid@@UBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Open@UnionFolder@ldid@@UBEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$Functor@$$A6AXAAV?$basic_streambuf@DU?$char_traits@D@std@@@std@@IPBX@Z@2@@Z
?Find@UnionFolder@ldid@@UBEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$Functor@$$A6AXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@2@ABV?$Functor@$$A6AXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$Functor@$$A6A?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ@ldid@@@Z@2@@Z
?Save@SubFolder@ldid@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_NPBXABV?$Functor@$$A6AXAAV?$basic_streambuf@DU?$char_traits@D@std@@@std@@@Z@2@@Z
?Look@SubFolder@ldid@@UBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Open@SubFolder@ldid@@UBEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$Functor@$$A6AXAAV?$basic_streambuf@DU?$char_traits@D@std@@@std@@IPBX@Z@2@@Z
?Find@DiskFolder@ldid@@UBEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$Functor@$$A6AXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@2@ABV?$Functor@$$A6AXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$Functor@$$A6A?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ@ldid@@@Z@2@@Z
??0DiskFolder@ldid@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??1DiskFolder@ldid@@QAE@XZ
?Look@DiskFolder@ldid@@UBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Sign@ldid@@YA?AUBundle@1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVFolder@1@00ABV?$Functor@$$A6A?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV12@0@Z@1@ABV?$Functor@$$A6AXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@1@ABV?$Functor@$$A6AXN@Z@1@@Z
?Open@DiskFolder@ldid@@UBEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$Functor@$$A6AXAAV?$basic_streambuf@DU?$char_traits@D@std@@@std@@IPBX@Z@2@@Z
?Save@DiskFolder@ldid@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_NPBXABV?$Functor@$$A6AXAAV?$basic_streambuf@DU?$char_traits@D@std@@@std@@@Z@2@@Z
libeay32
ord608
ord607
ord3686
ord605
ord1912
ord283
ord486
ord484
ord129
ord161
ord67
ord279
ord333
ord423
ord600
ord150
ord420
ord602
ord578
ord9
ord421
ord579
ord657
ord566
ord109
ord1882
ord66
ord95
ord1306
ord399
ord2075
ord281
ord119
ord656
ord419
ord641
ord3212
ord78
ord52
ord1305
ord1304
ord910
ord662
ord1291
ord907
ord401
ord1308
zlib1
inflateInit2_
inflateEnd
deflate
crc32
deflateEnd
deflateInit2_
inflate
Exports
Exports
??0Bundle@ldid@@QAE@$$QAU01@@Z
??0Bundle@ldid@@QAE@ABU01@@Z
??0Bundle@ldid@@QAE@XZ
??0DiskFolder@ldid@@QAE@ABV01@@Z
??0Folder@ldid@@QAE@$$QAV01@@Z
??0Folder@ldid@@QAE@ABV01@@Z
??0Folder@ldid@@QAE@XZ
??0SubFolder@ldid@@QAE@$$QAV01@@Z
??0SubFolder@ldid@@QAE@ABV01@@Z
??0UnionFolder@ldid@@QAE@$$QAV01@@Z
??0UnionFolder@ldid@@QAE@ABV01@@Z
??1Bundle@ldid@@QAE@XZ
??1SubFolder@ldid@@QAE@XZ
??1UnionFolder@ldid@@QAE@XZ
??4Bundle@ldid@@QAEAAU01@$$QAU01@@Z
??4Bundle@ldid@@QAEAAU01@ABU01@@Z
??4Folder@ldid@@QAEAAV01@$$QAV01@@Z
??4Folder@ldid@@QAEAAV01@ABV01@@Z
??4Hash@ldid@@QAEAAU01@$$QAU01@@Z
??4Hash@ldid@@QAEAAU01@ABU01@@Z
??RUnionFolder@ldid@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
??RUnionFolder@ldid@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??RUnionFolder@ldid@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBXAAV?$basic_streambuf@DU?$char_traits@D@std@@@3@@Z
??_7DiskFolder@ldid@@6B@
??_7Folder@ldid@@6B@
??_7SubFolder@ldid@@6B@
??_7UnionFolder@ldid@@6B@
?__autoclassinit2@DiskFolder@ldid@@QAEXI@Z
?__autoclassinit2@UnionFolder@ldid@@QAEXI@Z
OPENSSL_Applink
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 310KB - Virtual size: 310KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 230KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ