Orbis-RPF-Builder - v1[.]1[.]zip

resource
unpack001/Orbis-RPF-Builder - v1.1/d3d12_xs.dll
unpack001/Orbis-RPF-Builder - v1.1/libSceAgcGpuAddress.dll
unpack001/Orbis-RPF-Builder - v1.1/libScePsr.dll
unpack001/Orbis-RPF-Builder - v1.1/oo2core_5_win64.dll
unpack001/Orbis-RPF-Builder - v1.1/oo2tex.dll
unpack001/Orbis-RPF-Builder - v1.1/ragebuilder.exe
unpack001/Orbis-RPF-Builder - v1.1/xg.dll
unpack001/Orbis-RPF-Builder - v1.1/xg_xs.dll
unpack001/Orbis-RPF-Builder - v1.1/zlib.dll
unpack001/Orbis-RPF-Builder - v1.1/zlib1.dll

Orbis-RPF-Builder - v1.1.zip

SHA256 c6136b1076ca0037bdc63aace068fd2aa40325cc5f450c19dc3b51d4fdf87948
MD5 b6fd4597aea4d6995f45c07312443eab
SHA1 240db7ee847ccafa165b19ac055338bcf8d5b40b
SHA512 7a8eb7e989a37c2a4a3b647c245a500bb01141da44f5fe9fb073d74301a6362e24768b89daa7bfc93b519e8307e47b156ee23dfe1e3fb823d72c83595756580d
SSDEEP 98304:0FBE9AwOgXVMW60TZKcTbNMmLqdj2oov8nGMVDNYeIugKtWbpwaC1Iy:0xwOgsKg12ooEn5VqBsWbpwJCy
TLSH
T1451633067F84FEEA7A38816E9A049944FC77A68EE54D21121DD01C39BCAE3DD57BF420
MD5 SHA1 SHA512 SSDEEP TLSH

Orbis-RPF-Builder - v1.1/Instructions.txt

SHA256 3c7a57a76c74748b6d1775c0ae91d75b2d943ee676b1e3cdda9c1d394d047f25
MD5 511d059a57eb55cd63d4b70199c5c2a3
SHA1 84e77b54ec3fb7c6c8f510c220647ca5b7d4b6cf
SHA512 de9c78dab105122efd7828faafa0571d162d8b0bf90670d0282c416b57a62b4b8a0a5e626be281fda31f8eac4619cbca2e3495a6e53bcd09fd8e96e1970fdff1
TLSH
T111C08C32BCBB3562AA01E0012BEE1788D02D90BC89E7106668A0011E9073A8231FDEAC
MD5 SHA1 SHA512 TLSH

Orbis-RPF-Builder - v1.1/archive_builder.lua

SHA256 bd9d26531be0cb88893741133643acd8119d8c06ad3f1fc33f5c8cb61477f9b0
MD5 92b6ecb47aa04ea44f8f13a500e16cdc
SHA1 dec01a53b5798533309f3dabd1b32cd45436696a
SHA512 3495250b8fb137e8740502d0d60d1487a3b66cf74b8ea5e36f2d988d8ae376bf9a6dda10478de154b11b2807cece69665149d6e05902322f287483f013f84253
TLSH
T12A0120B6BD82488261E087C059174D99D10D51E71778119C773C17A83F38ABD92D75AC
MD5 SHA1 SHA512 TLSH

Orbis-RPF-Builder - v1.1/archive_input/busy_spinner.gfx

SHA256 d7636ddf0a38d0d627cadacd9c298ea429ea1b0873d9ae087722df66aa0f4512
MD5 098db7890eb0dc4f4cc9cb8400327b2c
SHA1 4944bdb95772f7edcdb65ad1d15615b13360b2af
SHA512 d2778c56d1b58cd9024b89edde11f066382306f972cc08a60b11caccd28f33da0e4c49aceb128ecc512088fa9416b2a1b09eb6299cac1a7d084ddc8a3556d293
SSDEEP 768:s5DJ+8iEPW8Y2CNfm+yFg2Aeusy9CGVZQmGFf9ufs5hP6nRLJwG39if0egRi0n:s5tEVvsusy9Ax3G3Dn
TLSH
T1CA5342950BAA434BF07CEE3B868B55B0713889FC47DD598614B8B0F46C293BD243BE95
MD5 SHA1 SHA512 SSDEEP TLSH

Orbis-RPF-Builder - v1.1/archive_input/busy_spinner.otd

SHA256 36b5e264644dc7b0a5704c8a54798f968f71472fa40d1b0ec09b68e196a93404
MD5 0745721e03f7eaa9c6e57b571ef01944
SHA1 e232ee18bca19e289a321b7b05d0d0511f4ac815
SHA512 1a0cd95aa1ebfa01b6958e23716cf935eb4b7f05671abe1b5d7310a7f36dac30cce8b047704d59144aef38aee617cc4ef4c4f69b1a7463e0fb2c5bdda5f650c0
TLSH
T1EE714EC054A05E4C62FD14506E6D27DA31B5FEC4421D1B62A393B61C5DFE17854BA43C
MD5 SHA1 SHA512 TLSH

Orbis-RPF-Builder - v1.1/build.bat

SHA256 643f732b43f4127f638b68d1e95089429039383e3f63f0227db6a916b63330f2
MD5 9de25ef4fbfe79761c625f9a6053981e
SHA1 d546c6b1eeeabd95281a8b4e3b1bef8c93a089fc
SHA512 8fcaa4b1486b41f5af2b17183d688871372fbefe95e131c2a8765a2c83977b9b5f06870a7f7bf2f2b16328dbfdddc5c65f4fae8600dfdede7d5246f422ca663e
TLSH
T1C5A01226341D05D060C20542203516B9E81740A24085494020521165285B40031950DA
MD5 SHA1 SHA512 TLSH

Orbis-RPF-Builder - v1.1/config.xml

SHA256 254658c09916f548e95d616170a9325ec004fc65bdf5efd68ecc32617310cd57
MD5 1069052f6fc0569e405b2f759616ac97
SHA1 2c28caf6153f58426a25e6dfa8d2cf4b9ef90109
SHA512 7fb21b69acdeee9ec1bf628e9ca0e8fe1744faf77fab148556a60dcc169acc83da579ca658eb3157522e72e49f62e45999a2f9a9dbbc8edd27dde3272a07f6c4
SSDEEP 384:lJ4tIXEI9OHAIuJpT3OTKSxNgdLvqj+gsaECRs5SR:QWx9OHAIuJBuE1m5R
TLSH
T1A1C2EE0962602F63405866879FAB7418C92FE9B126DFFCE2FAED7C3ED741411871A472
MD5 SHA1 SHA512 SSDEEP TLSH

Orbis-RPF-Builder - v1.1/d3d12_xs.dll

IMPHASH 368aa90203c0bc606d803fbb165f2902
SHA256 068ed5fd85e146e8e799e258a7200e4a52a5b17cc0a6e82833fec5553e1f47dd
MD5 6804027e2afc641010f88a5b0ee098d8
SHA1 2615d9828d625e249406c7e8764e76d754ecec40
SHA512 9356e8614b5a88406e7f270988300628dd8822eccc5b22734487a8fba4887b31657d5db5e2a11cef1ace699a3e2dd8f1186ddd5df3f792a52a7833dcab06410e
SSDEEP 384:p+KIfULZIQBvZfx8DqFMU8uNA7jq7l2RPfHEB5qeRWaVUTb6HkPaF3k6FjWokNWC:pWfC5DHZgq7l0nHwziRG3jNk
TLSH
T16C230BCE6364955AF453407D8E232D059931F0E49762D6DB53B0868E1EBBBE09B34F83
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

9952

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d3d12_xs.pdb

D3D10CreateBlob D3D12ConfigureVirtualMemoryX D3D12CreateDevice D3D12CreateRootSignatureDeserializer D3D12CreateVersionedRootSignatureDeserializer D3D12EnableExperimentalFeatures D3D12GetDebugInterface D3D12SerializeRootSignature D3D12SerializeVersionedRootSignature D3D12UploadCustomMicrocodeX D3D12XboxCreateDevice D3D12XboxEnableMemoryProfiling D3D12XboxGetProcessDebugFlags D3D12XboxSetProcessDebugFlags D3D12ZeroMemoryX D3DFlushEntireCpuCache DXGIXGetFrameStatistics DXGIXPresentArray DXGIXSetFrameNotification DXGIXSetVLineNotification DXGI_DEBUG_ALL DXGI_DEBUG_APP DXGI_DEBUG_D3D11 DXGI_DEBUG_DX DXGI_DEBUG_DXGI IID_ID3D10Blob IID_ID3D11Asynchronous IID_ID3D11BlendState IID_ID3D11BlendState1 IID_ID3D11Buffer IID_ID3D11ClassInstance IID_ID3D11ClassLinkage IID_ID3D11CommandList IID_ID3D11ComputeShader IID_ID3D11Counter IID_ID3D11CounterSampleX IID_ID3D11CounterSetX IID_ID3D11DepthStencilState IID_ID3D11DepthStencilView IID_ID3D11Device IID_ID3D11Device1 IID_ID3D11DeviceChild IID_ID3D11DeviceContext IID_ID3D11DeviceContext1 IID_ID3D11DeviceContextX IID_ID3D11DeviceX IID_ID3D11DmaEngineContextX IID_ID3D11DomainShader IID_ID3D11GeometryShader IID_ID3D11HullShader IID_ID3D11InputLayout IID_ID3D11PerformanceContextX IID_ID3D11PerformanceDeviceX IID_ID3D11PixelShader IID_ID3D11Predicate IID_ID3D11Query IID_ID3D11RasterizerState IID_ID3D11RasterizerState1 IID_ID3D11RenderTargetView IID_ID3D11Resource IID_ID3D11SamplerState IID_ID3D11ShaderResourceView IID_ID3D11Texture1D IID_ID3D11Texture2D IID_ID3D11Texture3D IID_ID3D11UnorderedAccessView IID_ID3D11UserDefinedAnnotationX IID_ID3D11VertexShader IID_ID3D11View IID_ID3D12CommandAllocator IID_ID3D12CommandList IID_ID3D12CommandListInternal IID_ID3D12CommandQueue IID_ID3D12CommandQueueInternal IID_ID3D12CommandQueueInternal1 IID_ID3D12CommandSignature IID_ID3D12Debug IID_ID3D12DescriptorHeap IID_ID3D12Device IID_ID3D12Device1 IID_ID3D12Device2 IID_ID3D12Device3 IID_ID3D12Device4 IID_ID3D12DeviceChild IID_ID3D12DevicePartnerComposition IID_ID3D12Fence IID_ID3D12Fence1 IID_ID3D12GraphicsCommandList IID_ID3D12GraphicsCommandList1 IID_ID3D12GraphicsCommandList2 IID_ID3D12Heap IID_ID3D12Object IID_ID3D12Pageable IID_ID3D12PipelineLibrary IID_ID3D12PipelineLibrary1 IID_ID3D12PipelineState IID_ID3D12Resource IID_ID3D12RootSignature IID_ID3D12RootSignatureDeserializer IID_ID3D12ShaderBytecode IID_ID3D12Tools IID_ID3D12VersionedRootSignatureDeserializer IID_ID3D12XboxDmaCommandList IID_ID3DDeviceContextState IID_IDXGIAdapter IID_IDXGIAdapter1 IID_IDXGIAdapter2 IID_IDXGIDevice IID_IDXGIDevice1 IID_IDXGIDevice2 IID_IDXGIDeviceSubObject IID_IDXGIFactory IID_IDXGIFactory1 IID_IDXGIFactory2 IID_IDXGIObject IID_IDXGISwapChain IID_IDXGISwapChain1 IID_IGraphicsUnknown InternalDriverCallX PixGetPixieEntryPoints

Orbis-RPF-Builder - v1.1/libSceAgcGpuAddress.dll

IMPHASH a7f2201392e4ee29f6e0e2272044bbbe
SHA256 9a9c4d9fe43269c3ff2dd1e0651e879818adff16d13b39b941a04fa4964523d4
MD5 881957ecb409342bbdc3fa5ec44cc47e
SHA1 9501db72e1eb0b6faf2f53177644f627141bfa22
SHA512 f293e83c4264c0d90b8bb221b488a14b14a2405514b56f6470288c2b73fb5227c8adc19e625fa01666815d2de4facedc63c93ba05aa72fd2cf6aa9968a2c4c7f
SSDEEP 12288:kq1aroUliB5eU+Brnt5bUwULUsmUo3g/C0L0806B+Yi:z1mtYi
TLSH
T10665A54ED42BB0A4FA6244BAD93F91B976193A6E03C84DF7234854F85A437C10627FD7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

1061556

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

W:\Build\J01939768\sys\sdk\host_tools\bin\libSceAgcGpuAddress.pdb

?computeCmaskBufferNybbleOffset@AgcGpuAddress@sce@@YA?AW4Status@12@PEA_KPEBUCmaskInfo@12@IIII@Z ?computeCmaskInfo@AgcGpuAddress@sce@@YA?AW4Status@12@PEAUCmaskInfo@12@PEBUSurfaceSummary@12@@Z ?computeDccBufferByteOffset@AgcGpuAddress@sce@@YA?AW4Status@12@PEA_KPEBUDccInfo@12@IIII@Z ?computeDccBufferByteOffset@AgcGpuAddress@sce@@YA?AW4Status@12@PEA_KPEBUDccInfo@12@IIIII@Z ?computeDccInfo@AgcGpuAddress@sce@@YA?AW4Status@12@PEAUDccInfo@12@PEBUSurfaceSummary@12@@Z ?computeHtileBufferByteOffset@AgcGpuAddress@sce@@YA?AW4Status@12@PEA_KPEBUHtileInfo@12@IIII@Z ?computeHtileInfo@AgcGpuAddress@sce@@YA?AW4Status@12@PEAUHtileInfo@12@PEBUSurfaceSummary@12@@Z ?computeSurfaceSummary@AgcGpuAddress@sce@@YA?AW4Status@12@PEAUSurfaceSummary@12@PEBUSurfaceDescription@12@@Z ?computeSwizzledBufferSize@AgcGpuAddress@sce@@YA?AW4Status@12@PEA_KIIW4BufferSwizzleStride@12@@Z ?computeTiledElementByteOffset@AgcGpuAddress@sce@@YA?AW4Status@12@PEA_KPEBUSurfaceSummary@12@IIIIII@Z ?computeUntiledSizeForCmaskBuffer@AgcGpuAddress@sce@@YA?AW4Status@12@PEA_KPEBUCmaskInfo@12@@Z ?computeUntiledSizeForDccBuffer@AgcGpuAddress@sce@@YA?AW4Status@12@PEA_KPEBUDccInfo@12@I@Z ?computeUntiledSizeForHtileBuffer@AgcGpuAddress@sce@@YA?AW4Status@12@PEA_KPEBUHtileInfo@12@@Z ?computeUntiledSizeForSurface@AgcGpuAddress@sce@@YA?AW4Status@12@PEA_KPEBUSurfaceSummary@12@I@Z ?computeUntiledSizeForSurfaceRegion@AgcGpuAddress@sce@@YA?AW4Status@12@PEA_KPEBUSurfaceSummary@12@PEBUSurfaceRegion@12@I@Z ?computeUntiledSizeWithPaddingForSurface@AgcGpuAddress@sce@@YA?AW4Status@12@PEA_KPEBUSurfaceSummary@12@II_K@Z ?computeUntiledSizeWithPaddingForSurfaceRegion@AgcGpuAddress@sce@@YA?AW4Status@12@PEA_KPEBUSurfaceSummary@12@PEBUSurfaceRegion@12@II_K@Z ?deswizzleBufferData@AgcGpuAddress@sce@@YA?AW4Status@12@PEIAX_KPEIBX1IIW4BufferSwizzleStride@12@@Z ?detileCmaskBuffer@AgcGpuAddress@sce@@YA?AW4Status@12@PEIAX_KPEIBX1PEBUCmaskInfo@12@II@Z ?detileDccBuffer@AgcGpuAddress@sce@@YA?AW4Status@12@PEIAX_KPEIBX1PEBUDccInfo@12@II@Z ?detileDccBuffer@AgcGpuAddress@sce@@YA?AW4Status@12@PEIAX_KPEIBX1PEBUDccInfo@12@III@Z ?detileHtileBuffer@AgcGpuAddress@sce@@YA?AW4Status@12@PEIAX_KPEIBX1PEBUHtileInfo@12@II@Z ?detileSurface@AgcGpuAddress@sce@@YA?AW4Status@12@PEIAX_KPEIBX1PEBUSurfaceSummary@12@II@Z ?detileSurfaceRegion@AgcGpuAddress@sce@@YA?AW4Status@12@PEIAX_KPEIBX1PEBUSurfaceSummary@12@PEBUSurfaceRegion@12@II@Z ?detileSurfaceRegionToPaddedBuffer@AgcGpuAddress@sce@@YA?AW4Status@12@PEIAX_KPEIBX1PEBUSurfaceSummary@12@PEBUSurfaceRegion@12@III1@Z ?detileSurfaceToPaddedBuffer@AgcGpuAddress@sce@@YA?AW4Status@12@PEIAX_KPEIBX1PEBUSurfaceSummary@12@III1@Z ?swizzleBufferData@AgcGpuAddress@sce@@YA?AW4Status@12@PEIAX_KPEIBX1IIW4BufferSwizzleStride@12@@Z ?tileCmaskBuffer@AgcGpuAddress@sce@@YA?AW4Status@12@PEIAX_KPEIBX1PEBUCmaskInfo@12@II@Z ?tileDccBuffer@AgcGpuAddress@sce@@YA?AW4Status@12@PEIAX_KPEIBX1PEBUDccInfo@12@II@Z ?tileDccBuffer@AgcGpuAddress@sce@@YA?AW4Status@12@PEIAX_KPEIBX1PEBUDccInfo@12@III@Z ?tileHtileBuffer@AgcGpuAddress@sce@@YA?AW4Status@12@PEIAX_KPEIBX1PEBUHtileInfo@12@II@Z ?tileSurface@AgcGpuAddress@sce@@YA?AW4Status@12@PEIAX_KPEIBX1PEBUSurfaceSummary@12@II@Z ?tileSurfaceFromPaddedBuffer@AgcGpuAddress@sce@@YA?AW4Status@12@PEIAX_KPEIBX1PEBUSurfaceSummary@12@III1@Z ?tileSurfaceRegion@AgcGpuAddress@sce@@YA?AW4Status@12@PEIAX_KPEIBX1PEBUSurfaceSummary@12@PEBUSurfaceRegion@12@II@Z ?tileSurfaceRegionFromPaddedBuffer@AgcGpuAddress@sce@@YA?AW4Status@12@PEIAX_KPEIBX1PEBUSurfaceSummary@12@PEBUSurfaceRegion@12@III1@Z ?validateSurfaceDescription@AgcGpuAddress@sce@@YA?AW4Status@12@PEBUSurfaceDescription@12@@Z

Orbis-RPF-Builder - v1.1/libScePsr.dll

IMPHASH 53b647e0018368c61ba9dd2c3f218c42
SHA256 b5287f4b79a90162db661cf1bc9f5af33936e07d2e10b20cbe999f66dad8d725
MD5 4361d7de2b1a784cb889e3c699afc35d
SHA1 11e4f13db4821e7e67ec68daa2a6795e679d6a5a
SHA512 72d7f6413a68a4c0818b5bd5690223cac0a30c7ea48ec99e220e9fd7441756b75f60870ba0a0d4f82b11d4e1aeec5a19f8339061e4f6ffe13a9b8d694b7b07e0
SSDEEP 6144:1IlMAhxaHmfJJPkRkQKCpoVvg2jWDi708+rdixtUoqrYHNL0XnqVACKTtuHAxXOe:eeSaHppoGDiI1TMHV0sAZZ1rIc
TLSH
T1E0F48D45B9AD41F5E03AA135D1A7A50BF6B1300607249AEF02F447AC3F777D08B6BB26
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

389520

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

QueryPerformanceCounter QueryPerformanceFrequency ExitProcess DecodePointer CloseHandle DuplicateHandle WaitForSingleObjectEx Sleep GetCurrentProcess SwitchToThread GetCurrentThread GetCurrentThreadId GetNativeSystemInfo EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetTickCount GetModuleHandleW GetProcAddress GetLastError WideCharToMultiByte SetEvent ResetEvent RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcessId InitializeSListHead TerminateProcess CreateTimerQueue SignalObjectAndWait CreateThread SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait EncodePointer GetThreadTimes FreeLibrary FreeLibraryAndExitThread GetModuleFileNameW GetModuleHandleA LoadLibraryExW GetVersionExW VirtualAlloc VirtualProtect VirtualFree ReleaseSemaphore InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList UnregisterWaitEx LoadLibraryW RtlUnwindEx RtlPcToFileHeader RaiseException GetModuleHandleExW HeapAlloc HeapFree LCMapStringW GetStdHandle GetFileType FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode GetFileSizeEx SetFilePointerEx FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap HeapReAlloc HeapSize SetStdHandle GetStringTypeW CreateFileW WriteConsoleW

?Closest@Psr@sce@@YA?AUHit@12@PEAU_BottomLevelBvhDescriptor@12@W4RayFlags@12@IURay@12@@Z ?Closest@Psr@sce@@YA?AUHit@12@PEAU_BottomLevelBvhDescriptor@12@W4RayFlags@12@IURay@12@AEBUOnAnyHit@12@@Z ?Closest@Psr@sce@@YA?AUHit@12@PEAU_BottomLevelBvhDescriptor@12@W4RayFlags@12@IURay@12@AEBUOnAnyHit@12@AEBUOnIntersection@12@@Z ?Closest@Psr@sce@@YA?AUHit@12@PEAU_BottomLevelBvhDescriptor@12@W4RayFlags@12@IURay@12@AEBUOnIntersection@12@@Z ?Closest@Psr@sce@@YA?AUHit@12@PEAU_TopLevelBvhDescriptor@12@W4RayFlags@12@IURay@12@@Z ?Closest@Psr@sce@@YA?AUHit@12@PEAU_TopLevelBvhDescriptor@12@W4RayFlags@12@IURay@12@AEBUOnAnyHit@12@@Z ?Closest@Psr@sce@@YA?AUHit@12@PEAU_TopLevelBvhDescriptor@12@W4RayFlags@12@IURay@12@AEBUOnAnyHit@12@AEBUOnInstance@12@@Z ?Closest@Psr@sce@@YA?AUHit@12@PEAU_TopLevelBvhDescriptor@12@W4RayFlags@12@IURay@12@AEBUOnAnyHit@12@AEBUOnIntersection@12@@Z ?Closest@Psr@sce@@YA?AUHit@12@PEAU_TopLevelBvhDescriptor@12@W4RayFlags@12@IURay@12@AEBUOnAnyHit@12@AEBUOnIntersection@12@AEBUOnInstance@12@@Z ?Closest@Psr@sce@@YA?AUHit@12@PEAU_TopLevelBvhDescriptor@12@W4RayFlags@12@IURay@12@AEBUOnInstance@12@@Z ?Closest@Psr@sce@@YA?AUHit@12@PEAU_TopLevelBvhDescriptor@12@W4RayFlags@12@IURay@12@AEBUOnIntersection@12@@Z ?Closest@Psr@sce@@YA?AUHit@12@PEAU_TopLevelBvhDescriptor@12@W4RayFlags@12@IURay@12@AEBUOnIntersection@12@AEBUOnInstance@12@@Z ?Occluded@Psr@sce@@YA?AUHit@12@PEAU_BottomLevelBvhDescriptor@12@W4RayFlags@12@IURay@12@@Z ?Occluded@Psr@sce@@YA?AUHit@12@PEAU_BottomLevelBvhDescriptor@12@W4RayFlags@12@IURay@12@AEBUOnAnyHit@12@@Z ?Occluded@Psr@sce@@YA?AUHit@12@PEAU_BottomLevelBvhDescriptor@12@W4RayFlags@12@IURay@12@AEBUOnAnyHit@12@AEBUOnIntersection@12@@Z ?Occluded@Psr@sce@@YA?AUHit@12@PEAU_BottomLevelBvhDescriptor@12@W4RayFlags@12@IURay@12@AEBUOnIntersection@12@@Z ?Occluded@Psr@sce@@YA?AUHit@12@PEAU_TopLevelBvhDescriptor@12@W4RayFlags@12@IURay@12@@Z ?Occluded@Psr@sce@@YA?AUHit@12@PEAU_TopLevelBvhDescriptor@12@W4RayFlags@12@IURay@12@AEBUOnAnyHit@12@@Z ?Occluded@Psr@sce@@YA?AUHit@12@PEAU_TopLevelBvhDescriptor@12@W4RayFlags@12@IURay@12@AEBUOnAnyHit@12@AEBUOnInstance@12@@Z ?Occluded@Psr@sce@@YA?AUHit@12@PEAU_TopLevelBvhDescriptor@12@W4RayFlags@12@IURay@12@AEBUOnAnyHit@12@AEBUOnIntersection@12@@Z ?Occluded@Psr@sce@@YA?AUHit@12@PEAU_TopLevelBvhDescriptor@12@W4RayFlags@12@IURay@12@AEBUOnAnyHit@12@AEBUOnIntersection@12@AEBUOnInstance@12@@Z ?Occluded@Psr@sce@@YA?AUHit@12@PEAU_TopLevelBvhDescriptor@12@W4RayFlags@12@IURay@12@AEBUOnInstance@12@@Z ?Occluded@Psr@sce@@YA?AUHit@12@PEAU_TopLevelBvhDescriptor@12@W4RayFlags@12@IURay@12@AEBUOnIntersection@12@@Z ?Occluded@Psr@sce@@YA?AUHit@12@PEAU_TopLevelBvhDescriptor@12@W4RayFlags@12@IURay@12@AEBUOnIntersection@12@AEBUOnInstance@12@@Z ?buildBottomLevelBvh@Cpu@Psr@sce@@YA?AW4Status@23@PEAPEAU_BottomLevelBvhDescriptor@23@AEBUBottomLevelBvhConfig@123@PEBUGeometryConfig@123@IPEAX_K34@Z ?buildBottomLevelBvhMultiThreaded@Cpu@Psr@sce@@YA?AW4Status@23@PEAPEAU_BottomLevelBvhDescriptor@23@PEAUJob@123@AEBUJobCallBacks@123@AEBUBottomLevelBvhConfig@123@PEBUGeometryConfig@123@IPEAX_K56@Z ?buildTopLevelBvh@Cpu@Psr@sce@@YA?AW4Status@23@PEAPEAU_TopLevelBvhDescriptor@23@AEBUTopLevelBvhConfig@123@PEBUInstanceConfig@23@IPEAX_K34@Z ?buildTopLevelBvhMultiThreaded@Cpu@Psr@sce@@YA?AW4Status@23@PEAPEAU_TopLevelBvhDescriptor@23@PEAUJob@123@AEBUJobCallBacks@123@AEBUTopLevelBvhConfig@123@PEBUInstanceConfig@23@IPEAX_K56@Z ?buildTriangleFan@Cpu@Psr@sce@@YA?AW4Status@23@PEAPEAU_TriangleFanDescriptor@23@AEBUTriangleFanConfig@123@PEAX_K23@Z ?checkBottomLevelBvhConfig@Cpu@Psr@sce@@YA?AW4Status@23@AEBUBottomLevelBvhConfig@123@@Z ?checkTopLevelBvhConfig@Cpu@Psr@sce@@YA?AW4Status@23@AEBUTopLevelBvhConfig@123@@Z ?compressBottomLevelBvh@Cpu@Psr@sce@@YA?AW4Status@23@PEAPEAU_CompressedBottomLevelBvhDescriptor@23@PEAU_BottomLevelBvhDescriptor@23@PEAX_K@Z ?decompressBottomLevelBvh@Cpu@Psr@sce@@YA?AW4Status@23@PEAPEAU_BottomLevelBvhDescriptor@23@PEAU_CompressedBottomLevelBvhDescriptor@23@W4DecompressionMode@23@PEBUGeometryConfig@123@IPEAX_K45@Z ?deserializeTopLevelBvh@Cpu@Psr@sce@@YA?AW4Status@23@PEAPEAU_TopLevelBvhDescriptor@23@AEBUTopLevelBvhDeserializer@123@@Z ?destroy@Cpu@Psr@sce@@YA?AW4Status@23@PEAUJob@123@@Z ?getBottomLevelBvhBuilderScratchSize@Cpu@Psr@sce@@YA?AW4Status@23@PEA_KAEBUBottomLevelBvhConfig@123@PEBUGeometryConfig@123@I@Z ?getBottomLevelBvhCompactedSize@Psr@sce@@YA?AW4Status@12@PEA_KPEAU_BottomLevelBvhDescriptor@12@@Z ?getBottomLevelBvhDecompressionScratchSize@Psr@sce@@YA?AW4Status@12@PEA_KPEAU_CompressedBottomLevelBvhDescriptor@12@W4DecompressionMode@12@@Z ?getBottomLevelBvhSize@Psr@sce@@YA?AW4Status@12@PEA_KPEAU_BottomLevelBvhDescriptor@12@@Z ?getBottomLevelBvhSizeUpperBound@Cpu@Psr@sce@@YA?AW4Status@23@PEA_KAEBUBottomLevelBvhConfig@123@PEBUGeometryConfig@123@I@Z ?getBottomLevelBvhStatistics@Cpu@Psr@sce@@YA?AW4Status@23@PEAUBvhStatistics@23@PEAU_BottomLevelBvhDescriptor@23@@Z ?getBottomLevelBvhVersion@Psr@sce@@YA?AW4Status@12@PEAIPEAU_BottomLevelBvhDescriptor@12@@Z ?getBottomLevelBvhView@Psr@sce@@YA?AUBottomLevelBvhView@12@PEAU_BottomLevelBvhDescriptor@12@@Z ?getBottomLevelCompleteBvhStatistics@Cpu@Psr@sce@@YA?AW4Status@23@PEAUCompleteBvhStatistics@23@PEAU_BottomLevelBvhDescriptor@23@PEAX_K@Z ?getBottomLevelCompleteBvhStatisticsScratchSize@Cpu@Psr@sce@@YA?AW4Status@23@PEA_KPEAU_BottomLevelBvhDescriptor@23@@Z ?getCompressedBottomLevelBvhSize@Psr@sce@@YA?AW4Status@12@PEA_KPEAU_CompressedBottomLevelBvhDescriptor@12@@Z ?getCompressedBottomLevelBvhSizeUpperBound@Cpu@Psr@sce@@YA?AW4Status@23@PEA_KPEAU_BottomLevelBvhDescriptor@23@@Z ?getCompressedBottomLevelBvhVersion@Psr@sce@@YA?AW4Status@12@PEAIPEAU_CompressedBottomLevelBvhDescriptor@12@@Z ?getConstBottomLevelBvhView@Psr@sce@@YA?AUConstBottomLevelBvhView@12@PEAU_BottomLevelBvhDescriptor@12@@Z ?getConstTopLevelBvhView@Psr@sce@@YA?AUConstTopLevelBvhView@12@PEAU_TopLevelBvhDescriptor@12@@Z ?getDecompressedBottomLevelBvhSize@Psr@sce@@YA?AW4Status@12@PEA_KPEAU_CompressedBottomLevelBvhDescriptor@12@W4DecompressionMode@12@@Z ?getStatus@Cpu@Psr@sce@@YA?AW4Status@23@PEAUJob@123@@Z ?getStatusString@Psr@sce@@YAPEBDW4Status@12@@Z ?getTopLevelBvhBuilderScratchSize@Cpu@Psr@sce@@YA?AW4Status@23@PEA_KAEBUTopLevelBvhConfig@123@I@Z ?getTopLevelBvhCompactedSize@Psr@sce@@YA?AW4Status@12@PEA_KPEAU_TopLevelBvhDescriptor@12@@Z ?getTopLevelBvhSize@Psr@sce@@YA?AW4Status@12@PEA_KPEAU_TopLevelBvhDescriptor@12@@Z ?getTopLevelBvhSizeUpperBound@Cpu@Psr@sce@@YA?AW4Status@23@PEA_KAEBUTopLevelBvhConfig@123@I@Z ?getTopLevelBvhStatistics@Cpu@Psr@sce@@YA?AW4Status@23@PEAUBvhStatistics@23@PEAU_TopLevelBvhDescriptor@23@PEAX_K@Z ?getTopLevelBvhStatisticsScratchSize@Cpu@Psr@sce@@YA?AW4Status@23@PEA_KPEAU_TopLevelBvhDescriptor@23@@Z ?getTopLevelBvhVersion@Psr@sce@@YA?AW4Status@12@PEAIPEAU_TopLevelBvhDescriptor@12@@Z ?getTopLevelBvhView@Psr@sce@@YA?AUTopLevelBvhView@12@PEAU_TopLevelBvhDescriptor@12@@Z ?getTriangleFanScratchSize@Cpu@Psr@sce@@YA?AW4Status@23@PEA_KAEBUTriangleFanConfig@123@@Z ?getTriangleFanSize@Cpu@Psr@sce@@YA?AW4Status@23@PEA_KPEAU_TriangleFanDescriptor@23@@Z ?getTriangleFanSizeUpperBound@Cpu@Psr@sce@@YA?AW4Status@23@PEA_KAEBUTriangleFanConfig@123@@Z ?getTriangleFanVersion@Cpu@Psr@sce@@YA?AW4Status@23@PEAIPEAU_TriangleFanDescriptor@23@@Z ?init@GeometryMeshConfig@Cpu@Psr@sce@@QEAAXXZ ?init@Psr@sce@@YAXXZ ?refitBottomLevelBvh@Cpu@Psr@sce@@YA?AW4Status@23@PEAU_BottomLevelBvhDescriptor@23@PEBUGeometryConfig@123@I@Z ?refitBottomLevelBvhMultiThreaded@Cpu@Psr@sce@@YA?AW4Status@23@PEAU_BottomLevelBvhDescriptor@23@PEAUJob@123@AEBUJobCallBacks@123@PEBUGeometryConfig@123@I@Z ?refitTopLevelBvh@Cpu@Psr@sce@@YA?AW4Status@23@PEAU_TopLevelBvhDescriptor@23@PEBUInstanceConfig@23@I@Z ?refitTopLevelBvhMultiThreaded@Cpu@Psr@sce@@YA?AW4Status@23@PEAU_TopLevelBvhDescriptor@23@PEAUJob@123@AEBUJobCallBacks@123@PEBUInstanceConfig@23@I@Z ?registerFatalCallBack@Psr@sce@@YA?AW4Status@12@P6AXPEBDPEAD@Z@Z ?registerLogCallBack@Psr@sce@@YA?AW4Status@12@P6AXPEBDPEAD@Z@Z ?runMany@Cpu@Psr@sce@@YA?AW4Status@23@PEAUJob@123@PEA_N@Z ?runOnce@Cpu@Psr@sce@@YA?AW4Status@23@PEAUJob@123@PEA_N@Z ?serializeTopLevelBvh@Cpu@Psr@sce@@YA?AW4Status@23@PEAU_TopLevelBvhDescriptor@23@AEBUTopLevelBvhSerializer@123@@Z ?shutDown@Psr@sce@@YAXXZ

Orbis-RPF-Builder - v1.1/oo2core_5_win64.dll

IMPHASH 27ec2696a0cb1f37c0bceda9b4a4beae
SHA256 4c3dcfebb2bb59650690feb4c63d68a5838c37c0ff233c2445269fef0c5a40d0
MD5 f60dd417457e2ec9be4b28242878dbc1
SHA1 09db07d9f0651227ab686f8124efe1e028199beb
SHA512 086de8128d95ae16eee94709b6722c7bebbae0c28b0661ec98ff81c687190ed599adedd69e7fe600cf4d99df85181615bd3f944053dc04de4e42c3d8d74f336e
SSDEEP 24576:/kGhT2823V6LmHE2/QvTvO+KYsqJAkdHs:XT2F8aHE1vTvO+cq2+
TLSH
T104159D13B2C956ECD677C13C8AB75616F2B0748903609AFB56A459762F27FE0273E302
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

690776

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

v:\devel\projects\oodle2\cdepbuild\win64_release_dll\oo2core_5_win64.pdb

OodleHuffman_CountHistoArrayU8 OodleHuffman_DecodeArrayU8 OodleHuffman_EncodeArrayU8 OodleLZDecoder_Create OodleLZDecoder_DecodeSome OodleLZDecoder_Destroy OodleLZDecoder_MakeValidCircularWindowSize OodleLZDecoder_MemorySizeNeeded OodleLZDecoder_Reset OodleLZ_CheckSeekTableCRCs OodleLZ_Compress OodleLZ_CompressContext_Alloc OodleLZ_CompressContext_Free OodleLZ_CompressContext_Reset OodleLZ_CompressOptions_GetDefault OodleLZ_CompressOptions_Validate OodleLZ_CompressWithContext OodleLZ_CompressionLevel_GetName OodleLZ_Compressor_GetName OodleLZ_CreateSeekTable OodleLZ_Decompress OodleLZ_FillSeekTable OodleLZ_FindSeekEntry OodleLZ_FreeSeekTable OodleLZ_GetChunkCompressor OodleLZ_GetCompressedBufferSizeNeeded OodleLZ_GetCompressedStepForRawStep OodleLZ_GetDecodeBufferSize OodleLZ_GetInPlaceDecodeBufferSize OodleLZ_GetNumSeekChunks OodleLZ_GetSeekEntryPackedPos OodleLZ_GetSeekTableMemorySizeNeeded OodleLZ_GetZipLikeCompressionSettings OodleLZ_MakeSeekChunkLen OodleLZ_ThreadPhased_BlockDecoderMemorySizeNeeded OodleNetwork1TCP_Decode OodleNetwork1TCP_Encode OodleNetwork1TCP_State_InitAsCopy OodleNetwork1TCP_State_Reset OodleNetwork1TCP_State_Size OodleNetwork1TCP_Train OodleNetwork1UDP_Decode OodleNetwork1UDP_Encode OodleNetwork1UDP_StateCompacted_MaxSize OodleNetwork1UDP_State_Compact OodleNetwork1UDP_State_Size OodleNetwork1UDP_State_Uncompact OodleNetwork1UDP_Train OodleNetwork1_CompressedBufferSizeNeeded OodleNetwork1_SelectDictionaryFromPackets OodleNetwork1_SelectDictionaryFromPackets_Trials OodleNetwork1_Shared_SetWindow OodleNetwork1_Shared_Size OodlePlugin_DisplayAssertion_Default OodlePlugin_Free_Default OodlePlugin_MallocAligned_Default OodlePlugin_Printf_Default OodlePlugins_SetAllocators OodlePlugins_SetAssertion OodlePlugins_SetPrintf Oodle_CheckVersion Oodle_GetConfigValues Oodle_LogHeader Oodle_SetConfigValues

Orbis-RPF-Builder - v1.1/oo2tex.dll

IMPHASH d18865d9fe8bf5529f66c1deb22918ed
SHA256 cd7eaddf7d875f9b9b7c7d30a40496b7f5e3492a472fd6ff4088fdb40bf2fb9e
MD5 64369e968112ba43e88841ef0c96a58c
SHA1 4943545698a35425528996daadf3dbed57700d8b
SHA512 3ebe5de67a8a3171aa4d2bf38dd8457baaee4b57c5d879186b22c9689ca612c4a00c317b657fea422b44ba2f5ca61ce842d9a5404e6bdec7830e33403ebe5df4
SSDEEP 12288:RkP4ZRX7xOlFhrUtcEADFdM9lwwnPAa/k:RkqOlFhrUtcEAD09llnP9
TLSH
T1CBC4AF06B1A655E8D43FC43882BE951FF6E23819036187E717E05A796E27FE05F3A702
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

445120

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\falecu\dev\oo2texdrop\build\Release dll\oo2tex.pdb

Orbis-RPF-Builder - v1.1/ragebuilder.exe

IMPHASH 932b2cd7f4a161f8fb7eba69b3f30399
SHA256 6b50cc53b6cfad0d24968bff3111ae80f2e448055a614ac0c6c8042f6d478b84
MD5 5244f59c7159b8f2c05b25bbbcfb3ad2
SHA1 a5be9ebb5b6a73c9bd19e2d94a9bc803fb153cb7
SHA512 01314f269d6332b66c2c59e3ead8a837eaa37c86c51ce36259e4b7380695cd85e56f51685208bf0527c9708c74c64a4abec6b0427718503beb0f353ea0681313
SSDEEP 98304:Lg5wfnskMde5y9RgNcG6HxHIpdtcQxUxFfPHJ8+U9Z:Lg5+skMcyHgNcLxHIpdtTzZ
TLSH
T1A9766C97E2B940E4C4BBC0389A96A51BFBB17854433147C757A14A6B2F23BE06E3F351
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

3647228

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

X:\gta5\tools_ng\bin\ragebuilder_x64_0378_dev.pdb

kernel32

CopyFileA MoveFileExA SetFileAttributesA GetFileAttributesA SetFileTime GetFileTime Sleep GetLocalTime MoveFileA SystemTimeToTzSpecificLocalTime FileTimeToSystemTime FindClose FileTimeToDosDateTime FileTimeToLocalFileTime FindFirstFileA HeapFree HeapAlloc GetProcessHeap OutputDebugStringA LeaveCriticalSection EnterCriticalSection GetLastError VirtualFree DeleteCriticalSection GetSystemInfo InitializeCriticalSection GlobalAlloc GetCurrentThreadId FreeLibrary GetProcAddress LoadLibraryA GetModuleFileNameW DebugBreak GetStdHandle GetConsoleScreenBufferInfo GetModuleHandleA GetTempPathA GetTempFileNameA CreateFileA GetCurrentThread SetThreadPriority GetCurrentDirectoryA VirtualAlloc SetConsoleCursorPosition CreateProcessA GetExitCodeProcess WriteConsoleW GetConsoleOutputCP WriteConsoleA GetLocaleInfoW CompareStringW CompareStringA GetStringTypeW GetStringTypeA IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetTimeFormatA GetDateFormatA GetTimeZoneInformation GetFullPathNameW GetTickCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA FlushFileBuffers GetConsoleCP HeapCreate HeapSetInformation SetEnvironmentVariableW IsValidCodePage GetOEMCP GetACP FlsAlloc SetLastError CloseHandle GetCommandLineA FlsFree FlsSetValue FlsGetValue MultiByteToWideChar GetVersionExA TlsGetValue GetCurrentProcess WaitForSingleObject TlsSetValue CreateMutexA DuplicateHandle ReleaseMutex TlsAlloc GetModuleFileNameA GetSystemDirectoryA WideCharToMultiByte GetEnvironmentVariableA ReadFile WriteFile SetFilePointer GetFileSize MapViewOfFile CreateFileMappingA UnmapViewOfFile GlobalFree GlobalSize LocalFree LocalAlloc CreateFileW SetConsoleTextAttribute ExitProcess TerminateProcess RtlCaptureStackBackTrace GetCurrentProcessId CreateDirectoryA VirtualProtect CreateSemaphoreA ReleaseSemaphore RaiseException SetThreadIdealProcessor ExitThread CreateEventA SetEvent ResumeThread SetThreadPriorityBoost CreateThread QueryPerformanceCounter QueryPerformanceFrequency InitializeCriticalSectionAndSpinCount TryEnterCriticalSection IsDebuggerPresent GetProcessAffinityMask FormatMessageA SetFilePointerEx GetFileAttributesExA FindNextFileA SetEndOfFile DeleteFileA RemoveDirectoryA GetExitCodeThread WaitForMultipleObjects IsProcessorFeaturePresent GetFileType GetDriveTypeA GetFullPathNameA RtlUnwindEx GetModuleHandleW RtlLookupFunctionEntry SetEnvironmentVariableA SetCurrentDirectoryA RtlPcToFileHeader ReadConsoleInputA SetConsoleMode GetConsoleMode HeapReAlloc GetDriveTypeW FindFirstFileW UnhandledExceptionFilter SetUnhandledExceptionFilter RtlVirtualUnwind RtlCaptureContext GetSystemTimeAsFileTime HeapSize SetHandleCount GetStartupInfoA SetStdHandle LCMapStringA LCMapStringW GetCPInfo EncodePointer DecodePointer VirtualQuery

user32

CopyRect GetWindowRect GetDesktopWindow GetParent EndDialog DialogBoxParamA MessageBoxA GetActiveWindow OffsetRect SetWindowPos GetDlgItem SetWindowTextA GetFocus DefWindowProcA

dbghelp

MiniDumpWriteDump

psapi

EnumProcessModules GetModuleInformation

winmm

timeBeginPeriod timeEndPeriod timeGetTime

ws2_32

WSASetLastError listen send gethostbyname closesocket socket bind recv WSACleanup getsockname htons select WSAStartup ioctlsocket connect getsockopt gethostbyaddr inet_ntoa __WSAFDIsSet getservbyname getservbyport ntohs WSAGetLastError htonl inet_addr accept gethostname

advapi32

GetUserNameW

xslAddCall xslDebugStatus xslDropCall xslHandleDebugger xsltAddKey xsltAddStackElemList xsltAddTemplate xsltAllocateExtra xsltAllocateExtraCtxt xsltApplyAttributeSet xsltApplyImports xsltApplyOneTemplate xsltApplyStripSpaces xsltApplyStylesheet xsltApplyStylesheetUser xsltApplyTemplates xsltAttrListTemplateProcess xsltAttrTemplateProcess xsltAttrTemplateValueProcess xsltAttrTemplateValueProcessNode xsltAttribute xsltCalibrateAdjust xsltCallTemplate xsltCheckExtPrefix xsltCheckExtURI xsltCheckRead xsltCheckWrite xsltChoose xsltCleanupGlobals xsltCleanupTemplates xsltComment xsltCompileAttr xsltCompilePattern xsltComputeSortResult xsltCopy xsltCopyNamespace xsltCopyNamespaceList xsltCopyOf xsltCopyTextString xsltCreateRVT xsltDebug xsltDebugDumpExtensions xsltDebugGetDefaultTrace xsltDebugSetDefaultTrace xsltDecimalFormatGetByName xsltDefaultSortFunction xsltDoSortFunction xsltDocDefaultLoader xsltDocumentComp xsltDocumentElem xsltDocumentFunction xsltDocumentSortFunction xsltElement xsltElementAvailableFunction xsltEngineVersion xsltEvalAVT xsltEvalAttrValueTemplate xsltEvalGlobalVariables xsltEvalOneUserParam xsltEvalStaticAttrValueTemplate xsltEvalTemplateString xsltEvalUserParams xsltEvalXPathPredicate xsltEvalXPathString xsltEvalXPathStringNs xsltExtElementLookup xsltExtModuleElementLookup xsltExtModuleElementPreComputeLookup xsltExtModuleFunctionLookup xsltExtModuleTopLevelLookup xsltExtensionInstructionResultFinalize xsltExtensionInstructionResultRegister xsltFindDocument xsltFindElemSpaceHandling xsltFindTemplate xsltForEach xsltFormatNumberConversion xsltFormatNumberFunction xsltFreeAVTList xsltFreeAttributeSetsHashes xsltFreeCompMatchList xsltFreeCtxtExts xsltFreeDocumentKeys xsltFreeDocuments xsltFreeExts xsltFreeGlobalVariables xsltFreeKeys xsltFreeNamespaceAliasHashes xsltFreeRVTs xsltFreeSecurityPrefs xsltFreeStackElemList xsltFreeStyleDocuments xsltFreeStylePreComps xsltFreeStylesheet xsltFreeTemplateHashes xsltFreeTransformContext xsltFunctionAvailableFunction xsltFunctionNodeSet xsltGenerateIdFunction xsltGenericDebug xsltGenericDebugContext xsltGenericError xsltGenericErrorContext xsltGetCNsProp xsltGetDebuggerStatus xsltGetDefaultSecurityPrefs xsltGetExtData xsltGetExtInfo xsltGetKey xsltGetNamespace xsltGetNsProp xsltGetPlainNamespace xsltGetProfileInformation xsltGetQNameURI xsltGetQNameURI2 xsltGetSecurityPrefs xsltGetSpecialNamespace xsltGetTemplate xsltGetUTF8Char xsltGetXIncludeDefault xsltIf xsltInit xsltInitAllDocKeys xsltInitCtxtExts xsltInitCtxtKey xsltInitCtxtKeys xsltInitElemPreComp xsltInitGlobals xsltIsBlank xsltKeyFunction xsltLibxmlVersion xsltLibxsltVersion xsltLoadDocument xsltLoadStyleDocument xsltLoadStylesheetPI xsltLocalVariablePop xsltLocalVariablePush xsltMaxDepth xsltMessage xsltNamespaceAlias xsltNeedElemSpaceHandling xsltNewDocument xsltNewElemPreComp xsltNewSecurityPrefs xsltNewStyleDocument xsltNewStylesheet xsltNewTransformContext xsltNextImport xsltNormalizeCompSteps xsltNumber xsltNumberFormat xsltParseGlobalParam xsltParseGlobalVariable xsltParseStylesheetAttributeSet xsltParseStylesheetCallerParam xsltParseStylesheetDoc xsltParseStylesheetFile xsltParseStylesheetImport xsltParseStylesheetImportedDoc xsltParseStylesheetInclude xsltParseStylesheetOutput xsltParseStylesheetParam xsltParseStylesheetProcess xsltParseStylesheetVariable xsltParseTemplateContent xsltPreComputeExtModuleElement xsltPrintErrorContext xsltProcessOneNode xsltProcessingInstruction xsltProfileStylesheet xsltQuoteOneUserParam xsltQuoteUserParams xsltRegisterAllElement xsltRegisterAllExtras xsltRegisterAllFunctions xsltRegisterExtElement xsltRegisterExtFunction xsltRegisterExtModule xsltRegisterExtModuleElement xsltRegisterExtModuleFull xsltRegisterExtModuleFunction xsltRegisterExtModuleTopLevel xsltRegisterExtPrefix xsltRegisterExtras xsltRegisterLocalRVT xsltRegisterPersistRVT xsltRegisterTestModule xsltRegisterTmpRVT xsltReleaseRVT xsltResolveStylesheetAttributeSet xsltRunStylesheet xsltRunStylesheetUser xsltSaveProfiling xsltSaveResultTo xsltSaveResultToFd xsltSaveResultToFile xsltSaveResultToFilename xsltSaveResultToString xsltSecurityAllow xsltSecurityForbid xsltSetCtxtParseOptions xsltSetCtxtSecurityPrefs xsltSetCtxtSortFunc xsltSetDebuggerCallbacks xsltSetDebuggerStatus xsltSetDefaultSecurityPrefs xsltSetGenericDebugFunc xsltSetGenericErrorFunc xsltSetLoaderFunc xsltSetSecurityPrefs xsltSetSortFunc xsltSetTransformErrorFunc xsltSetXIncludeDefault xsltShutdownCtxtExts xsltShutdownExts xsltSort xsltSplitQName xsltStyleGetExtData xsltStylePreCompute xsltSystemPropertyFunction xsltTemplateProcess xsltTestCompMatchList xsltText xsltTimestamp xsltTransformError xsltUninit xsltUnparsedEntityURIFunction xsltUnregisterExtModule xsltUnregisterExtModuleElement xsltUnregisterExtModuleFunction xsltUnregisterExtModuleTopLevel xsltValueOf xsltVariableLookup xsltXPathCompile xsltXPathFunctionLookup xsltXPathGetTransformContext xsltXPathVariableLookup

generic

count=1, id=173, version=30319,

count=3, id=135, version=30729,

count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=128, version=50727,

count=1, productName=Unmarked objects (old),

count=33, id=132, productName=VS2008 build 21022, version=21022,

count=7, id=150, version=20413,

count=20, id=149, productName=VS2008 SP1 build 30729, version=30729,

count=3, id=109, productName=VS2005 build 50727, version=50727,

count=2, id=125, productName=VS2005 build 50727, version=50727,

count=48, id=110, productName=VS2005 build 50727, version=50727,

count=376, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=36, id=137, version=30729,

count=23, id=123, productName=VS2005 build 50727, version=50727,

count=299, id=1, productName=Unmarked objects,

count=27, id=171, productName=VS2010 build 30319, version=30319,

count=857, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=148, productName=VS2008 build 21022, version=21022,

count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,

Orbis-RPF-Builder - v1.1/xg.dll

IMPHASH e41d26b1b1ba997c95a1abcd700338c3
SHA256 d683c4842a3077be35153729876740f5d4761b0113506679b8b48f0c82ddd7ec
MD5 eb9f27428e6ddac35840c9a947fd9f73
SHA1 b1750bcf8ccc302dfed0d7e0f88035e2d906b703
SHA512 66a3355a2971783419adef073dd7e70c09b66f54759ae2b354d1240d361d40570d3b3a01e5d32033ef710f3fa8018bffc1fe8b5cf1f325ae78949866975bfd28
SSDEEP 1536:qMkBDyXcym2x/nJGITQ5QmiljzMaVoYfbSjHH2uLUHEwTXwsz:qMkBDyXj5JGITQqtESS4xXJ
TLSH
T10A933C07FF511692C07A8B78C8D32756E370B8891B2573DF22806698AD337F48E771A9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

6

Entry point

50872

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

xg.pdb

Orbis-RPF-Builder - v1.1/xg_xs.dll

IMPHASH fdfefdc0e333fd76ebc36b427d0556fe
SHA256 c2c982fcc9cfc11b6b9438c2208d4da867cd84f75e3435b20132f350f00204fa
MD5 e721fbb4a23aac7d379a2f7c3a8aa87e
SHA1 b5ed2fa97accfe23d61af6db83eda45a568cfe21
SHA512 4eba1180b0949d4d20a4266d30c701168017274c93b251d4c25e8e1e389ae60b90ef6e2849f7d70ae219eb803df0dfa64c70e047dc9d4c40ff9428d473ab1eb6
SSDEEP 6144:QdreyOJozLvEHmdQyMTib0jgtbA1XPA3b6XX6BMcyEFZNYRm6Vrl6Po:QgyxzLvEHmdSb8bAq3cXKMcPFZrihp
TLSH
T12BC4D656FB9142E6C02AD374C1934F66EBB3368053B096D706E448386D77BF02F39A99
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

349344

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

xg_xs.pdb

msvcrt

memmove memcpy _CxxThrowException ?what@exception@@UEBAPEBDXZ ??1exception@@UEAA@XZ ??0exception@@QEAA@AEBV0@@Z _lock _XcptFilter ??0exception@@QEAA@AEBQEBDH@Z ??0exception@@QEAA@AEBQEBD@Z _amsg_exit _callnewh vprintf printf sprintf ??_V@YAXPEAX@Z ??1bad_cast@@UEAA@XZ ??0bad_cast@@QEAA@PEBD@Z ??0bad_cast@@QEAA@AEBV0@@Z strcspn localeconv sprintf_s malloc fclose fflush fgetc fgetpos fputc fsetpos _fseeki64 fwrite setvbuf _unlock memcpy_s _initterm setlocale __uncaught_exception __pctype_func isupper ___lc_handle_func ___lc_codepage_func calloc ___mb_cur_max_func _ismbblead islower abort _wcsdup __crtLCMapStringA _wsetlocale memcmp free __C_specific_handler memset ?terminate@@YAXXZ _purecall ??3@YAXPEAX@Z vsprintf_s ??1type_info@@UEAA@XZ _onexit ungetc __dllonexit __iob_func __CxxFrameHandler3

api-ms-win-core-debug-l1-1-0

OutputDebugStringW OutputDebugStringA

api-ms-win-core-synch-l1-1-0

InitializeCriticalSectionEx InitializeCriticalSection LeaveCriticalSection EnterCriticalSection DeleteCriticalSection

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId GetCurrentThreadId GetCurrentProcess TerminateProcess

api-ms-win-core-sysinfo-l1-1-0

GetTickCount GetSystemTimeAsFileTime

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry RtlCaptureContext RtlVirtualUnwind

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter UnhandledExceptionFilter

api-ms-win-core-util-l1-1-0

EncodePointer DecodePointer

Name

.text

Size

352KB

Virtual Size

351KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

200KB

Virtual Size

197KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xbld

Size

4KB

Virtual Size

212B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

992B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Orbis-RPF-Builder - v1.1/zlib.dll

IMPHASH d864ee5b5be09704bef5ffbefb087055
SHA256 0df0c22bf411ad670d7b8fe5a533e4831313d5a3118cf9216389c642c90ec2f9
MD5 c88a6474424b1bf960e7ebb4b28d0ed0
SHA1 1405881be65153a661feab43115532f7ec80c077
SHA512 a4c273f474cf15b86dc038a2bfceb28ee17178de20aa5c17378b15e92159cf70c29549d4e7254ae351d45054e4d15c3b87e5808fad9899f9417864fcb6f14d78
SSDEEP 768:tRagNniRy7pA2cp+k8AVfgibjlR1L+zwWMyK3yEXuLiOxPs6:tR6RmpITVfgin1iz91jCb3
TLSH
T126334C85CBC181FEE9B0A835A8FB7775DB32B51A851E8E87B308D6641852114E7833DF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

42928

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Orbis-RPF-Builder - v1.1/zlib1.dll

IMPHASH 158c624bf73f267a769b56887ecb8024
SHA256 3755cc7d74fa322112e97abc997436e1ae7b7e1b72255120c0509d5b86c1c200
MD5 b6101d9726fd800af0d960885bd7b065
SHA1 af435385e456b2b57212ffd7e6af68664aa04164
SHA512 75502805b64dc3a6a5b23359ac844770ccee36b862800d381daa66a20ccec4fec54905f6c40862c7480ae5f1d664088219080f048b8040add739a10f40f50ea2
SSDEEP 1536:fnToIfYHN0vDbr5xtAVrluCVBcIOOCy8eFIOnrs6sG82V2:vTBfA6njtMvnSOCy8Knrs6sGR4
TLSH
T100733A81B7EA1551E4B71D3088FB977E9731BA064575CE6EE20CF20D6C33B615A203EA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

60KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

112B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

144B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1024B

Virtual Size

816B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1024B

Virtual Size

844B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer