e:\3.Project\BDLeyoyoV2\Game\Lib\Game.pdb
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
07926a5738f05b8d0fe9f9590e1d775d_JaffaCakes118.exe
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
07926a5738f05b8d0fe9f9590e1d775d_JaffaCakes118.exe
Resource
win10v2004-20240611-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Game.dll
Resource
win7-20231129-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
Game.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
Lobby.exe
Resource
win7-20240508-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Lobby.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
VoIPView.dll
Resource
win7-20240611-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
VoIPView.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
07926a5738f05b8d0fe9f9590e1d775d_JaffaCakes118
-
Size
752KB
-
MD5
07926a5738f05b8d0fe9f9590e1d775d
-
SHA1
232c51c814f97f69ff7c373523d4e8919aa1ce92
-
SHA256
940a4394f5287c90530524c7854092ebd797f5784039c38899724db0902ca56a
-
SHA512
a065d0a22f5f42a010e84d94837c4daebb03816669c632b715c12d3d8573a323d82dadeb32d504db2cab0f0cdf11e472fad6ac286858ade6c5c13f534b5793e9
-
SSDEEP
12288:G8nrdkC4q0oe24Y/M9MUB7kSqVLclx77pOY6zJsqKMTlbm2CGfWcM3hPFaYbMLjq:GgBkCF08F/M9zB7kSeoBOY6z6qKelbBk
Score
3/10
Malware Config
Signatures
-
Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource 07926a5738f05b8d0fe9f9590e1d775d_JaffaCakes118 unpack001/Game.dll unpack001/Lobby.exe unpack001/VoIPView.dll -
NSIS installer 1 IoCs
resource yara_rule sample nsis_installer_1
Files
-
07926a5738f05b8d0fe9f9590e1d775d_JaffaCakes118.exe windows:4 windows x86 arch:x86
381e79edf6f32b225643e232be0965fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
lstrcatA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
CopyFileA
ExitProcess
lstrcpynA
GetCommandLineA
SetFileTime
GetTempPathA
GetUserDefaultLangID
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
GlobalAlloc
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
lstrcpyA
lstrlenA
GetSystemDirectoryA
CloseHandle
lstrcmpiA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
GlobalFree
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
MulDiv
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA
user32
SystemParametersInfoA
RegisterClassA
EndDialog
ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
LoadCursorA
SetCursor
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
CreateWindowExA
OpenClipboard
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
IsWindow
GetClassInfoA
DialogBoxParamA
CharNextA
ExitWindowsEx
CreateDialogParamA
EmptyClipboard
DestroyWindow
SetWindowLongA
LoadImageA
GetDC
EnableWindow
PeekMessageA
DispatchMessageA
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
GetDlgItem
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Config.ini
-
Game.dll.dll windows:4 windows x86 arch:x86
13b321b6ae3e747d24c58d340a0f9540
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
skinmagic
ord16
ord11
ord51
ord24
ord25
ord34
ord3
ord1
ord17
ord33
ord9
ord8
ord35
ord10
winmm
PlaySoundA
timeGetTime
shlwapi
SHGetValueA
PathFileExistsA
PathIsDirectoryA
wininet
InternetSetOptionA
HttpOpenRequestA
InternetCloseHandle
InternetReadFile
InternetOpenA
InternetConnectA
HttpSendRequestA
crashrpt
AddFile
Install
ijl15
ord5
ord3
ord2
mfc71
ord5200
ord2537
ord2731
ord2835
ord4307
ord2714
ord2862
ord2540
ord2646
ord2533
ord3718
ord3719
ord3709
ord2644
ord3949
ord4486
ord4262
ord605
ord1280
ord354
ord6090
ord4580
ord709
ord602
ord2075
ord347
ord501
ord6065
ord1425
ord764
ord3182
ord762
ord6067
ord4749
ord4353
ord5833
ord4212
ord4735
ord578
ord784
ord310
ord1091
ord876
ord2902
ord589
ord2657
ord330
ord2322
ord5731
ord5642
ord304
ord6037
ord2264
ord3908
ord781
ord5915
ord1402
ord5214
ord2991
ord4261
ord572
ord1614
ord760
ord3204
ord3302
ord1283
ord297
ord1489
ord6118
ord299
ord2933
ord2372
ord1931
ord1483
ord4098
ord2089
ord1547
ord4234
ord3171
ord591
ord1482
ord5866
ord266
ord2527
ord5611
ord6060
ord5608
ord6054
ord4161
ord6057
ord5888
ord5727
ord5647
ord5523
ord5588
ord5414
ord5401
ord5921
ord5719
ord3180
ord1794
ord3875
ord2866
ord5613
ord2176
ord1599
ord911
ord1955
ord6144
ord2370
ord2019
ord333
ord3401
ord5563
ord4109
ord907
ord3997
ord2272
ord3934
ord3761
ord3762
ord2899
ord5873
ord5634
ord2271
ord651
ord4115
ord1564
ord416
ord2086
ord1545
ord4232
ord3164
ord587
ord5795
ord2164
ord5491
ord3369
ord5991
ord3413
ord3357
ord6236
ord2948
ord356
ord1793
ord3174
ord747
ord1187
ord559
ord2469
ord1151
ord4320
ord3684
ord563
ord753
ord6255
ord1009
ord2654
ord3596
ord3651
ord3489
ord1637
ord1558
ord4236
ord3214
ord642
ord6223
ord3163
ord6062
ord3255
ord265
ord1185
ord2367
ord1641
ord1571
ord4238
ord658
ord3879
ord2882
ord3795
ord2873
ord4761
ord4888
ord2160
ord6120
ord2794
ord1929
ord5331
ord6297
ord5320
ord6286
ord326
ord1198
ord1084
ord2368
ord2095
ord1591
ord1655
ord3317
ord741
ord1966
ord1917
ord629
ord1439
ord5323
ord313
ord2903
ord5089
ord384
ord4100
ord2094
ord3244
ord1645
ord1586
ord3304
ord730
ord2863
ord2833
ord1339
ord458
ord1191
ord4104
ord1230
ord1580
ord2346
ord6168
ord5993
ord3999
ord3998
ord865
ord5059
ord4564
ord723
ord531
ord1160
ord2285
ord5445
ord1003
ord1175
ord371
ord1098
ord1123
ord1101
ord1054
ord1193
ord1656
ord1964
ord5175
ord1362
ord4967
ord3345
ord6277
ord3802
ord6279
ord1522
ord2172
ord2178
ord2405
ord2387
ord2385
ord2403
ord2415
ord2392
ord2408
ord2413
ord2396
ord2398
ord2400
ord2394
ord2410
ord2390
ord934
ord930
ord932
ord928
ord923
ord5233
ord5235
ord5960
ord1600
ord4282
ord4722
ord3403
ord5203
ord4185
ord6275
ord5073
ord1908
ord5152
ord4244
ord1401
ord3946
ord1617
ord1620
ord5912
ord1551
ord1670
ord1671
ord2020
ord4890
ord5182
ord1903
ord4125
ord5637
ord1279
ord3161
ord1934
ord3210
ord3441
ord3641
ord1308
ord4240
msvcr71
__CppXcptFilter
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
__security_error_handler
?terminate@@YAXXZ
memset
strchr
strncmp
isalnum
isalpha
tolower
isspace
fseek
ftell
fread
fputs
_snprintf
fopen
fprintf
fflush
vfprintf
fclose
time
localtime
strftime
atof
free
malloc
__CxxFrameHandler
memmove
??1exception@@UAE@XZ
??0exception@@QAE@XZ
atoi
_except_handler3
_purecall
_atoi64
atol
_CxxThrowException
??0exception@@QAE@ABV0@@Z
sprintf
_beginthreadex
kernel32
FindResourceA
LoadResource
GetModuleFileNameA
LocalFree
CreateDirectoryA
GetLocalTime
GetVersionExA
GetPrivateProfileStringA
Sleep
LocalAlloc
lstrlenA
FormatMessageA
InterlockedDecrement
GetProcAddress
LoadLibraryA
FreeLibrary
GetCommandLineA
MultiByteToWideChar
ExitProcess
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetPrivateProfileSectionA
WritePrivateProfileStringA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MoveFileA
CloseHandle
WriteFile
CreateFileA
WaitForSingleObject
TerminateThread
CreateThread
SuspendThread
ResumeThread
ResetEvent
SetEvent
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalLock
GetTickCount
CreateEventA
MulDiv
LockResource
FreeResource
SizeofResource
GetPrivateProfileIntA
user32
GetActiveWindow
DrawEdge
InflateRect
DefWindowProcA
ScreenToClient
OffsetRect
wsprintfA
RedrawWindow
EnableMenuItem
ReleaseDC
GetSysColor
GetKeyState
GetFocus
LockWindowUpdate
UpdateWindow
GetDC
FillRect
ReleaseCapture
SetCapture
PtInRect
LoadCursorA
SetCursor
CopyRect
IsRectEmpty
PostQuitMessage
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetCursorPos
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetParent
AppendMenuA
CreatePopupMenu
SetForegroundWindow
FlashWindow
SetRectEmpty
IsWindowVisible
GetSystemMetrics
EnumDisplaySettingsA
ChangeDisplaySettingsA
GetWindowLongA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
KillTimer
SetTimer
GetWindowRect
IsIconic
SendMessageA
DrawIcon
EnableWindow
LoadImageA
InvalidateRect
GetClientRect
PostMessageA
SetRect
IntersectRect
gdi32
CreateCompatibleDC
CreateBitmap
CreateFontA
Rectangle
PtInRegion
CreatePolygonRgn
CreateDCA
GetDeviceCaps
GetStockObject
SelectPalette
RealizePalette
GetDIBits
BitBlt
GetObjectA
DeleteDC
DeleteObject
GetTextExtentPoint32A
FillRgn
GetWindowOrgEx
SelectObject
CreateSolidBrush
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateFontIndirectA
GetCurrentObject
CreateCompatibleBitmap
CombineRgn
CreateRectRgnIndirect
shell32
ShellExecuteA
ole32
OleSetContainedObject
CoInitializeEx
CoUninitialize
OleCreateStaticFromData
CreateStreamOnHGlobal
CoCreateInstance
OleRun
CreateILockBytesOnHGlobal
CoInitialize
StgCreateDocfileOnILockBytes
oleaut32
SysFreeString
SysAllocString
OleLoadPicture
GetErrorInfo
ws2_32
WSACleanup
htonl
htons
ntohs
ntohl
WSAStartup
msvcp71
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
Exports
Exports
??0CAvatarShow@@QAE@PAVCWnd@@@Z
??0CButtonEx@@QAE@XZ
??0CCustomDlg@@QAE@PAVCWnd@@@Z
??0CGameFrame@@QAE@PAVCWinApp@@PAUHICON__@@@Z
??0CGameInterface@@QAE@ABV0@@Z
??0CGameInterface@@QAE@XZ
??0CListCtrlEx@@QAE@XZ
??0CPictureEx@@QAE@XZ
??0CRichEditCtrlEx@@QAE@XZ
??0CXPMenu@@QAE@PAVCFont@@@Z
??1CAvatarShow@@QAE@XZ
??1CButtonEx@@UAE@XZ
??1CCustomDlg@@UAE@XZ
??1CGameFrame@@QAE@XZ
??1CGameInterface@@UAE@XZ
??1CListCtrlEx@@UAE@XZ
??1CPictureEx@@UAE@XZ
??1CRichEditCtrlEx@@UAE@XZ
??1CXPMenu@@UAE@XZ
??4CGameInterface@@QAEAAV0@ABV0@@Z
??_7CButtonEx@@6B@
??_7CCustomDlg@@6B@
??_7CGameInterface@@6B@
??_7CListCtrlEx@@6B@
??_7CPictureEx@@6B@
??_7CRichEditCtrlEx@@6B@
??_7CXPMenu@@6B@
??_FCAvatarShow@@QAEXXZ
??_FCCustomDlg@@QAEXXZ
??_FCXPMenu@@QAEXXZ
?AddADMsg@CGameFrame@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?AddGMMsg@CGameFrame@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?AddHandle@CAvatarShow@@KAXPAX@Z
?AddLine@CRichEditCtrlEx@@QAEXXZ
?AddLink@CRichEditCtrlEx@@AAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?AddSetupDlg@CGameFrame@@QAEXPAVCCustomDlg@@ABV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?AddSysMsg@CGameFrame@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?Clear@CRichEditCtrlEx@@QAEXXZ
?CompareFunc@CListCtrlEx@@SGHJJJ@Z
?CreateGame@CGameFrame@@QAEHPAVCWnd@@@Z
?CreateObject@CListCtrlEx@@SGPAVCObject@@XZ
?DeleteAllItems@CListCtrlEx@@QAEHXZ
?DeleteItem@CListCtrlEx@@QAEHH@Z
?DoCancel@CCustomDlg@@UAEXXZ
?DoOK@CCustomDlg@@UAEXXZ
?DownloadAvatar@CAvatarShow@@IAEKXZ
?Draw@CAvatarShow@@QAEXPAVCDC@@@Z
?Draw@CPictureEx@@QAEHXZ
?DrawBgClr@CXPMenu@@QAEXPAVCDC@@VCRect@@H@Z
?DrawItem@CListCtrlEx@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawItem@CXPMenu@@UAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawStatic@CPictureEx@@QAEHXZ
?DrawTextA@CXPMenu@@QAEXPAVCDC@@VCRect@@V?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?EaableLook@CGameFrame@@QAEXH@Z
?EnableMusic@CGameFrame@@QAEXH@Z
?EnableSound@CGameFrame@@QAEXH@Z
?EnableWindow@CButtonEx@@UAEHH@Z
?ExitInstance@CGameFrame@@QAEXXZ
?FindUser@CGameFrame@@QAEPAUst_plygamedata@@H@Z
?GetBkColor@CPictureEx@@QBEKXZ
?GetCellRect@CListCtrlEx@@IBE?AVCRect@@HH@Z
?GetFPS@CGameFrame@@QAEMXZ
?GetFont@CGameFrame@@QAEPAVCFont@@XZ
?GetFrameCount@CPictureEx@@QBEHI@Z
?GetFrontHandle@CAvatarShow@@KAPAXXZ
?GetFullRowSel@CListCtrlEx@@QAEHXZ
?GetGraphicDir@CGameFrame@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetIcon@CGameFrame@@QAEPAUHICON__@@XZ
?GetLobbyWnd@CGameFrame@@QAEPAUHWND__@@XZ
?GetLooker@CGameFrame@@QAEPAUst_plygamedata@@XZ
?GetMe@CGameFrame@@QAEPAUst_plygamedata@@XZ
?GetMessageMap@CButtonEx@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CListCtrlEx@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CPictureEx@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CRichEditCtrlEx@@MBEPBUAFX_MSGMAP@@XZ
?GetMusicDir@CGameFrame@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetNextBlock@CPictureEx@@IBE?AW4GIFBlockTypes@1@XZ
?GetNextBlockLen@CPictureEx@@IBEHXZ
?GetNextGraphicBlock@CPictureEx@@IAEPAXPAI0PAUtagSIZE@@10@Z
?GetPaintRect@CPictureEx@@QAEHPAUtagRECT@@@Z
?GetParam@CGameFrame@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAX@Z
?GetRealMe@CGameFrame@@QAEPAUst_plygamedata@@XZ
?GetRoomInfo@CGameFrame@@QAEPAUpt_client_roominfo_not@@XZ
?GetRuntimeClass@CListCtrlEx@@UBEPAUCRuntimeClass@@XZ
?GetSize@CPictureEx@@QBE?AUtagSIZE@@H@Z
?GetSoundDir@CGameFrame@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetSubBlocksLen@CPictureEx@@IBEII@Z
?GetThisClass@CListCtrlEx@@SGPAUCRuntimeClass@@XZ
?GetThisMessageMap@CButtonEx@@KGPBUAFX_MSGMAP@@XZ
?GetThisMessageMap@CListCtrlEx@@KGPBUAFX_MSGMAP@@XZ
?GetThisMessageMap@CPictureEx@@KGPBUAFX_MSGMAP@@XZ
?GetThisMessageMap@CRichEditCtrlEx@@KGPBUAFX_MSGMAP@@XZ
?GetTrueColumnWidth@CListCtrlEx@@IBEHH@Z
?GetTrueItemText@CListCtrlEx@@IBE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@HH@Z
?GetUser@CGameFrame@@QAEPAUst_plygamedata@@H@Z
?GetUserCount@CGameFrame@@QAEHXZ
?HitTestRowCol@CListCtrlEx@@IBE_NAAVCPoint@@AAH1@Z
?Init@CAvatarShow@@QAEXHHV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0PAVCRect@@@Z
?Init@CButtonEx@@QAEXVCRect@@V?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0PBD@Z
?Init@CListCtrlEx@@QAEXHHPAK@Z
?InitInstance@CGameFrame@@QAEHXZ
?InsertBitmap@CRichEditCtrlEx@@AAEXAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?InsertGIF@CRichEditCtrlEx@@AAEXAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?InsertItem@CListCtrlEx@@QAEHHPBD@Z
?InsertItem@CListCtrlEx@@QAEHHPBDH@Z
?InsertItem@CListCtrlEx@@QAEHIHPBDIIHJ@Z
?InsertItem@CListCtrlEx@@QAEHPBUtagLVITEMA@@@Z
?IsAnimatedGIF@CPictureEx@@QBEHI@Z
?IsEnableLook@CGameFrame@@QAEHXZ
?IsEnableMusic@CGameFrame@@QAEHXZ
?IsEnableSound@CGameFrame@@QAEHXZ
?IsGIF@CPictureEx@@QBEHI@Z
?IsMoneyRoom@CGameFrame@@QAE_NXZ
?IsNotCheat@CGameFrame@@QAE_NXZ
?IsPlaying@CPictureEx@@QBEHXZ
?IsPointInsideALink@CRichEditCtrlEx@@IAEHUtagPOINT@@AAUHYPERLINKINFO@1@PBD@Z
?IsUseHighPrecisionTimer@CGameFrame@@QAE_NXZ
?IsVisitor@CGameFrame@@QAE_NXZ
?Load@CPictureEx@@QAEHPAXK@Z
?Load@CPictureEx@@QAEHPBD0@Z
?Load@CPictureEx@@QAEHPBD@Z
?MeasureItem@CXPMenu@@UAEXPAUtagMEASUREITEMSTRUCT@@@Z
?NoClearMenu@CRichEditCtrlEx@@QAEXXZ
?OSIsNT@CGameFrame@@QAE_NXZ
?OnColumnclick@CListCtrlEx@@IAEXPAUtagNMHDR@@PAJ@Z
?OnCreate@CListCtrlEx@@IAEHPAUtagCREATESTRUCTA@@@Z
?OnDeleteAllItems@CListCtrlEx@@QAEXXZ
?OnDeleteItem@CListCtrlEx@@QAEXH@Z
?OnDeleteitem@CListCtrlEx@@IAEXPAUtagNMHDR@@PAJ@Z
?OnDestroy@CListCtrlEx@@IAEXXZ
?OnDestroy@CPictureEx@@IAEXXZ
?OnEraseBkgnd@CListCtrlEx@@IAEHPAVCDC@@@Z
?OnHScroll@CRichEditCtrlEx@@IAEXIIPAVCScrollBar@@@Z
?OnInsertItem@CListCtrlEx@@QAEXH@Z
?OnKeyDown@CListCtrlEx@@IAEXIII@Z
?OnKillFocus@CListCtrlEx@@IAEXPAVCWnd@@@Z
?OnKillFocus@CPictureEx@@IAEXPAVCWnd@@@Z
?OnLButtonDblClk@CButtonEx@@IAEXIVCPoint@@@Z
?OnLButtonDown@CButtonEx@@IAEXIVCPoint@@@Z
?OnLButtonDown@CListCtrlEx@@IAEXIVCPoint@@@Z
?OnLButtonDown@CRichEditCtrlEx@@IAEXIVCPoint@@@Z
?OnLButtonUp@CButtonEx@@IAEXIVCPoint@@@Z
?OnMouseMove@CButtonEx@@IAEXIVCPoint@@@Z
?OnMouseMove@CListCtrlEx@@IAEXIVCPoint@@@Z
?OnMouseMove@CRichEditCtrlEx@@IAEXIVCPoint@@@Z
?OnPaint@CButtonEx@@IAEXXZ
?OnPaint@CListCtrlEx@@IAEXXZ
?OnPaint@CPictureEx@@IAEXXZ
?OnRButtonDown@CRichEditCtrlEx@@IAEXIVCPoint@@@Z
?OnSetBkColor@CListCtrlEx@@IAEJIJ@Z
?OnSetCursor@CButtonEx@@IAEHPAVCWnd@@II@Z
?OnSetFocus@CListCtrlEx@@IAEXPAVCWnd@@@Z
?OnSetTextBkColor@CListCtrlEx@@IAEJIJ@Z
?OnSetTextColor@CListCtrlEx@@IAEJIJ@Z
?OnSize@CListCtrlEx@@IAEXIHH@Z
?OnSize@CRichEditCtrlEx@@IAEXIHH@Z
?OnVScroll@CRichEditCtrlEx@@IAEXIIPAVCScrollBar@@@Z
?ParseString@CRichEditCtrlEx@@AAEXAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?PlaySoundA@CGameFrame@@QAEXPBDK@Z
?PreCreateWindow@CListCtrlEx@@UAEHAAUtagCREATESTRUCTA@@@Z
?PreSubclassWindow@CListCtrlEx@@MAEXXZ
?PreTranslateMessage@CButtonEx@@UAEHPAUtagMSG@@@Z
?PrepareDC@CPictureEx@@IAEHHH@Z
?QuitRequest@CGameFrame@@QAEXXZ
?Recv@CGameFrame@@QAEXPBDH@Z
?Release@CAvatarShow@@QAEXXZ
?RemoveHandle@CAvatarShow@@KAXPAX@Z
?RemoveUser@CGameFrame@@QAEXH@Z
?Render@CGameInterface@@UAEXXZ
?RepaintSelectedItems@CListCtrlEx@@IAEXXZ
?ResetDataPointer@CPictureEx@@IAEXXZ
?ResumeDraw@CPictureEx@@QAEXXZ
?Save@CAvatarShow@@QAEXXZ
?Save@CPictureEx@@QAEHPBD@Z
?SaveGrey@CPictureEx@@QAEHPBD@Z
?Send@CGameFrame@@QAEXPBDH@Z
?SendSelChangedNotification@CListCtrlEx@@IAEXXZ
?SetBackColors@CListCtrlEx@@QAEXKK@Z
?SetBkColor@CPictureEx@@QAEXK@Z
?SetBoundariesToLinks@CRichEditCtrlEx@@AAEXXZ
?SetCustomImage@CListCtrlEx@@QAEXHPAUHBITMAP__@@@Z
?SetFNCreateGame@CGameFrame@@QAEXP6AHPAVCWnd@@PAPAVCGameInterface@@@Z@Z
?SetFNOnRecv@CGameFrame@@QAEXP6AXPBDH@Z@Z
?SetFullRowSel@CListCtrlEx@@QAEHH@Z
?SetGraphicDir@CGameFrame@@QAEXABV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?SetGridLineUse@CListCtrlEx@@QAEXH@Z
?SetHeaderColors@CListCtrlEx@@QAEXKK@Z
?SetHighlightColors@CListCtrlEx@@QAEXKK@Z
?SetItemTextBkColor@CListCtrlEx@@QAEHHK@Z
?SetItemTextColor@CListCtrlEx@@QAEHHK@Z
?SetLooker@CGameFrame@@QAEXPAUst_plygamedata@@@Z
?SetMe@CGameFrame@@QAEXPAUst_plygamedata@@@Z
?SetMusicDir@CGameFrame@@QAEXABV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?SetPaintRect@CPictureEx@@QAEHPBUtagRECT@@@Z
?SetParam@CGameFrame@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAX@Z
?SetScrollBarChange@CListCtrlEx@@QAEXH@Z
?SetSortType@CListCtrlEx@@QAEXHH@Z
?SetSoundDir@CGameFrame@@QAEXABV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?SetText@CRichEditCtrlEx@@QAEXPBD@Z
?SetUserStep@CListCtrlEx@@QAEXHD@Z
?SetVisitor@CGameFrame@@QAEX_N@Z
?SetWindowMode@CGameFrame@@QAEX_N@Z
?ShowAvatar@CAvatarShow@@QAEXH@Z
?ShowList@CGameFrame@@QAEX_N@Z
?SkipNextBlock@CPictureEx@@IAEHXZ
?SkipNextGraphicBlock@CPictureEx@@IAEHXZ
?SortByColumn@CListCtrlEx@@QAEXHH@Z
?SplitToArray@CRichEditCtrlEx@@AAEXV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@AAV?$vector@V?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V?$allocator@V?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@std@@@std@@@Z
?Stop@CPictureEx@@QAEXXZ
?StopSound@CGameFrame@@QAEXPBDK@Z
?SuspendDraw@CPictureEx@@QAEXXZ
?ThreadAnimation@CPictureEx@@IAEXXZ
?UnLoad@CPictureEx@@QAEXXZ
?Update@CGameInterface@@UAEXN@Z
?UseHighPrecisionTimer@CGameFrame@@QAEXXZ
?WindowProc@CGameInterface@@UAEJIIJ@Z
?_DownloadAvatar@CAvatarShow@@KGKPAX@Z
?_ThreadAnimation@CPictureEx@@KGIPAX@Z
?_messageEntries@CButtonEx@@0QBUAFX_MSGMAP_ENTRY@@B
?_messageEntries@CListCtrlEx@@0QBUAFX_MSGMAP_ENTRY@@B
?_messageEntries@CPictureEx@@0QBUAFX_MSGMAP_ENTRY@@B
?_messageEntries@CRichEditCtrlEx@@0QBUAFX_MSGMAP_ENTRY@@B
?classCListCtrlEx@CListCtrlEx@@2UCRuntimeClass@@B
?m_Lock@CAvatarShow@@0VCCriticalSection@@A
?m_lstThreadList@CAvatarShow@@0V?$list@PAXV?$allocator@PAX@std@@@std@@A
?messageMap@CButtonEx@@1UAFX_MSGMAP@@B
?messageMap@CListCtrlEx@@1UAFX_MSGMAP@@B
?messageMap@CPictureEx@@1UAFX_MSGMAP@@B
?messageMap@CRichEditCtrlEx@@1UAFX_MSGMAP@@B
Sections
.text Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Lobby.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 156KB - Virtual size: 444KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 43KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 391KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
VoIPView.dll.dll windows:4 windows x86 arch:x86
45dbeeee1419d4df05de9b55fe047ae5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
d:\NewGame\新视频\VoIPDlg\Release\VoIPView.pdb
Imports
mfc71
ord2396
ord2413
ord2408
ord2392
ord2415
ord2403
ord2385
ord2387
ord2405
ord2178
ord2172
ord1522
ord6279
ord3802
ord6277
ord3345
ord4967
ord1362
ord5175
ord1964
ord1656
ord1655
ord1599
ord5200
ord2537
ord2731
ord2835
ord4307
ord2714
ord2862
ord2540
ord2646
ord2533
ord3718
ord3719
ord3709
ord2644
ord3949
ord4486
ord4261
ord3164
ord572
ord587
ord602
ord6037
ord347
ord563
ord753
ord578
ord1009
ord876
ord2398
ord709
ord501
ord2654
ord2164
ord266
ord3641
ord3441
ord5182
ord4212
ord4735
ord4890
ord2020
ord1671
ord1670
ord1551
ord5912
ord1401
ord4244
ord5203
ord4262
ord354
ord605
ord6090
ord4580
ord784
ord310
ord2322
ord5490
ord304
ord1968
ord4888
ord1482
ord762
ord3204
ord2902
ord4100
ord2094
ord3244
ord1955
ord1283
ord1175
ord371
ord1098
ord1794
ord5731
ord5642
ord4749
ord1084
ord6144
ord3401
ord1123
ord781
ord2400
ord2394
ord2410
ord2390
ord934
ord930
ord932
ord928
ord923
ord5233
ord5235
ord5960
ord1600
ord4282
ord4722
ord3403
ord5214
ord4185
ord6275
ord5073
ord1908
ord5152
ord4232
ord4320
ord1402
ord3946
ord1617
ord1620
ord5915
ord1545
ord2086
ord1903
ord2372
ord4125
ord5637
ord1279
ord1280
ord3161
ord1934
ord3210
ord764
ord6255
ord3684
ord6065
msvcr71
_purecall
malloc
free
_except_handler3
??0exception@@QAE@ABV0@@Z
__CxxFrameHandler
_CxxThrowException
sprintf
??1exception@@UAE@XZ
??0exception@@QAE@XZ
atof
strchr
atoi
fgets
fopen
memset
__security_error_handler
?terminate@@YAXXZ
_initterm
_adjust_fdiv
__CppXcptFilter
__dllonexit
_onexit
??1type_info@@UAE@XZ
kernel32
GetVersionExA
GetLocalTime
FreeLibrary
GetProcAddress
LoadLibraryA
InitializeCriticalSection
DeleteCriticalSection
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateDirectoryA
user32
SetTimer
GetCursorPos
MessageBoxA
ReleaseDC
IsIconic
AppendMenuA
CreatePopupMenu
KillTimer
ReleaseCapture
LoadImageA
EnableWindow
GetParent
SetCapture
InvalidateRect
GetClientRect
SendMessageA
SetRectEmpty
SetRect
PtInRect
LoadCursorA
SetCursor
gdi32
GetObjectA
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontA
msimg32
TransparentBlt
shlwapi
PathIsDirectoryA
PathFileExistsA
msvcp71
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
Exports
Exports
??0CButtonEx@@QAE@XZ
??1CButtonEx@@UAE@XZ
??_7CButtonEx@@6B@
?EnableWindow@CButtonEx@@UAEHH@Z
?GetMessageMap@CButtonEx@@MBEPBUAFX_MSGMAP@@XZ
?GetThisMessageMap@CButtonEx@@KGPBUAFX_MSGMAP@@XZ
?Init@CButtonEx@@QAEXVCRect@@V?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0PBD@Z
?OnKeyDown@CButtonEx@@QAEXIII@Z
?OnLButtonDblClk@CButtonEx@@IAEXIVCPoint@@@Z
?OnLButtonDown@CButtonEx@@IAEXIVCPoint@@@Z
?OnLButtonUp@CButtonEx@@IAEXIVCPoint@@@Z
?OnMouseMove@CButtonEx@@IAEXIVCPoint@@@Z
?OnPaint@CButtonEx@@IAEXXZ
?OnSetCursor@CButtonEx@@IAEHPAVCWnd@@II@Z
?PreTranslateMessage@CButtonEx@@UAEHPAUtagMSG@@@Z
?SetTips@CButtonEx@@QAEXPBD@Z
?UpdateRes@CButtonEx@@QAEXVCRect@@0@Z
?_messageEntries@CButtonEx@@0QBUAFX_MSGMAP_ENTRY@@B
?messageMap@CButtonEx@@1UAFX_MSGMAP@@B
CreateVoIPView
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 292B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ