��$[!����z�r��Y~_���DFt��W&J����V\��T�\���l k����@��1r�h���n�D{��$��ZgX��A�' ���f� RB�%�dz�K&m(�n)w����Y�{�{���7}�M'��p���|�o��.HlZ���Onu��K}B�%?�U�e�]3D�x���m"_���ھ���Rp`�~2�vZp'��"y��9b&��c�i�^�E���(';�.*S�Wl���8/�����TqJ]�T��ȑdU[ dԈI���H��?̭�I�R�%�yӮ�١7[��#4#���|W|n�6�Kc)9�l�����軦r���"�s��6��Qa³��#,d��.�0�r#2�Vt�3��/����dg��fu�aa����%lsM6��1����~/ޣy``�&���h��� �c������F4~HNJ�3R�<���'Ԙ��J�2�8���o�J| ƞYD��T�!p�Ǹ�MϾ�Ŏ��f�����S��:JF�m������N~�ܥg�u��T�ǔ۞�Ҟ�|��P�"<�t��-T�D:@:�x~)�A�[�/f��@�8�y��L�IГW��n��H|t�?��6B��������70'��ռ��u%$J�iT֚Ե��R��@�5>/OBM9�sSj�7�Ȋ�%�7����9�W�#T���"2i!��!1�r3I���ӬM��[ ����DU:�M�J��Iܽ���e�G#�y�(j `��ЛG�C #��X�7\�=�}Tc��X��BE_a��G�<��wS4N�S_�Õ.������k����]�_U���?�D�)}����������A�J�����F��%j^���� ���d��pZp͏���k]�)����K�t�:�+���2#�ul��҄4x|S,�6��n�T��i�`���d�86J��#$xN�H;q5�Ot4�����5���ٛi�1[�cYG�׃�|�F`�~�14���¤���f*N'�q���Ӡg,2�z ��1���Q�lM@���j�SxmH`�v,�I��ngp�宭Ӄ�+��қ�R�I.�dH���m+�)d�Z��W�~p��ʘ#���8�W!-�lL�a������g*��h�t�P�R'p���V��������Qz�O@��oqc�g5N�:�tH����W��q�$=�)�7�� ����^=ܠ�_�d��ٴ���d���!��1��+ �|�E�\kZs��� �v$|��}T-�����k&�9k���Լq�z��!z� ��`�/��5�sgf�9�u2ޕ5~�Z���Td�A!�\[�����8b��C��A�!6����P��J�g�/�N�ȱ ��]^&� �R<A�u{���YNz5��F��Œ�;�J��WB�ć��B{ݥ�Qg]dWZ?�G�Ck�+c�dl�xo)���JSra�u{o���SO�?�����q����NV�b5�/;��S��ϋ����Z�g��@L��$�#�(�ྨvw�M�[m��)��"�uվďen��9e��D���粩X� ���^P��$���/�3�ea��U������/ȵg�x��s=�S�q-+� �4�����0��9���R1��Q3��M�l&V�#j h--�F���J�S��Ղ���}���0U�t/��\b� �zH��a�D�ޑ�`���� �5qR�ZMv>K1P����?������g�4�����<�"_��"W�u�Э���6��X&�>~�/�S�aӼ~K�M����)>�����+RL�=U7cY��ې�`brq�D��H�)��~qH��S��g[ר8C�%�y|9�!iʻ-թ%�����c��� �&$0�\Ҏ*��p8#��~0�(�>�H�&q�!"�вԜ��z�����l�7!/��N�/G����r������+%��2�"�hn�s_��"l�� cL�� �N���&E���ئ��f? \b9Я�-�G��<A����M��6-9��`�x[Z#�4ة�|KU�{�Ȝ��L"N#��@�o��j�'�l$X�������1fy(}������x,�� ���5�����r�]���!�����`���� � '_is��I����aN��+8 �����'���B��ˍ�����;���j{Y��S�J��sa@}�q��j�v�uS&��1�]=��{����KZ���� �N٪ס�'��)Cn�i�����<3FB�?�������%���0����E�}I����t�����������NLj�1\��)*�����ka���g#=�$f�t�ʄ��!���z�ӈ��W�vٞ��֪/ǎ�{+-�f���l]$�/Y^�sQ�va���u�Y�7� 4�倫qWz�줩��:u�Vx�rJ@��`rO�<��iJ�����{*3��2��ty��@��X��ZMs��#����\vG�q/wdب@�^o/�ڔ����`n7���S�P�C�gw�E����W}�Omt���,������s�E����8��j���$� ,�<%�U�� �b}K5��Gq�*�� N>��Uu����']%p�?|�E�$��O�n�-ѯ�/}�a`}f"�X���X�p�G����������C6{C¸�k[�X��*�9_�T��w���Jbv� vq�L(����ʽCT���9�q^� +K�3Hu�{��I��TMb2���|��y.\�Mx�����L�96�p_�t��b��X�<K�K�N��/@����9�a�O<t�8��ǔ6������6%EV��4�r-��a��">:��Ng�25OA6�&: `�5E�q��B9���n#�����q5�C^�,Γ������Y'r�@�J�:�.��6�DESV¹e�~�"���:~p�3f�%��V۱���̈?�xz7�뿢=���`7X� P�;��"�!3?�w1F��r���!EZ�*�d�M.���1@�tq���=��f&�� T��Ok"S�p/ m��So^[Н ��:P�%Ći����06m��C�}UK�#c��~'�j�+�k]�M���C^�H<��w�ؼ�H�X�����v��ǷCw��H7c���-�SPr� �-ϒ9RE���E
Static task
static1
Behavioral task
behavioral1
Sample
2a91468e971ac8ce2a88f844ed562afb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2a91468e971ac8ce2a88f844ed562afb_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a91468e971ac8ce2a88f844ed562afb_JaffaCakes118
-
Size
771KB
-
MD5
2a91468e971ac8ce2a88f844ed562afb
-
SHA1
d15c1d2aa43d3c02a27d1cd656925d8fb3dc9c44
-
SHA256
708d0d82728d35fda252816a20f13c4eac262db530908f74211616dbb3b5cc68
-
SHA512
87b3cb25cfe11b777e68a07de73ec1f177aab65b1451edac5980ded1d7b7842aa77f7f1d581668c7a448b005741240f997099049ac6522db002f1ceff386f3be
-
SSDEEP
24576:Oh4VbWUiWUWabG2X0xcdIJw3GHzwkZ/Ak9gldkm:Oh4VbhUWaq2X0xcdpkRBok
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a91468e971ac8ce2a88f844ed562afb_JaffaCakes118
Files
-
2a91468e971ac8ce2a88f844ed562afb_JaffaCakes118.exe windows:5 windows x86 arch:x86
b647f4a8a88bb62d95306a5f87ef964e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EncodePointer
DecodePointer
LocalAlloc
IsProcessorFeaturePresent
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetLocalTime
GetEnvironmentVariableW
IsBadWritePtr
CopyFileW
LoadLibraryExW
EnumResourceNamesW
SetFileAttributesW
GetFileAttributesW
LoadLibraryW
MoveFileExW
MoveFileW
GetFileTime
TerminateThread
GetCurrentThreadId
GetModuleHandleA
CreateEventW
SetLastError
SetFilePointer
CreateFileW
GetTempFileNameW
SetEvent
InterlockedCompareExchange
InterlockedExchange
ResetEvent
InterlockedDecrement
GetCommandLineW
SetErrorMode
GetComputerNameW
GetSystemInfo
GetVersionExA
lstrcatW
lstrcpyW
lstrlenA
SetThreadPriority
OutputDebugStringA
IsDebuggerPresent
GetModuleFileNameW
GetTempPathW
WaitForMultipleObjects
InterlockedIncrement
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetLocaleInfoA
SystemTimeToFileTime
GetSystemTime
FindClose
FindNextFileW
FindFirstFileW
GetDateFormatW
GetLocaleInfoW
GetTimeFormatW
FileTimeToSystemTime
FileTimeToLocalFileTime
CreateProcessW
ExitThread
CreateThread
DeleteFileW
ReleaseMutex
CreateMutexA
WaitForSingleObject
WriteFile
ReadFile
Sleep
CloseHandle
GetTickCount
FreeLibrary
GetProcAddress
LoadLibraryA
lstrlenW
FormatMessageW
GetLastError
LocalFree
GetUserDefaultLangID
lstrcpyA
lstrcpynW
RaiseException
GetSystemTimeAsFileTime
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
GetCapture
SetScrollInfo
SetScrollPos
GetScrollInfo
ShowWindow
GetSystemMetrics
GetDlgItemInt
SetFocus
GetParent
GetWindow
SetActiveWindow
GetWindowTextW
AdjustWindowRectEx
PostMessageW
EnableWindow
GetDlgItem
SetWindowLongW
MessageBoxW
SetTimer
ReleaseDC
GetCursorPos
EndDialog
DialogBoxParamW
SetDlgItemTextW
SendDlgItemMessageW
MessageBoxA
GetClipboardData
ClientToScreen
HideCaret
DestroyCaret
CreateCaret
ShowCaret
PtInRect
GetDesktopWindow
CharUpperW
FindWindowW
MonitorFromRect
GetMonitorInfoW
GetWindowThreadProcessId
AllowSetForegroundWindow
GetLastActivePopup
ShowScrollBar
ScrollWindow
GetFocus
IsWindowEnabled
InvalidateRect
LoadImageA
SetWindowTextW
DrawTextW
SetWindowPos
MapWindowPoints
GetClientRect
GetWindowRect
GetWindowLongW
KillTimer
WindowFromPoint
GetAsyncKeyState
UpdateWindow
CallWindowProcW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SetCaretPos
DrawFrameControl
DrawEdge
InflateRect
DrawFocusRect
ChildWindowFromPoint
RegisterWindowMessageW
IsCharAlphaNumericW
ReleaseCapture
SetCapture
CharLowerW
DestroyWindow
CreateWindowExW
SendMessageW
IsClipboardFormatAvailable
IsWindowVisible
AttachThreadInput
SetCursor
LoadCursorW
GetCursor
RegisterClipboardFormatA
RedrawWindow
PostQuitMessage
IsIconic
FlashWindow
SetForegroundWindow
GetForegroundWindow
FlashWindowEx
PeekMessageW
GetMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
LoadIconW
SetDlgItemTextA
GetMenuItemInfoW
SetMenuItemInfoW
GetSystemMenu
TrackPopupMenu
GetDlgCtrlID
SetWindowRgn
DrawIconEx
CharLowerA
GetDlgItemTextA
IsDlgButtonChecked
SetDlgItemInt
CheckDlgButton
SendMessageA
CheckRadioButton
LoadStringW
GetSysColorBrush
GetDlgItemTextW
GetDC
LoadImageW
GetSysColor
ScreenToClient
gdi32
Rectangle
RoundRect
Ellipse
CreateCompatibleDC
BitBlt
DeleteDC
GetTextMetricsW
PatBlt
SetBkColor
CreateCompatibleBitmap
CreatePatternBrush
SetBrushOrgEx
SetBkMode
EnumFontFamiliesExW
CreateFontIndirectW
SetTextAlign
TextOutW
ExtTextOutW
PtInRegion
GetTextExtentPointI
CreateRectRgn
CombineRgn
GetRgnBox
RemoveFontMemResourceEx
CreateDIBSection
Polyline
PolyPolygon
CreatePolyPolygonRgn
CreatePolygonRgn
CreateEllipticRgnIndirect
ExtCreatePen
SetPolyFillMode
SetROP2
CreateDIBPatternBrushPt
AddFontMemResourceEx
SetStretchBltMode
StretchDIBits
CreatePen
SetGraphicsMode
SetMapMode
GetWorldTransform
SetWorldTransform
CreateRectRgnIndirect
GetROP2
SelectClipRgn
GdiAlphaBlend
StretchBlt
GdiTransparentBlt
PlgBlt
ExtCreateRegion
GdiGradientFill
CreateEllipticRgn
PaintRgn
FrameRgn
GetTextExtentPoint32W
GetDeviceCaps
CreateICW
GetRegionData
CreateDCW
StartDocW
EndDoc
ResetDCW
StartPage
EndPage
AbortDoc
GetTextColor
StrokeAndFillPath
BeginPath
EndPath
FillPath
PathToRegion
GetViewportOrgEx
OffsetRgn
AbortPath
StrokePath
GetStockObject
CreateSolidBrush
Polygon
GetGlyphIndicesW
SetTextColor
GetTextExtentPointW
SelectObject
GetGraphicsMode
CreateFontW
DeleteObject
winspool.drv
OpenPrinterW
ClosePrinter
DeviceCapabilitiesW
GetPrinterW
DocumentPropertiesW
EnumFormsW
GetFormW
EnumPrintersW
SetPrinterW
GetPrinterDataExW
SetPrinterDataExW
ConnectToPrinterDlg
ord203
AddPrinterW
advapi32
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegSetValueExW
RegCloseKey
RegSetValueExA
RegCreateKeyExA
GetUserNameW
shell32
SHFileOperationW
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteA
ShellExecuteW
SHChangeNotify
DragQueryFileW
SHGetFolderPathW
ole32
RegisterDragDrop
OleUninitialize
RevokeDragDrop
ReleaseStgMedium
OleInitialize
zlib1
deflate
deflateEnd
deflateInit_
crc32
inflate
inflateEnd
inflateInit2_
pecorewnd
?ActivateMenu@IStdToolbar2@@UAG_NPAVivBtn@@_N@Z
?OnLButtonUp@IStdToolbar2@@UAGXGHH@Z
?GetByHotKey@IStdToolbar@@UAGJ_WPAPAVivBtn@@@Z
?OnTimer@IStdToolbar@@UAGXI@Z
?OnCommand@IStdToolbar@@UAGJIPAUHWND__@@I@Z
?DrawItems@I2DWnd@@UAGJABUXRECT@@I@Z
?AddItem@I2DWnd@@UAGJPAVIControl2D@@@Z
?RemoveItem@I2DWnd@@UAGJPAVIControl2D@@@Z
?IsVerticalToolbar@I2DWnd@@UAG_NXZ
?GetTextOffset@I2DWnd@@UAGHXZ
?ShowBtnShadow@IStdToolbar@@UAGPAVivWnd@@PAVivBtn@@@Z
?GetNext@IStdToolbar@@UAGPAVivBtn@@PAV2@@Z
?GetPrev@IStdToolbar@@UAGPAVivBtn@@PAV2@@Z
?Select@IStdToolbar@@UAGPAVIPopupWnd@@PAVivBtn@@_N@Z
?SetHotImp@IStdToolbar@@UAGXPAVivBtn@@@Z
?GetPopupPos@IStdToolbar2@@UAGXPAVivBtn@@AAH1PAVIPopupWnd@@@Z
?Search@ivBtn@@QAGJPAVivCmd@@PAPAV1@@Z
?ls_ex2@@YIXAAVivString@@PBDPAVivLocale@@@Z
?Create@ITextParser@@SGJPAPAV1@@Z
?OnLButtonDown@IStdToolbar2@@UAGXGHH@Z
?SetHot@IStdToolbar@@QAGJPAVivBtn@@HH@Z
?OnMouseMove_captured@IStdToolbar2@@QAGXGHH@Z
?SendCommad@IStdToolbar2@@UAGXPAVivBtn@@W4CMDSOURCE@CMDINFO@@@Z
?PaintButton@IStdToolbar2@@UAGJPAVivBtn@@@Z
?ivDrawThemeTextEx@@YGPAXPAXPAUHDC__@@HHPB_WHKPAUtagRECT@@PBUpe_DTTOPTS@@@Z
?GetHint@IStdToolbar2@@UAGJHHAAUHINTDATA@@@Z
??1IStdToolbar@@UAE@XZ
??0IStdToolbar2@@QAE@H@Z
?UpdateControl@IStdToolbar@@UAGXPBVIControl2D@@I@Z
?Draw@ivCmdImg@@QBGJPAVIDC@@PAVivBtn@@HH@Z
?CommonFDlgHookProc@@YGIPAUHWND__@@IIJ@Z
?SnapToBorder@@YGXPAUHWND__@@HIH@Z
?GetDlgItemFloat_imp@@YG_NPAUHWND__@@IAANNNIPAI@Z
?FixExtension@@YGXPAUHWND__@@_NPAUtagOFNW@@@Z
?Create@IPSPDlg@@SGPAV1@XZ
?GetHint@IControl2D@@UAGJAAVivString@@@Z
?PaintHGradient2@@YGXPAVIDC@@ABUXRECT@@I@Z
??1IControl2D@@IAE@XZ
??0IControl2D@@IAE@XZ
?T@CMDINFO@@QAG_NPB_WH@Z
?ivInitXpThemes@@YG_NXZ
?Create@IButtonPopup@@SGPAV1@XZ
?Create@ivWnd@@SGPAV1@KABUpe_GUID@@PB_WKHHHHPAUHWND__@@IPAX@Z
?IsWndInChain@IWndChain@@QBG_NPAVivWnd@@@Z
?IsFocusInEditLine@@YG_NXZ
?Create@IHintWindow@@SGPAV1@PAVivWnd@@@Z
?Create@ISplitWindow@@SGPAV1@PAVivWnd@@HKK@Z
?Create@IDockFrame@@SGPAV1@PAVivWnd@@HKK@Z
?InitFonts@ivWnd@@SGXXZ
?DoneFonts@ivWnd@@SGXXZ
?Create@ivCommands@@SGPAV1@XZ
?AddSpinnerI@IDlg@@QAG_NIHH@Z
??0pePen@@QAE@PAUHDC__@@K@Z
?pe_TranslateDialog@@YGJPAUHWND__@@PAVivLocale@@@Z
?global_MenuFontV90@@3PAUHFONT__@@A
??1pePen@@QAE@XZ
??0pePen@@QAE@PAUHDC__@@IIK@Z
?LoadAPMImage@@YGJAAPAVivImage2d@@PAUHINSTANCE__@@PB_W@Z
?mg_bAppActive@ivWnd@@2IA
?HideHint@IHintWindow@@SG_NXZ
?ShowHint@IHintWindow@@SG_NHHPAUHINTDATA@@@Z
??1HINTDATA@@QAE@XZ
??0HINTDATA@@QAE@XZ
?mm_to_unit_str@@YGXNPA_WHI@Z
?pe_LeaveDialog@@YGXXZ
?pe_EnterDialog@@YGXXZ
?mm_to_units@@YGNNI@Z
?Create@IToolbar@@SGPAV1@PAVivWnd@@PB_WHKK@Z
?PaintHGradient@@YGXPAVIDC@@ABUXRECT@@I@Z
??0CMDINFO@@QAE@PAVivCmd@@W4CMDSOURCE@0@@Z
?TR1@CMDINFO@@QAGHPBD@Z
?GetWindow@ivWnd@@SIPAV1@PAUHWND__@@@Z
?ivDrawThemeBackground@@YGJPAXPAUHDC__@@HHPBUtagRECT@@2@Z
?ivDrawThemeParentBackground@@YGJPAUHWND__@@PAUHDC__@@PBUtagRECT@@@Z
?ivOpenThemeData@@YGPAXPAUHWND__@@PB_W@Z
?ivCloseThemeData@@YGJPAX@Z
?Create@IButtonTB@@SGPAV1@XZ
?GetSize@ivBtn@@UAG?AUtagSIZE@@PAVIDC@@@Z
?GetSize@IButtonPopup@@UAG?AUtagSIZE@@PAVIDC@@@Z
?Draw@IButtonPopup@@UAGJPAVIDC@@I@Z
?Create@ivCmd@@SGPAV1@XZ
??1IButtonTB@@IAE@XZ
??0IButtonTB@@IAE@XZ
?cfgUnInitialize@@YI_NXZ
?ivDoneXpThemes@@YG_NXZ
?Register@ILinkWnd@@SG_NXZ
?Register@IToolbar@@SG_NXZ
?Register@ISplitWindow@@SG_NXZ
?cfgDeleteKey@@YIXPBD@Z
?Register@IHintWindow@@SG_NXZ
?Create@ITheme@@SGPAV1@XZ
?g_theme@@3PAVITheme@@A
?cfgInitialize@@YI_NIPBD@Z
?pe_InitStringsEx@@YGJPAVivStream@@PB_WPAPAVivLocale@@I@Z
?pe_DoneStrings@@YGJXZ
?g_unitName@@3PA_WA
?g_units@@3NA
?cfgGetValueBin@@YIHPBD0PAXH@Z
?cfgGetValueBinSize@@YIHPBD0@Z
?cfgSetValueBin@@YI_NPBD0PBXH@Z
?TR2@CMDINFO@@QAGHPBD@Z
?TR3@CMDINFO@@QAGHPBD@Z
?global_DlgFont@@3PAUHFONT__@@A
?IsDialog@ivWnd@@UAG_NXZ
?OnNotify@ivWnd@@UAGJHPAUtagNMHDR@@@Z
?OnCommand@ivWnd@@UAGJIPAUHWND__@@I@Z
?DefaultWindowProc@ivWnd@@UAGJIIJ@Z
?IsTypeOf@ivWnd@@UAG_NABUpe_GUID@@@Z
?QueryInterface@ivWnd@@UAGJABUpe_GUID@@PAPAX@Z
?Register@CRegWnd@@QAGJP6GJABUpe_GUID@@PAPAX@Z@Z
??0CRegWnd@@QAE@ABUpe_GUID@@@Z
?Create@ivWnd@@SGPAV1@KABUpe_GUID@@PB_WKHHHHPAV1@IPAX@Z
??1CWait@@QAE@XZ
??0CWait@@QAE@XZ
?T@CMDINFO@@QAG_NPBD@Z
??0CMDINFO@@QAE@PAVivWnd@@PAVivBtn@@W4CMDSOURCE@0@@Z
??1peBrush@@QAE@XZ
??0peBrush@@QAE@PAUHDC__@@K@Z
?global_MenuFont@@3PAUHFONT__@@A
?WndProc@ivWnd@@UAGJIIJ@Z
?g_ColorsMng@@3PAVColorManager@@A
??1ivWnd@@MAE@XZ
??0ivWnd@@IAE@H@Z
?GetUDInfo@IDlg@@IAGPAUUpDownInfo@1@PAUHWND__@@@Z
?ivBeep@@YGXH@Z
?ivIsThemeActive@@YG_NXZ
?RestoreStdImage@ivBtn@@QAGJXZ
?SetCutsomImage@ivBtn@@QAGJPAVIImgLib@@H@Z
?Create@IImgLib@@SGPAV1@XZ
?cfgSetValue@@YI_NPBD0ABVivString@@@Z
?FileDialog@@YG_NPAUHWND__@@ABVivString@@AAV2@IPAUFILEDLGINFO@@@Z
??0FILEDLGINFO@@QAE@XZ
?g_strings@@3PAVivLocale@@A
?OnHelp@IDlg@@UAG_NXZ
?OnCancel@IDlg@@UAG_NXZ
?OnApply@IDlg@@UAG_NXZ
?Destroy@ivWnd@@UAGXXZ
?SnapToControl@@YGXPAUHWND__@@HHIH@Z
?cfgGetValueType@@YI?AW4VALUETYPE@@PBD0@Z
?ls@@YGPB_WPB_W@Z
?cfgGetValue@@YIIPBD0I@Z
?cfgGetValueF@@YINPBD0N@Z
?cfgGetValue@@YI_NPBD0AAVpoint2d@@@Z
?cfgDeleteValue@@YI_NPBD0@Z
?cfgSetValueF@@YI_NPBD0N@Z
?cfgSetValue@@YI_NPBD0ABVpoint2d@@@Z
?Draw_Text@IButtonPopup@@UAGXPAVIDC@@ABUXRECT@@@Z
??1IButtonPopup@@IAE@XZ
??0IButtonPopup@@IAE@XZ
?Snap@IDlg@@UAGXHIH@Z
?Snap@IDlg@@UAGXPAUHWND__@@IH@Z
?GetCaps@IDlg@@UAGIXZ
?Translate@IDlg@@UAGJPAVivLocale@@@Z
?SendDlgItemMessageW@IDlg@@UAGJHIIJ@Z
?Changed@IDlg@@UAGJXZ
?IsChecked@IDlg@@UAGII@Z
?GetSliderValue@IDlg@@UAGHI@Z
?SetSliderRange@IDlg@@UAG_NIHH@Z
?SetSliderValue@IDlg@@UAG_NIH@Z
?GetItemInt@IDlg@@UAG_NIAAH@Z
?GetItemInt@IDlg@@UAG_NIAAI@Z
?GetItemInt@IDlg@@UAG_NIAAHHHIPAI@Z
?SetItemInt@IDlg@@UAG_NIH@Z
?GetItemText@IDlg@@UAG_NIPA_WH@Z
?GetItemText@IDlg@@UAG_NIAAVivString@@@Z
?SetItemText@IDlg@@UAG_NIPB_W@Z
?DoModeless@IDlg@@UAG_NPAUHINSTANCE__@@PB_WPAUHWND__@@@Z
?DoModal@IDlg@@UAGHPAUHINSTANCE__@@PB_WPAUHWND__@@@Z
?EndDialog@IDlg@@UAGJH@Z
?OnDataChanged@IDlg@@UAGJXZ
?QueryInitialFocus@IDlg@@UAGXAAI@Z
?IsCursorInWindow@ivWnd@@UAG_NXZ
?CheckFocus@ivWnd@@UAGXXZ
?MSGBOX@ivWnd@@UAGIPB_W0I@Z
?OnLocalColorsChanged@ivWnd@@UAGXXZ
?OnSysColorsChanged@ivWnd@@UAGXXZ
?GetColor@ivWnd@@UAGKHI@Z
?TrackMouseLeave@ivWnd@@UAGXXZ
?PaintBackgroundEx@ivWnd@@UAGPAEPAUHDC__@@AAPAU2@AAPAUHBITMAP__@@2I@Z
?PaintBackground@ivWnd@@UAGXPAUHDC__@@@Z
?GetHint@ivWnd@@UAGJHHAAUHINTDATA@@@Z
?cfgSetValue@@YI_NPBD0PB_W@Z
?OnMouseActivate@ivWnd@@UAGJPAUHWND__@@H@Z
?OnIdle@ivWnd@@UAGJH@Z
?KillTimer@ivWnd@@UAG_NI@Z
?SetTimer@ivWnd@@UAG_NII@Z
?SetFocus@ivWnd@@UAG_NXZ
?SetPos@ivWnd@@UAG_NPAUHWND__@@HHHHH@Z
?Move@ivWnd@@UAG_NHH@Z
?SetSize@ivWnd@@UAG_NHH@Z
?SetCursor@ivWnd@@UAG_NPAUHINSTANCE__@@PB_W@Z
?Invalidate@ivWnd@@UAGXXZ
?GetText@ivWnd@@UAG_NAAVivString@@@Z
?SetText@ivWnd@@UAG_NABVivString@@@Z
?OnKeyUp@ivWnd@@UAG_NGGPBUIWndChain@@@Z
?OnKeyDown@ivWnd@@UAG_NGGPBUIWndChain@@@Z
?OnCaptureChanged@ivWnd@@UAGXPAUHWND__@@@Z
?SizeRecalc@ivWnd@@UAGXXZ
?IsZoomed@ivWnd@@UAG_NXZ
?IsCanClose@ivWnd@@UAG_NXZ
?OnNotify@IDlg@@UAGJHPAUtagNMHDR@@@Z
?OnDestroy@ivWnd@@UAGXXZ
?OnCreate@ivWnd@@UAGXPAUtagCREATESTRUCTW@@@Z
?OnSetCursor@ivWnd@@UAG_NPAUHWND__@@II@Z
?IsCommandEnabled@ivWnd@@UAG_NPAVivCmd@@@Z
?UpdateCommands@ivWnd@@UAG_NXZ
?OnCommand@ivWnd@@UAG_NAAUCMDINFO@@@Z
?cfgGetValue@@YI_NPBD0PA_WH@Z
?GetPrefIconSize@ivBtn@@UAGHXZ
?GetForPopupRect@ivBtn@@UAGXAAUXRECT@@@Z
?SetImgIndex@ivBtn@@UAGJPAVivCmdImg@@H@Z
?GetImage@ivBtn@@UAGPBVivCmdImg@@XZ
?IsDropArrow@ivBtn@@UAG_NHH@Z
?RemoveSubItems@ivBtn@@UAGXXZ
?GetHotKey@ivBtn@@UAG_WXZ
?OnThemeChanged@ivBtn@@UAGXXZ
?OnWindowSize@ivBtn@@UAGXXZ
?OnCommand@ivBtn@@UAGJIPAUHWND__@@I@Z
?GetTextColor@ivBtn@@UAGIXZ
?Search@ivBtn@@UAGJPB_WPAPAV1@@Z
?Search@ivBtn@@UAGJPBDPAPAV1@@Z
?Remove@ivBtn@@UAGJPAV1@@Z
?Remove@ivBtn@@UAGJPB_W@Z
?Remove@ivBtn@@UAGJPBD@Z
?SetText@ivBtn@@UAGJABVivString@@@Z
?CorrectRect@ivBtn@@UAGXXZ
?PaintBk@ivBtn@@UAG_NPAVIDC@@PAVIPopupWnd@@_N@Z
?IsPopup@ivBtn@@UAG_NXZ
?HitTest@ivBtn@@UAGPAV1@HH@Z
?Track@ivBtn@@UAGPAV1@PAVivWnd@@HHI@Z
?HandleEvent@ivBtn@@UAGIPAVI2DWnd@@HHHI@Z
?OnClick@ivBtn@@UAGIHHI@Z
?MakeSubItems@ivBtn@@UAGJPAVIStdToolbar@@@Z
?ClearHot@ivBtn@@UAGJ_N@Z
?SetState@ivBtn@@UAGJII@Z
?Insert@ivBtn@@UAGJPAVivCmd@@PAPAV1@@Z
?Insert@ivBtn@@UAGJPAV1@@Z
?Arrange@ivBtn@@UAGJPAVIDC@@AAUtagSIZE@@PAVIPopupWnd@@@Z
?GetHint@ivBtn@@UAGJAAVivString@@@Z
?QueryInterface@ivBtn@@UAGJABUpe_GUID@@PAPAX@Z
??1ivBtn@@IAE@XZ
??0ivBtn@@IAE@XZ
?global_BoldFont@@3PAUHFONT__@@A
?ls@@YGPB_WHPB_W@Z
?g_unicode@ivWnd@@2HA
?cfgGetValue@@YI_NPBD0AAVivString@@@Z
?cfgGetValue_AU@@YI_NPBD0PADH@Z
?cfgSetValue@@YI_NPBD00@Z
?cfgSetValue_AU@@YI_NPBD00@Z
?OnTimer@ivWnd@@UAGXI@Z
?OnMouseLeave@ivWnd@@UAGXXZ
?OnMouseHWheel@ivWnd@@UAGXGHHH@Z
?OnMouseWheel@ivWnd@@UAGXGHHH@Z
?OnMouseMove@ivWnd@@UAGXGHH@Z
?OnMButtonUp@ivWnd@@UAGXGHH@Z
?OnMButtonDown@ivWnd@@UAGXGHH@Z
?OnRButtonUp@ivWnd@@UAGXGHH@Z
?OnRButtonDown@ivWnd@@UAGXGHH@Z
?OnRButtonDblClk@ivWnd@@UAGXGHH@Z
?OnLButtonUp@ivWnd@@UAGXGHH@Z
?OnLButtonDown@ivWnd@@UAGXGHH@Z
?OnLButtonDblClk@ivWnd@@UAGXGHH@Z
?OnPaint@ivWnd@@UAGXPAUHDC__@@ABUXRECT@@@Z
?DefaultWindowProc@IDlg@@UAGJIIJ@Z
?IsTypeOf@IDlg@@UAG_NABUpe_GUID@@@Z
?QueryInterface@IDlg@@UAGJABUpe_GUID@@PAPAX@Z
?WndProc@IDlg@@UAGJIIJ@Z
?OnSize@ivWnd@@UAGXGHH@Z
?OnCommand@IDlg@@UAGJIPAUHWND__@@I@Z
?GetItemFloat@IDlg@@UAG_NIAANNNIPAI@Z
?Check@IDlg@@UAG_NII@Z
?SetItemFloat@IDlg@@UAG_NINI@Z
?ShowItem@IDlg@@UAG_NI_N@Z
?AddSpinnerF@IDlg@@QAG_NINNNI@Z
?EnableItem@IDlg@@UAG_NI_N@Z
?GetDefSpinUnit@@YGNXZ
?GetItemRect@IDlg@@UAG_NIAAUXRECT@@@Z
?GetDlgItem@IDlg@@UAGPAUHWND__@@I@Z
?OnInitDialog@IDlg@@UAG_NXZ
??1IDlg@@UAE@XZ
??0IDlg@@QAE@XZ
?cfgSetValue@@YI_NPBD0I@Z
?cfgGetValue@@YI_NPBD0PADH@Z
?Register@IDockFrame@@SG_NXZ
?IsDialog@IDlg@@UAG_NXZ
pecore
?Get@pe_value@@QBGIPAXI@Z
?Rotate@matrix2d@@QAGXN@Z
?Get@pe_value@@QBG_NAAG@Z
?GetI@pe_value@@QBGPAVivUnknown@@XZ
?Init@pe_value@@QAGXG@Z
?Init@pe_value@@QAGXPAVivUnknown@@@Z
?Get@pe_value@@QBG_NAAVpoint2d@@@Z
?Init@pe_value@@QAGXABVpoint2d@@_N@Z
?AtDelete@ivString@@QAG_NII@Z
?Find@ivString@@QBGIPB_W@Z
?Done@pe_value@@QAGXXZ
?GetDataPtr@pe_value@@QBGIPAPAX@Z
?Init@pe_value@@QAGXPBXI_N@Z
?wtoa@@YGXPB_WPADI@Z
?IsInRect@XRECT@@QAG_NABUtagPOINT@@@Z
?Cut@ivString@@QAG_NII@Z
?Find@ivString@@QBGIPBD@Z
?CreateTemp@ivFileStream@@SGJPAPAVivStream@@@Z
??0ivString@@QAE@PAUHWND__@@@Z
?Add@XRECT@@QAGXABU1@@Z
?GetDirLen@@YGIPB_W@Z
?strncmp@pe@@YGHPBD0I@Z
?AtInsert@ivString@@QAG_NIPB_W@Z
?FileShortName@ivString@@QBG?AV1@XZ
?Terminate@ivString@@QAGXI@Z
??0ivListEx@@QAE@XZ
??1ivListEx@@QAE@XZ
?Init@pe_value@@QAGXE@Z
?Get@pe_value@@QBG_NAAE@Z
?Compare@pe_value@@QBG_NABV1@@Z
?Init@pe_value@@QAGX_N@Z
?GetAt@ivString@@QBG_WI@Z
?MakeUpper@ivString@@QAGXXZ
?Init@pe_value@@QAGXM@Z
?RFind@ivString@@QBGIPB_W@Z
??0XRECT@@QAE@PBVpoint2d@@@Z
?ivstrcat@@YGIPA_WIPB_W@Z
?Scale@matrix2d@@QAGXABVpoint2d@@@Z
?OffsetTo@matrix2d@@QAGXABVpoint2d@@@Z
?Get@pe_value@@QBG_NAA_N@Z
?GetFullName@pe_FileFind@@QAG?AVivString@@XZ
?Left@ivString@@QBG?AV1@I@Z
?GetNext@pe_FileFind@@QAG_NXZ
??1pe_FileFind@@QAE@XZ
??0pe_FileFind@@QAE@ABVivString@@0I@Z
??0ivString@@QAE@_W@Z
?GetInt@ivString@@QAGHXZ
?PointTransform@matrix2d@@QBG?AVpoint2d@@ABV2@@Z
?Transform@matrix2d@@QAGXABU1@@Z
?RectTransform@matrix2d@@QBG?AU_RECTL@@ABU2@@Z
?PointTransform@matrix2d@@QBG?AUtagPOINT@@ABUpoint2dfix@@@Z
?CopyStream@@YGJPAVivStream@@0HH@Z
??1ivLocker@@QAE@XZ
??0ivLocker@@QAE@AAVivLock@@@Z
??0ivString@@QAE@PB_WI@Z
?_Add@rect2d@@QAGXABVpoint2d@@@Z
??4rect2d@@QAGAAV0@AAU_RECTL@@@Z
?Get@pe_value@@QBGIPA_WI@Z
?Init@pe_value@@QAGXPB_WI@Z
?Compare@matrix2d@@QBG_NABU1@N@Z
?GetPixelSize@@YGHW4IMG_FORMAT@@AAG@Z
?WriteStringAsUTF8@ivStream@@UAGJPB_W_N@Z
?Read@ivStream@@UAGJAAVivString@@@Z
?peIsFolder@@YG_NABVivString@@@Z
?toString@pe_GUID@@QBGXPA_W@Z
?Create@pe_Core@@SGPAV1@XZ
?FilePath@ivString@@QBG?AV1@XZ
?purecall@pe@@YGHXZ
?ivFree@@YGXPAX@Z
?ivAlloc@@YGPAXI@Z
?MakeLower@ivString@@QAGXXZ
?atow@@YGXPBDPA_WI@Z
?pe_DetectFileType@@YGJPAVivStream@@AAUpe_GUID@@@Z
?Get@pe_value@@QBG_NAAI@Z
?Create@pe_ValueSet@@SGPAV1@XZ
?Create@IAlloc@@SGPAV1@H@Z
?PrepareForRedo@pe_UndoItem@@UAGJXZ
?GetSize@pe_UndoItem@@UAGHXZ
?GetName@pe_UndoItem@@UAGPB_WXZ
?QueryInterface@pe_UndoItem@@UAGJABUpe_GUID@@PAPAX@Z
??1pe_UndoItem@@UAE@XZ
??0pe_UndoItem@@QAE@XZ
?WideToUTF8String@@YGIPB_WPADH@Z
?UTF8ToWideString@@YGIPBDPA_WH@Z
?Get@pe_value@@QBG_NAAH@Z
?Create@ivMemStream@@SGJPAPAVivStream@@@Z
?Invert@matrix2d@@QAGXXZ
?PointTransform@matrix2d@@QBGXPAVpoint2d@@H@Z
?SetRotate@matrix2d@@QAGXN@Z
?VectorTransform@matrix2d@@QBG?AVpoint2d@@ABV2@@Z
?EndRead@ivRWLock@@QAGXXZ
?EndWrite@ivRWLock@@QAGXXZ
?StartRead@ivRWLock@@QAGXXZ
?StartWrite@ivRWLock@@QAGXXZ
??1ivRWLock@@QAE@XZ
??0ivRWLock@@QAE@XZ
?Intersect@rect2d@@QBG_NABV1@@Z
?Contains@rect2d@@QBG_NABV1@@Z
?Get@rect2d@@QBGXAAU_RECTL@@@Z
?Clip@rect2d@@QBG_NAAV1@@Z
??0matrix2d@@QAE@ABU0@@Z
?Get@pe_value@@QAG_NAAVivString@@@Z
?Get@pe_value@@QBG_NAAN@Z
?Init@pe_value@@QAGXABVivString@@_N@Z
?Init@pe_value@@QAGXI@Z
?NormalizeRect@@YGXAAVpoint2d@@0@Z
?peIsFileExist@@YG_NABVivString@@@Z
?Normalize@XRECT@@QAGXXZ
?Clip@XRECT@@QBG_NAAU1@@Z
?Offset@matrix2d@@QAGXABVpoint2d@@@Z
?SetScale@matrix2d@@QAGXABVpoint2d@@@Z
?SetIdentity@matrix2d@@QAGXXZ
?AllTrim@@YGXPA_W@Z
?IsInRect@XRECT@@QAG_NHH@Z
?Get@ivString@@QBGXPA_WI@Z
?printf_add@ivString@@QAAXPB_WZZ
??8ivString@@QBG_NPB_W@Z
?Compare@ivString@@QBGHABV1@@Z
??YivString@@QAGABV0@ABV0@@Z
?Find@ivString@@QBGI_W@Z
?LoadImageFromFile@@YGPAVivImage2d@@PB_W@Z
?GetCore@pe_Core@@SGPAV1@XZ
?printf@ivString@@QAAXPB_WZZ
?CreateInterface@@YGJABUpe_GUID@@PAPAX@Z
?Create@ivMemStream@@SGJPAUHINSTANCE__@@PB_W1PAPAVivStream@@@Z
??8ivString@@QBG_NPBD@Z
?Get@ivString@@QBGXPADI@Z
?peMakeFolderEx@@YGJABVivString@@@Z
?peprintf@@YAHPA_WIPB_WZZ
??YivString@@QAGABV0@PB_W@Z
?Load@pe_Streamable@@UAGJPAVpe_Load@@PAVivContext@@@Z
?Save@pe_Streamable@@UAGJPAVpe_Save@@PAVivContext@@@Z
?Init@pe_value@@QAGXH@Z
?Init@pe_value@@QAGXN@Z
?Get@pe_value@@QBG_NAAM@Z
??1pe_value@@QAE@XZ
?Create@IDC@@SGPAV1@XZ
?Create@ivImage2d@@SGPAV1@XZ
?CreateEx@ivList@@SGPAV1@P6GXPAX@Z@Z
??9ivString@@QBG_NABV0@@Z
?Create@pe_Save@@SGPAV1@XZ
?Create@pe_Load@@SGPAV1@XZ
?ivCreateBufferedStream@@YGJPAVivStream@@PAPAV1@@Z
?Create@ivFileStream@@SGJABVivString@@IPAPAVivStream@@@Z
?Load@ivString@@QAG_NPAVpe_Load@@@Z
??YivString@@QAGABV0@PBD@Z
?TerminatePath@ivString@@QAGXXZ
?Create@ivSortedList@@SGPAV1@P6GHPBX00@ZPAX@Z
?CompareNoCase@ivString@@QBGHABV1@@Z
?Save@ivString@@QBGXPAVpe_Save@@H@Z
?Create@ivList@@SGPAV1@XZ
?GetBuffer@ivString@@QAGPA_WXZ
?Realloc@ivString@@QAG_NI@Z
?_Add@rect2d@@QAGXABV1@@Z
?Empty@rect2d@@QAGXXZ
??0ivString@@QAE@PB_W@Z
?GetBuffer@ivString@@QBGPB_WXZ
??4ivString@@QAGABV0@PB_W@Z
??0ivString@@QAE@ABV0@@Z
??8ivString@@QBG_NABV0@@Z
?Create@ivListEx@@SGPAV1@XZ
?Empty@ivString@@QAGXXZ
?SetValue@ivUnknown@@UAGJIAAVpe_value@@@Z
?GetValue@ivUnknown@@UAGJIAAVpe_value@@@Z
?RegisterInterface@@YGJPAVpe_CLASSINFO@@@Z
?Offset@XRECT@@QAGXHH@Z
?BlendColor@@YGIIIM@Z
?Inflate@XRECT@@QAGXHH@Z
?AddRef@ivUnknown@@UAGIXZ
?QueryInterface@ivUnknown@@UAGJABUpe_GUID@@PAPAX@Z
??1pe_CLASSINFO@@QAE@XZ
??0pe_CLASSINFO@@QAE@XZ
?Leave@ivLock@@QAGXXZ
?Enter@ivLock@@QAGXXZ
?IsTypeOf@ivUnknown@@UAG_NABUpe_GUID@@@Z
?Release@ivUnknown@@UAGIXZ
??1ivLock@@QAE@XZ
??0ivLock@@QAE@XZ
??0ivUnknown@@QAE@XZ
?peprintf@@YAHPADIPBDZZ
?Trim@ivString@@QAGXXZ
?GetCStr@ivString@@QBGPB_WXZ
??1ivString@@QAE@XZ
??0ivString@@QAE@PBD@Z
??4ivString@@QAGABV0@ABV0@@Z
?AllTrim@@YGXPAD@Z
msvcr100
rand
memset
strlen
strcat
atol
strcpy
wcschr
swscanf
wcslen
_wcsicmp
_itoa
strcmp
memcpy
strchr
wcscpy
_wcsnicmp
cos
sin
abs
atof
wcscat
_wtof
fabs
_itow
memcmp
wcscmp
_wtoi
wcsrchr
labs
memmove
sqrt
floor
ceil
wcsncpy
atan
acos
asin
wcsstr
_wtol
_stricmp
_except_handler3
sscanf
tan
wcsncmp
_unlock
__dllonexit
_lock
_onexit
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
_except_handler4_common
?terminate@@YAXXZ
_invoke_watson
_controlfp_s
_crt_debugger_hook
strncpy
Exports
Exports
Sections
.BRD Size: - Virtual size: 638KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.BRD Size: - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.BRD Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BRD Size: - Virtual size: 627KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.BRD Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BRD Size: 656KB - Virtual size: 656KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BRD Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.BRD Size: 112KB - Virtual size: 519KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ