d:\cm\build\public\cool_win32_x86_4_6_8j\cool\dist\Win32\release\xprt5.pdb
Static task
static1
Behavioral task
behavioral1
Sample
04c418748ca0ebc59e459ee556d7ae20_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
04c418748ca0ebc59e459ee556d7ae20_JaffaCakes118
-
Size
304KB
-
MD5
04c418748ca0ebc59e459ee556d7ae20
-
SHA1
01f401813cfee5d262f176f6de76f0ae56530b41
-
SHA256
3c42ce958083fd673941a027f4ed9651161a56e6464ccdcbb16c56adbc8341de
-
SHA512
00f0ea2b332ef178709d62c2c932a7b1a4876302c047e8d7e580dab4a764633c99613e085e00caa2b4ceae222e99895e518146ec9a9bc06f3c433b69b6f02599
-
SSDEEP
6144:4Qb6g1fEi2FSGXbOYvz2+uOpGTIttHUUYTB/tZeXSGxUim7RNJm5ugpE:4ttBEGXKSqEpGTIPdYT9tZeXFxXENk3p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04c418748ca0ebc59e459ee556d7ae20_JaffaCakes118
Files
-
04c418748ca0ebc59e459ee556d7ae20_JaffaCakes118.dll windows:4 windows x86 arch:x86
aa412173984b284499d56ee4d1b96110
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
setlocale
_initterm
_adjust_fdiv
_vsnwprintf
wcsncpy
_vsnprintf
atof
atoi
mktime
gmtime
localtime
srand
malloc
realloc
free
_purecall
time
wcslen
rand
towupper
wcsftime
wcstoul
toupper
strftime
strtoul
strtok
strtol
strstr
strrchr
strchr
_strnicmp
_stricmp
strncmp
sscanf
memchr
iswxdigit
iswalpha
iswalnum
isspace
isdigit
isalpha
isalnum
memset
memcmp
abs
exp
log
pow
strcmp
_wcsnicmp
wcsncmp
iswdigit
memmove
iswspace
strlen
memcpy
_wcsrev
_wcslwr
_wcsupr
tolower
_wcsicmp
wcscmp
wcsstr
wcspbrk
wcsrchr
wcschr
wcstod
_fdopen
fprintf
clearerr
strerror
strcpy
strcat
fputc
fflush
_errno
fclose
fseek
ftell
fwrite
wcstol
towlower
_beginthreadex
fread
fopen
sprintf
kernel32
ExitProcess
GetSystemTimeAsFileTime
GetTickCount
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
Sleep
GetCurrentThreadId
GetExitCodeThread
ResumeThread
GetVersionExA
GetSystemInfo
QueryPerformanceFrequency
QueryPerformanceCounter
SetEvent
WaitForSingleObject
CreateEventA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryW
LoadLibraryA
GetProcAddress
FreeLibrary
FindFirstFileW
FindFirstFileA
FindNextFileW
FindNextFileA
FindClose
RemoveDirectoryW
RemoveDirectoryA
GetDriveTypeA
CreateDirectoryW
CreateDirectoryA
DeleteFileW
DeleteFileA
MoveFileW
MoveFileA
SetFileTime
SetFileAttributesW
SetFileAttributesA
CreateFileW
CreateFileA
SetEndOfFile
GetFileSize
GetLastError
GetTempPathA
FlushFileBuffers
WriteFile
ReadFile
CloseHandle
CompareStringW
MultiByteToWideChar
WideCharToMultiByte
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
DisableThreadLibraryCalls
SetFilePointer
user32
DispatchMessageA
KillTimer
SetTimer
RegisterClassA
UnregisterClassA
TranslateMessage
DefWindowProcA
PostMessageA
GetMessageA
PeekMessageA
DestroyWindow
CreateWindowExA
advapi32
RegOpenKeyExA
RegQueryValueExA
ole32
CoTaskMemFree
oleaut32
SysFreeString
SysAllocStringLen
Exports
Exports
??0TAesCipher@XPRT@@QAE@W4ECipherOp@TCipher@1@PBEH@Z
??0TBlockCipher@XPRT@@QAE@W4ECipherOp@TCipher@1@@Z
??0TBstr@XPRT@@QAE@ABV01@@Z
??0TBstr@XPRT@@QAE@GH@Z
??0TBstr@XPRT@@QAE@PBDHPBG@Z
??0TBstr@XPRT@@QAE@PBDPBG@Z
??0TBstr@XPRT@@QAE@PBG@Z
??0TBstr@XPRT@@QAE@PBGH@Z
??0TBstr@XPRT@@QAE@XZ
??0TBufferedFile@XPRT@@QAE@H@Z
??0TCipher@XPRT@@QAE@W4ECipherOp@01@@Z
??0TCmdLine@XPRT@@QAE@PBDI@Z
??0TCmdLine@XPRT@@QAE@PBUSMapEntry@01@I@Z
??0TConvertFromUcs2@XPRT@@QAE@PBG0@Z
??0TConvertFromUcs2@XPRT@@QAE@PBGH0@Z
??0TConvertToUcs2@XPRT@@QAE@PBDHPBG@Z
??0TConvertToUcs2@XPRT@@QAE@PBDPBG@Z
??0TCrc32Digest@XPRT@@QAE@XZ
??0TFile@XPRT@@QAE@XZ
??0TFileFinder@XPRT@@QAE@XZ
??0THmac@XPRT@@QAE@AAVTMessageDigest@1@PBEH@Z
??0TInetChecksum@XPRT@@QAE@XZ
??0TLibrary@XPRT@@QAE@XZ
??0TMd4Digest@XPRT@@QAE@H@Z
??0TMd5Digest@XPRT@@QAE@H@Z
??0TMemStream@XPRT@@QAE@PBXH@Z
??0TMemStream@XPRT@@QAE@XZ
??0TMessageDigest@XPRT@@QAE@XZ
??0TPtrArray@XPRT@@QAE@XZ
??0TPtrFromPtrMap@XPRT@@QAE@H@Z
??0TPtrFromPtrMap@XPRT@@QAE@HIMMM@Z
??0TPtrList@XPRT@@QAE@H@Z
??0TSha256Digest@XPRT@@QAE@XZ
??0TShaDigest@XPRT@@QAE@XZ
??0TThread@XPRT@@QAE@XZ
??0TTimer@XPRT@@QAE@XZ
??0TXmlAttributes@XPRT@@QAE@PAPBD@Z
??0TXmlDeserializer@XPRT@@QAE@AAVTStream@1@@Z
??0TXmlParser@XPRT@@QAE@AAVTStream@1@@Z
??0TXmlParser@XPRT@@QAE@ABV01@PBDAAVTStream@1@@Z
??0TXmlWriter@XPRT@@QAE@AAVTStream@1@@Z
??0TZipArchive@XPRT@@QAE@AAVTStream@1@@Z
??1TAesCipher@XPRT@@UAE@XZ
??1TBstr@XPRT@@QAE@XZ
??1TBufferedFile@XPRT@@UAE@XZ
??1TCipher@XPRT@@UAE@XZ
??1TCmdLine@XPRT@@QAE@XZ
??1TConvertFromUcs2@XPRT@@QAE@XZ
??1TConvertToUcs2@XPRT@@QAE@XZ
??1TFile@XPRT@@UAE@XZ
??1TFileFinder@XPRT@@UAE@XZ
??1TLibrary@XPRT@@UAE@XZ
??1TMemStream@XPRT@@UAE@XZ
??1TPtrArray@XPRT@@QAE@XZ
??1TPtrFromPtrMap@XPRT@@QAE@XZ
??1TPtrList@XPRT@@QAE@XZ
??1TThread@XPRT@@UAE@XZ
??1TTimer@XPRT@@UAE@XZ
??1TXmlDeserializer@XPRT@@UAE@XZ
??1TXmlParser@XPRT@@UAE@XZ
??1TXmlWriter@XPRT@@UAE@XZ
??1TZipArchive@XPRT@@UAE@XZ
??2TXprtAllocated@XPRT@@SAPAXI@Z
??3TXprtAllocated@XPRT@@SAXPAX@Z
??ATPtrFromPtrMap@XPRT@@QAEAAPAXPAX@Z
??_FTBufferedFile@XPRT@@QAEXXZ
??_FTMd4Digest@XPRT@@QAEXXZ
??_FTMd5Digest@XPRT@@QAEXXZ
??_FTPtrFromPtrMap@XPRT@@QAEXXZ
??_FTPtrList@XPRT@@QAEXXZ
??_UTXprtAllocated@XPRT@@SAPAXI@Z
??_VTXprtAllocated@XPRT@@SAXPAX@Z
?Add@TPtrArray@XPRT@@QAEHPAX@Z
?Add@TPtrArray@XPRT@@QAEHXZ
?AddHead@TPtrList@XPRT@@QAEPAU__POSITION@2@PAX@Z
?AddHead@TPtrList@XPRT@@QAEPAU__POSITION@2@XZ
?AddHead@TPtrList@XPRT@@QAEXABV12@@Z
?AddLeadingPathLengthEnhancer@TFile@XPRT@@SA?AVTBstr@2@PBG@Z
?AddTail@TPtrList@XPRT@@QAEPAU__POSITION@2@PAX@Z
?AddTail@TPtrList@XPRT@@QAEPAU__POSITION@2@XZ
?AddTail@TPtrList@XPRT@@QAEXABV12@@Z
?AddTrailingSeparator@TFile@XPRT@@SA?AVTBstr@2@PBG@Z
?Append@TBstr@XPRT@@QAEAAV12@ABV12@@Z
?Append@TBstr@XPRT@@QAEAAV12@G@Z
?Append@TBstr@XPRT@@QAEAAV12@PBDHPBG@Z
?Append@TBstr@XPRT@@QAEAAV12@PBDPBG@Z
?Append@TBstr@XPRT@@QAEAAV12@PBG@Z
?Append@TBstr@XPRT@@QAEAAV12@PBGH@Z
?Append@TPtrArray@XPRT@@QAEHABV12@@Z
?AppendFileNameToSpec@TFile@XPRT@@SA?AVTBstr@2@PBG0@Z
?AppendFormat@TBstr@XPRT@@QAAXPBGZZ
?Assign@TBstr@XPRT@@QAEAAV12@ABV12@@Z
?Assign@TBstr@XPRT@@QAEAAV12@G@Z
?Assign@TBstr@XPRT@@QAEAAV12@PBDHPBG@Z
?Assign@TBstr@XPRT@@QAEAAV12@PBDPBG@Z
?Assign@TBstr@XPRT@@QAEAAV12@PBG@Z
?Assign@TBstr@XPRT@@QAEAAV12@PBGH@Z
?Attach@TBstr@XPRT@@QAEXPAG@Z
?BerDump@TAesCipher@XPRT@@UAEHPAEH@Z
?BerInit@TAesCipher@XPRT@@UAEHPBEH@Z
?CanonicalizeSpec@TFile@XPRT@@SA?AVTBstr@2@PBG@Z
?Close@TBufferedFile@XPRT@@UAE_NXZ
?Close@TFile@XPRT@@UAE_NXZ
?Close@TFileFinder@XPRT@@QAEXXZ
?Close@TMemStream@XPRT@@UAE_NXZ
?Compare@TBstr@XPRT@@QBEHPBG@Z
?CompareNoCase@TBstr@XPRT@@QBEHPBG@Z
?CompareNormal@TBstr@XPRT@@QBEHPBG@Z
?Copy@TBstr@XPRT@@QBEPAGXZ
?Copy@TPtrArray@XPRT@@QAEXABV12@@Z
?Create@SPlex@XPRT@@SGPAU12@AAPAU12@II@Z
?Create@TThread@XPRT@@QAE_NP6AHPAX@Z0_N@Z
?CreateDirectoryA@TFile@XPRT@@SA_NPBG@Z
?CreatePath@TFile@XPRT@@SA_NPBG@Z
?CreateTempFileSpec@TFile@XPRT@@SA?AVTBstr@2@XZ
?Delete@TBstr@XPRT@@QAEHHH@Z
?Deserialize@TXmlSerializable@XPRT@@QAE_NAAVTXmlDeserializer@2@@Z
?Detach@TBstr@XPRT@@QAEPAGXZ
?DirSpecFromFullSpec@TFile@XPRT@@SA?AVTBstr@2@PBG@Z
?Empty@TBstr@XPRT@@QAEXXZ
?ExtractAt@TZipArchive@XPRT@@UAEPAVTStream@2@PAU__POSITION@2@@Z
?FileNameFromFullSpec@TFile@XPRT@@SA?AVTBstr@2@PBG@Z
?Find@TBstr@XPRT@@QBEHGH@Z
?Find@TBstr@XPRT@@QBEHPBGH@Z
?Find@TFileFinder@XPRT@@QAE_NPBGI@Z
?Find@TPtrArray@XPRT@@QBEHPAXH@Z
?Find@TPtrList@XPRT@@QBEPAU__POSITION@2@PAXPAU32@@Z
?Find@TZipArchive@XPRT@@UAEPAU__POSITION@2@PBG@Z
?FindIndex@TPtrList@XPRT@@QBEPAU__POSITION@2@H@Z
?FindNext@TFileFinder@XPRT@@QAE_NI@Z
?FindOneOf@TBstr@XPRT@@QBEHPBG@Z
?FindValue@TPtrFromPtrMap@XPRT@@QAEPAU__POSITION@2@PAXPAU32@@Z
?Finish@TCrc32Digest@XPRT@@QAEIXZ
?Finish@TCrc32Digest@XPRT@@UAEHPAEH@Z
?Finish@THmac@XPRT@@QAEHPAEH@Z
?Finish@TInetChecksum@XPRT@@QAEGXZ
?Finish@TMdXDigest@XPRT@@UAEHPAEH@Z
?Finish@TSha256Digest@XPRT@@UAEHPAEH@Z
?Finish@TShaDigest@XPRT@@UAEHPAEH@Z
?Flush@TBufferedFile@XPRT@@UAE_NXZ
?Flush@TFile@XPRT@@UAE_NXZ
?Flush@TMemStream@XPRT@@UAE_NXZ
?Format@TBstr@XPRT@@QAAXPBGZZ
?Format@TTime@XPRT@@QBE?AVTBstr@2@PBG0@Z
?Format@TTime@XPRT@@QBE?AVTBstr@2@PBG@Z
?FormatGmt@TTime@XPRT@@QBE?AVTBstr@2@PBG@Z
?FormatV@TBstr@XPRT@@QAEXPBGPAD@Z
?Free@TLibrary@XPRT@@QAE_NXZ
?FreeDataChain@SPlex@XPRT@@QAEXXZ
?FreeExtra@TPtrArray@XPRT@@QAEXXZ
?GetArgs@TCmdLine@XPRT@@QBEABV?$TBstrArrayT@VTBstrCompTraits@XPRT@@@2@XZ
?GetAt@TBstr@XPRT@@QBEGH@Z
?GetAt@TZipArchive@XPRT@@UAE_NPAU__POSITION@2@AAVTFileInfo@2@@Z
?GetAttribute@TXmlAttributes@XPRT@@QBE_NHPADH0H0H@Z
?GetBestEncoding@TBstr@XPRT@@QBE?AV12@XZ
?GetBlockSize@TAesCipher@XPRT@@UBEHXZ
?GetBstrPtr@TBstr@XPRT@@QAEPAPAGXZ
?GetCount@TXmlAttributes@XPRT@@QBEHXZ
?GetCount@TZipArchive@XPRT@@UAEHXZ
?GetCurrent@TInetChecksum@XPRT@@QAEGXZ
?GetCurrentColumn@TXmlParser@XPRT@@QBEHXZ
?GetCurrentId@TThread@XPRT@@SAIXZ
?GetCurrentLine@TXmlParser@XPRT@@QBEHXZ
?GetData@TMemStream@XPRT@@QBEPBXXZ
?GetDay@TTime@XPRT@@QBEHXZ
?GetDayOfWeek@TTime@XPRT@@QBEHXZ
?GetDigestSize@TCrc32Digest@XPRT@@UBEHXZ
?GetDigestSize@TMdXDigest@XPRT@@UBEHXZ
?GetDigestSize@TSha256Digest@XPRT@@UBEHXZ
?GetDigestSize@TShaDigest@XPRT@@UBEHXZ
?GetEncodedByteLength@TBstr@XPRT@@QBEHPBG@Z
?GetEncodedString@TBstr@XPRT@@QBEPBDPBG@Z
?GetFileSpec@TFile@XPRT@@QBEABVTBstr@2@XZ
?GetFileSpec@TFileFinder@XPRT@@QBE?AVTBstr@2@XZ
?GetFileSpec@TLibrary@XPRT@@QBEABVTBstr@2@XZ
?GetFileTime@TTime@XPRT@@QBEXAAU_FILETIME@@@Z
?GetGmtTm@TTime@XPRT@@QBE_NPAUtm@@@Z
?GetHeadPosition@TZipArchive@XPRT@@UAEPAU__POSITION@2@XZ
?GetHour@TTime@XPRT@@QBEHXZ
?GetId@TThread@XPRT@@QBEIXZ
?GetInfo@TFile@XPRT@@SA_NPBGAAVTFileInfo@2@@Z
?GetLastErrorString@TXmlParser@XPRT@@QBEPBDXZ
?GetLength@TBstr@XPRT@@QBEHXZ
?GetLength@TFile@XPRT@@UBE_JXZ
?GetLength@TMemStream@XPRT@@UBE_JXZ
?GetMinute@TTime@XPRT@@QBEHXZ
?GetMonth@TTime@XPRT@@QBEHXZ
?GetNext@TPtrFromPtrMap@XPRT@@QAEPAVTPair@12@AAPAU__POSITION@2@@Z
?GetNext@TPtrFromPtrMap@XPRT@@QBEPBVTPair@12@AAPAU__POSITION@2@@Z
?GetNext@TZipArchive@XPRT@@UAE_NAAPAU__POSITION@2@AAVTFileInfo@2@@Z
?GetNextAssoc@TPtrFromPtrMap@XPRT@@QBEXAAPAU__POSITION@2@AAPAX1@Z
?GetNextKey@TPtrFromPtrMap@XPRT@@QBEABQAXAAPAU__POSITION@2@@Z
?GetNextValue@TPtrFromPtrMap@XPRT@@QAEAAPAXAAPAU__POSITION@2@@Z
?GetNextValue@TPtrFromPtrMap@XPRT@@QBEABQAXAAPAU__POSITION@2@@Z
?GetOption@TCmdLine@XPRT@@QBE_NH@Z
?GetOption@TCmdLine@XPRT@@QBE_NHAAV?$TBstrArrayT@VTBstrCompTraits@XPRT@@@2@@Z
?GetOption@TCmdLine@XPRT@@QBE_NHAAVTBstr@2@@Z
?GetOptions@TCmdLine@XPRT@@QBEABV?$TArray@USOption@TCmdLine@XPRT@@V?$TElementTraits@USOption@TCmdLine@XPRT@@@3@@2@XZ
?GetPosition@TBufferedFile@XPRT@@UBE_JXZ
?GetPosition@TFile@XPRT@@UBE_JXZ
?GetPosition@TMemStream@XPRT@@UBE_JXZ
?GetProcAddress@TLibrary@XPRT@@QBEP6GHXZPBD@Z
?GetRawBstrPtr@TBstr@XPRT@@QAEPAPAGXZ
?GetSecond@TTime@XPRT@@QBEHXZ
?GetSpecialDirectory@TFile@XPRT@@SA?AVTBstr@2@W4ESpecialDir@12@@Z
?GetStartPosition@TPtrFromPtrMap@XPRT@@QBEPAU__POSITION@2@XZ
?GetString@TBstr@XPRT@@QBEPBGXZ
?GetTempDirectory@TFile@XPRT@@SA?AVTBstr@2@XZ
?GetTickCount@TTime@XPRT@@SA?AV12@XZ
?GetTime64@TTime@XPRT@@QBE_JXZ
?GetTimeZoneOffset@TTime@XPRT@@SA?AVTTimeSpan@2@ABV12@@Z
?GetTm@TTime@XPRT@@QBE_NPAUtm@@@Z
?GetType@TBlockCipher@XPRT@@UAE?AW4ECipherType@TCipher@2@XZ
?GetValue@TXmlAttributes@XPRT@@QBEPBDPBD0@Z
?GetYear@TTime@XPRT@@QBEHXZ
?Go@TXmlDeserializer@XPRT@@QAE_NAAVTXmlSerializable@2@@Z
?Go@TXmlParser@XPRT@@QAE_NXZ
?Init@TCondVar@XPRT@@QAEXXZ
?Init@TCritSec@XPRT@@QAEXXZ
?Init@TFileInfo@XPRT@@IAEXPBGI_JABVTTime@2@22@Z
?InitHashTable@TPtrFromPtrMap@XPRT@@QAE_NI_N@Z
?Insert@TBstr@XPRT@@QAEHHG@Z
?Insert@TBstr@XPRT@@QAEHHPBG@Z
?InsertAfter@TPtrList@XPRT@@QAEPAU__POSITION@2@PAU32@PAX@Z
?InsertAt@TPtrArray@XPRT@@QAEXHABV12@@Z
?InsertAt@TPtrArray@XPRT@@QAEXHPAXH@Z
?InsertBefore@TPtrList@XPRT@@QAEPAU__POSITION@2@PAU32@PAX@Z
?IsEmpty@TBstr@XPRT@@QBE_NXZ
?IsLoaded@TLibrary@XPRT@@QBE_NXZ
?IsOpen@TFile@XPRT@@QBE_NXZ
?IsRunning@TTimer@XPRT@@QBE_NXZ
?IsValid@TTime@XPRT@@QBE_NXZ
?Left@TBstr@XPRT@@QBE?AV12@H@Z
?Load@TLibrary@XPRT@@QAE_NPBG@Z
?Lock@TCritSec@XPRT@@QAEXXZ
?Lock@TSpinLock@XPRT@@QAEXXZ
?Lock@TSpinLockRE@XPRT@@QAEXXZ
?Lookup@TPtrFromPtrMap@XPRT@@QAEPAVTPair@12@PAX@Z
?Lookup@TPtrFromPtrMap@XPRT@@QBEPBVTPair@12@PAX@Z
?Lookup@TPtrFromPtrMap@XPRT@@QBE_NPAXAAPAX@Z
?LookupPrefix@TXmlWriter@XPRT@@QAEPBDPBD@Z
?MakeBigEndian@TBstr@XPRT@@QAEAAV12@XZ
?MakeLower@TBstr@XPRT@@QAEAAV12@XZ
?MakeReverse@TBstr@XPRT@@QAEAAV12@XZ
?MakeUpper@TBstr@XPRT@@QAEAAV12@XZ
?MakeValidSpec@TFile@XPRT@@SA?AVTBstr@2@PBG_N@Z
?Mid@TBstr@XPRT@@QBE?AV12@H@Z
?Mid@TBstr@XPRT@@QBE?AV12@HH@Z
?MoveToHead@TPtrList@XPRT@@QAEXPAU__POSITION@2@@Z
?MoveToTail@TPtrList@XPRT@@QAEXPAU__POSITION@2@@Z
?Normalize@TBstr@XPRT@@QAEAAV12@XZ
?OnCharacterData@TXmlParser@XPRT@@MAEXPBDH@Z
?OnComment@TXmlParser@XPRT@@MAEXPBD@Z
?OnDefault@TXmlParser@XPRT@@MAEXPBDH@Z
?OnEndCdataSection@TXmlParser@XPRT@@MAEXXZ
?OnEndElement@TXmlParser@XPRT@@MAEXPBD0@Z
?OnExternalEntityRef@TXmlParser@XPRT@@MAE_NPBD000@Z
?OnProcessingInstruction@TXmlParser@XPRT@@MAEXPBD0@Z
?OnStartCdataSection@TXmlParser@XPRT@@MAEXXZ
?OnStartElement@TXmlParser@XPRT@@MAEXPBD0ABVTXmlAttributes@2@@Z
?Open@TFile@XPRT@@QAE_NPBGI_N@Z
?Parse@TCmdLine@XPRT@@QAE_NHQAPAD@Z
?Parse@TCmdLine@XPRT@@QAE_NPBD@Z
?Pause@TXmlParser@XPRT@@QAEXXZ
?Prepare@TFifoBuffer@XPRT@@QAEPAEH@Z
?ProcessBlock@TAesCipher@XPRT@@UBEXPAE@Z
?ProcessData@TBlockCipher@XPRT@@UAEHPAEH_N@Z
?Read@TBufferedFile@XPRT@@UAEHPAXH@Z
?Read@TFifoBuffer@XPRT@@QAEHPAEH@Z
?Read@TFile@XPRT@@UAEHPAXH@Z
?Read@TMemStream@XPRT@@UAEHPAXH@Z
?Rehash@TPtrFromPtrMap@XPRT@@QAEXI@Z
?Remove@TBstr@XPRT@@QAEHG@Z
?Remove@TFile@XPRT@@SA_NPBG@Z
?RemoveAll@TPtrFromPtrMap@XPRT@@QAEXXZ
?RemoveAll@TPtrList@XPRT@@QAEXXZ
?RemoveAt@TPtrArray@XPRT@@QAEXHH@Z
?RemoveAt@TPtrList@XPRT@@QAEXPAU__POSITION@2@@Z
?RemoveAtPos@TPtrFromPtrMap@XPRT@@QAEXPAU__POSITION@2@@Z
?RemoveDirectoryA@TFile@XPRT@@SA_NPBG@Z
?RemoveHead@TPtrList@XPRT@@QAEPAXXZ
?RemoveHeadNoReturn@TPtrList@XPRT@@QAEXXZ
?RemoveKey@TPtrFromPtrMap@XPRT@@QAE_NPAX@Z
?RemoveTail@TPtrList@XPRT@@QAEPAXXZ
?RemoveTailNoReturn@TPtrList@XPRT@@QAEXXZ
?RemoveTrailingSeparator@TFile@XPRT@@SA?AVTBstr@2@PBG@Z
?Rename@TFile@XPRT@@SA_NPBG0@Z
?Replace@TBstr@XPRT@@QAEHGG@Z
?Replace@TBstr@XPRT@@QAEHPBG0@Z
?Resume@TThread@XPRT@@QAE_NXZ
?Resume@TXmlParser@XPRT@@QAEXXZ
?ReverseFind@TBstr@XPRT@@QBEHG@Z
?Right@TBstr@XPRT@@QBE?AV12@H@Z
?SafeToConvert@TFile@XPRT@@SA_NPBG@Z
?Serialize@TXmlSerializable@XPRT@@QBE_NAAVTXmlWriter@2@@Z
?Set@TTime@XPRT@@QAEXABU_FILETIME@@@Z
?Set@TTime@XPRT@@QAEXHHHHHH@Z
?Set@TTime@XPRT@@QAEXN@Z
?Set@TTime@XPRT@@QAEXPBG@Z
?SetAt@TBstr@XPRT@@QAEXHG@Z
?SetAt@TPtrFromPtrMap@XPRT@@QAEPAU__POSITION@2@PAX0@Z
?SetAtGrow@TPtrArray@XPRT@@QAEXHPAX@Z
?SetAttributes@TFile@XPRT@@SA_NPBGI@Z
?SetCallback@TTimer@XPRT@@QAEXPAVTTimerCallback@2@@Z
?SetCount@TPtrArray@XPRT@@QAE_NHH@Z
?SetCurrent@TInetChecksum@XPRT@@QAEXGH@Z
?SetIndentation@TXmlWriter@XPRT@@QAEX_N@Z
?SetIv@TBlockCipher@XPRT@@QAEXPBE@Z
?SetLastWriteTime@TFile@XPRT@@SA_NPBGABVTTime@2@@Z
?SetLength@TFile@XPRT@@UAE_N_J@Z
?SetLength@TMemStream@XPRT@@UAE_N_J@Z
?SetMode@TBlockCipher@XPRT@@QAEXW4ECipherMode@12@@Z
?SetOp@TCipher@XPRT@@QAEXW4ECipherOp@12@@Z
?SetOptimalLoad@TPtrFromPtrMap@XPRT@@QAEXMMM_N@Z
?SetPosition@TBufferedFile@XPRT@@UAE_N_JH@Z
?SetPosition@TFile@XPRT@@UAE_N_JH@Z
?SetPosition@TMemStream@XPRT@@UAE_N_JH@Z
?SetTime64@TTime@XPRT@@QAEX_J@Z
?SetValueAt@TPtrFromPtrMap@XPRT@@QAEXPAU__POSITION@2@PAX@Z
?Signal@TCondVar@XPRT@@QAEXXZ
?Sleep@TThread@XPRT@@SAXI@Z
?Sort@TPtrArray@XPRT@@QAEXW4ESortOrder@2@@Z
?Sort@TPtrList@XPRT@@QAEXW4ESortOrder@2@@Z
?SpecFromUrl@TFile@XPRT@@SA?AVTBstr@2@PBG@Z
?Start@TTimer@XPRT@@QAE_NH_N@Z
?Stop@TTimer@XPRT@@QAEXXZ
?Stop@TXmlParser@XPRT@@QAEXXZ
?SwapElements@TPtrList@XPRT@@QAEXPAU__POSITION@2@0@Z
?Term@TCondVar@XPRT@@QAEXXZ
?Term@TCritSec@XPRT@@QAEXXZ
?TestAccess@TFile@XPRT@@SA_NPBGI@Z
?ToDouble@TBstr@XPRT@@QBENXZ
?ToInt64@TBstr@XPRT@@QBE_JH@Z
?ToInt@TBstr@XPRT@@QBEHH@Z
?Tokenize@TBstr@XPRT@@QBE?AV12@PBGAAH@Z
?Transform@TCrc32Digest@XPRT@@MAEXQAIQBE@Z
?Transform@TMd4Digest@XPRT@@EAEXQAIQBE@Z
?Transform@TMd5Digest@XPRT@@EAEXQAIQBE@Z
?Transform@TShaDigest@XPRT@@EAEXQAIQBE@Z
?TrimLeft@TBstr@XPRT@@QAEAAV12@G@Z
?TrimLeft@TBstr@XPRT@@QAEAAV12@XZ
?TrimRight@TBstr@XPRT@@QAEAAV12@G@Z
?TrimRight@TBstr@XPRT@@QAEAAV12@XZ
?Unlock@TCritSec@XPRT@@QAEXXZ
?Unlock@TSpinLock@XPRT@@QAEXXZ
?Unlock@TSpinLockRE@XPRT@@QAEXXZ
?Update@THmac@XPRT@@QAEXPBEH@Z
?Update@TInetChecksum@XPRT@@QAEXPBEH@Z
?Update@TMessageDigest@XPRT@@QAEXPBEH@Z
?UrlFromSpec@TFile@XPRT@@SA?AVTBstr@2@PBG@Z
?VAdoptKey@TPtrFromGuidMap@XPRT@@MBEPAXPAX@Z
?VCompareKeys@TPtrFromGuidMap@XPRT@@MBEHPBX0@Z
?VHashKey@TPtrFromGuidMap@XPRT@@MBEIPBX@Z
?VOrphanKey@TPtrFromGuidMap@XPRT@@MBEXPAX@Z
?Wait@TCondVar@XPRT@@QAE_NH@Z
?WaitForExit@TThread@XPRT@@QAE_NPAH@Z
?Write@TBufferedFile@XPRT@@UAEHPBXH@Z
?Write@TFifoBuffer@XPRT@@QAEHPBEH@Z
?Write@TFile@XPRT@@UAEHPBXH@Z
?Write@TMemStream@XPRT@@UAEHPBXH@Z
?WriteAttribute@TXmlWriter@XPRT@@QAE_NPBD00@Z
?WriteAttribute@TXmlWriter@XPRT@@QAE_NPBD0@Z
?WriteCharacterData@TXmlWriter@XPRT@@QAE_NPBD@Z
?WriteEndDocument@TXmlWriter@XPRT@@QAE_NXZ
?WriteEndElement@TXmlWriter@XPRT@@QAE_NXZ
?WriteNamespace@TXmlWriter@XPRT@@QAE_NPBD0@Z
?WriteStartDocument@TXmlWriter@XPRT@@QAE_NXZ
?WriteStartElement@TXmlWriter@XPRT@@QAE_NPBD0@Z
?WriteStartElement@TXmlWriter@XPRT@@QAE_NPBD@Z
?kCurrentDirectory@TFileFinder@XPRT@@2QBGB
?kDirectorySeparator@TFile@XPRT@@2GB
?kLibraryExtension@TLibrary@XPRT@@2QBGB
?kParentDirectory@TFileFinder@XPRT@@2QBGB
?kUnsafeConversions@TFile@XPRT@@2QBGB
XML_DefaultCurrent
XML_ErrorString
XML_ExpatVersion
XML_ExpatVersionInfo
XML_ExternalEntityParserCreate
XML_FreeContentModel
XML_GetBase
XML_GetBuffer
XML_GetCurrentByteCount
XML_GetCurrentByteIndex
XML_GetCurrentColumnNumber
XML_GetCurrentLineNumber
XML_GetErrorCode
XML_GetFeatureList
XML_GetIdAttributeIndex
XML_GetInputContext
XML_GetParsingStatus
XML_GetSpecifiedAttributeCount
XML_MemFree
XML_MemMalloc
XML_MemRealloc
XML_Parse
XML_ParseBuffer
XML_ParserCreate
XML_ParserCreateNS
XML_ParserCreate_MM
XML_ParserFree
XML_ParserReset
XML_ResumeParser
XML_SetAttlistDeclHandler
XML_SetBase
XML_SetCdataSectionHandler
XML_SetCharacterDataHandler
XML_SetCommentHandler
XML_SetDefaultHandler
XML_SetDefaultHandlerExpand
XML_SetDoctypeDeclHandler
XML_SetElementDeclHandler
XML_SetElementHandler
XML_SetEncoding
XML_SetEndCdataSectionHandler
XML_SetEndDoctypeDeclHandler
XML_SetEndElementHandler
XML_SetEndNamespaceDeclHandler
XML_SetEntityDeclHandler
XML_SetExternalEntityRefHandler
XML_SetExternalEntityRefHandlerArg
XML_SetNamespaceDeclHandler
XML_SetNotStandaloneHandler
XML_SetNotationDeclHandler
XML_SetParamEntityParsing
XML_SetProcessingInstructionHandler
XML_SetReturnNSTriplet
XML_SetSkippedEntityHandler
XML_SetStartCdataSectionHandler
XML_SetStartDoctypeDeclHandler
XML_SetStartElementHandler
XML_SetStartNamespaceDeclHandler
XML_SetUnknownEncodingHandler
XML_SetUnparsedEntityDeclHandler
XML_SetUserData
XML_SetXmlDeclHandler
XML_StopParser
XML_UseForeignDTD
XML_UseParserAsHandlerArg
XprtTrace
XprtTrace1
XprtTrace2
_XprtAllocString@4
_XprtAllocStringLen@8
_XprtAolToIsoEncoding@8
_XprtAolToIsoLang@8
_XprtAssert@12
_XprtAtomicDecrement@4
_XprtAtomicIncrement@4
_XprtAtomicTestAndSet@4
_XprtBase64ToBin@12
_XprtBinToBase64@16
_XprtBinToHex@16
_XprtCanonicalizeScreenName@8
_XprtCompareLocale@12
_XprtCompareLocaleEx@16
_XprtCompareNoCase@8
_XprtCompareNormal@8
_XprtCompareString@8
_XprtCompareVersionsA@8
_XprtCompareWildcard@8
_XprtComputeChecksum@8
_XprtCreateThread@8
_XprtDebugBreak@0
_XprtDestroyThread@8
_XprtDispatchMessages@4
_XprtDumpMem@16
_XprtDumpText@12
_XprtEntityEscape@8
_XprtEntityUnescape@8
_XprtFlipMem@8
_XprtFreeString@4
_XprtGenerateRandom@8
_XprtGetDebugSetting@8
_XprtGetDelayLoadRoot@0
_XprtGetMessage@12
_XprtGetMessageQueue@0
_XprtGetMicroseconds64@0
_XprtGetMicroseconds@0
_XprtGetMilliseconds@0
_XprtGetSystemInfo@0
_XprtGiveMessage@12
_XprtHashFile@16
_XprtHashNoCase@4
_XprtHashNormal@4
_XprtHashString@4
_XprtHexToBin@16
_XprtHtmlToPlain@8
_XprtInetAtoN@12
_XprtInetIsNonroutable@4
_XprtInetIsValid@4
_XprtInetNtoA@8
_XprtInetNtoAEx@12
_XprtInetParse@16
_XprtInitialize@8
_XprtIsValidAddress@8
_XprtIsoToAolEncoding@8
_XprtIsoToAolLang@8
_XprtLookupMessageCallback@4
_XprtMemAlloc@4
Sections
.text Size: 152KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE