C:\c2_900\DYNOUT2.pdb
Static task
static1
Behavioral task
behavioral1
Sample
962a82f32cd0475755a8805dad11814f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
962a82f32cd0475755a8805dad11814f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
962a82f32cd0475755a8805dad11814f_JaffaCakes118
-
Size
8.1MB
-
MD5
962a82f32cd0475755a8805dad11814f
-
SHA1
0136578e1b81450a325ab9bbaa2e5c57b1c40176
-
SHA256
174c7af556d4a47f08d302b52d5227c472f4ac359e6bb0eaeaf167b6271452c4
-
SHA512
ace637332f5fea82d11cd4e054d352e06b46044c8b2563defcda5fd0da5372334dc19684076e414297053f9aaa07b0612a15323c6d796a08ea3f24d57964fb26
-
SSDEEP
98304:ZVLRUL36UU6huvhdNTDDsZf7iQplKIhDXeEQ3JRLUqchWfQeYj/dtn40DkaeZze:XRUL36Uxehjw7iQpfh7el3DTchWGnY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 962a82f32cd0475755a8805dad11814f_JaffaCakes118
Files
-
962a82f32cd0475755a8805dad11814f_JaffaCakes118.exe windows:6 windows x86 arch:x86
0eebdf6abea06b5e1ea77244097fbd89
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
c2zip
ord4
ord3
outword
?CreateNewReport@CWordMan@@QAEHHPB_W0PAPB_WH@Z
?AddText@CWordMan@@QAEHPB_W@Z
??0CUserFont@@QAE@XZ
??1CUserFont@@UAE@XZ
?GetFaceName@CUserFont@@QAEPB_WXZ
?SetFaceName@CUserFont@@QAEXPB_W@Z
?GetPointSize@CUserFont@@QAEMXZ
?SetPointSize@CUserFont@@QAEXM@Z
?IsBold@CUserFont@@QAEHXZ
?SetBold@CUserFont@@QAEXH@Z
?IsItalic@CUserFont@@QAEHXZ
?SetItalic@CUserFont@@QAEXH@Z
??0CWordMan@@QAE@XZ
??1CWordMan@@QAE@XZ
?SetHeaderFont@CWordMan@@QAEHPAVCUserFont@@@Z
?SetUserFont@CWordMan@@QAEHPAVCUserFont@@@Z
?Cleanup@CWordMan@@QAEHXZ
?RemoveTOC@CWordMan@@QAEHXZ
?InsertTOC@CWordMan@@QAEHXZ
?Quit@CWordMan@@QAEHXZ
?StartWord@CWordMan@@QAEHJ@Z
?SetupEnvironment@CWordMan@@QAEXPADH0H@Z
?IsWordAppActive@CWordMan@@QAEHXZ
?AddTextToHeader@CWordMan@@QAEHPB_WH@Z
coade85
ord5
shlwapi
PathCanonicalizeW
PathRemoveFileSpecW
PathAddExtensionW
PathAppendW
PathCompactPathW
PathAddBackslashW
PathRemoveExtensionW
PathFileExistsW
PathIsNetworkPathW
msvcr110
vsprintf_s
_amsg_exit
__crtGetShowWindowMode
_XcptFilter
_ismbcspace
_sys_nerr
_sys_errlist
_mbsnbcat
_wgetenv
longjmp
_setjmp3
_mbsnbcpy
strcspn
_wunlink
_wrmdir
_findclose
_libm_sse2_sqrt_precise
sprintf_s
_itoa
_wassert
vsprintf
realloc
__iob_func
_wcsnset
_itow
iswspace
iswlower
_wcslwr
localeconv
swscanf
wcsrchr
wcsncmp
wcscspn
iswprint
towlower
towupper
iswalnum
wcstok
_wcsnicmp
wcstod
iswdigit
strtok_s
_wcsicoll
wcscoll
wcsspn
_wcsdup
_wtol
wcstoul
wcschr
_wsetlocale
bsearch
labs
abs
_getpid
_strdup
fputc
fgetpos
fgetc
fflush
memcmp
__RTDynamicCast
strcat
strncat_s
log10
atoi
atof
srand
_chsize
isalpha
fseek
_wmkdir
strspn
strchr
_gmtime64
strncmp
isdigit
isprint
isxdigit
_vsnprintf
rand
_wrename
exit
_errno
strtok
_wremove
_snprintf
toupper
_beginthreadex
strncat
strtoul
strftime
printf
_wopen
_time64
qsort
wcsftime
wcstok_s
fwrite
_waccess
_wcsupr_s
_CxxThrowException
memmove
_wsplitpath_s
_wtoi
_wtof
vswprintf_s
wcscmp
fabs
_localtime64_s
memcpy
strncpy_s
??_V@YAXPAX@Z
fread
fclose
_wfopen
memset
memcpy_s
_purecall
strcpy_s
_read
_lseek
_close
_access
?_wopen@@YAHPB_WHH@Z
wcsncpy
wcscpy
??2@YAPAXI@Z
_swprintf
??_U@YAPAXI@Z
wcsncpy_s
wcslen
__CxxFrameHandler3
_recalloc
free
calloc
sprintf
wcscpy_s
wcscat_s
strncpy
strlen
strcpy
??3@YAXPAX@Z
fsetpos
_fseeki64
setvbuf
ungetc
_lock_file
_unlock_file
getenv
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
tolower
strstr
sscanf_s
_difftime64
_mktime64
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
wcsstr
isspace
_write
strerror
malloc
abort
ftell
_exit
_atoi64
atol
_localtime64
strcmp
sqrt
swprintf_s
_wcsicmp
wcscat
__wgetmainargs
__set_app_type
_cexit
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
_wcmdln
_fmode
_commode
??1type_info@@UAE@XZ
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
?terminate@@YAXXZ
_except_handler4_common
_time32
_mktime32
_wfindnext32
_wfindfirst32
_wstat32
__crtSetUnhandledExceptionFilter
_invoke_watson
_controlfp_s
iswalpha
wcsnlen
wtsapi32
WTSQuerySessionInformationA
WTSFreeMemory
c2utils
_LOAD_UNIT@280
c2graphics
?EndLongOperation@CCaesarDB@@UAEIPB_WH@Z
??1CCaesarDB@@UAE@XZ
?GetRecordsCount@CCaesarDB@@UAEHPA_W@Z
?OpenDB@CCaesarDB@@UAEHPB_W@Z
?ExecuteQuery@CCaesarDB@@UAEHPA_W@Z
??0CCaesarDB@@QAE@XZ
?DeleteAllFromTable@CCaesarDB@@UAEHPA_W@Z
?BeginLongOperation@CCaesarDB@@UAEIPB_W@Z
sqlite_3081001_vc11
sqlite3_column_text16
sqlite3_step
sqlite3_column_count
sqlite3_prepare16_v2
sqlite3_errmsg
sqlite3_finalize
mfc110u
ord2164
ord9318
ord12625
ord8609
ord1126
ord6419
ord6985
ord7506
ord11230
ord9227
ord281
ord12860
ord8670
ord7229
ord1451
ord978
ord1438
ord13449
ord962
ord4035
ord508
ord7357
ord10221
ord11472
ord9025
ord9273
ord9152
ord10247
ord11333
ord11919
ord9087
ord11940
ord4526
ord3785
ord5245
ord11633
ord11638
ord9063
ord8054
ord9120
ord9202
ord8684
ord5826
ord4434
ord2503
ord5809
ord13528
ord5810
ord13530
ord13521
ord5805
ord1739
ord12294
ord6001
ord4916
ord13055
ord4915
ord3585
ord3119
ord6998
ord3775
ord11471
ord10228
ord5832
ord4438
ord2508
ord2935
ord2152
ord14148
ord5855
ord8983
ord4166
ord7909
ord13477
ord6459
ord3758
ord14185
ord4424
ord3739
ord1681
ord2404
ord2941
ord8027
ord12753
ord4956
ord13365
ord7667
ord6817
ord8205
ord12754
ord14235
ord14241
ord12717
ord5793
ord1521
ord1040
ord311
ord301
ord310
ord300
ord305
ord316
ord2955
ord5756
ord4797
ord1656
ord8979
ord1063
ord3814
ord2938
ord8597
ord4163
ord3092
ord6367
ord3636
ord1173
ord7356
ord6090
ord13575
ord8764
ord8772
ord12014
ord3118
ord9378
ord10349
ord1142
ord510
ord6997
ord5256
ord5833
ord8890
ord10859
ord6369
ord2251
ord11122
ord11119
ord7634
ord10962
ord2626
ord9995
ord9994
ord11926
ord11961
ord9076
ord6738
ord9893
ord11584
ord9376
ord9836
ord9831
ord9364
ord9374
ord9359
ord8150
ord4071
ord4047
ord1172
ord2699
ord14393
ord3816
ord2939
ord8598
ord4165
ord3134
ord6458
ord8986
ord1437
ord4177
ord3202
ord6700
ord4908
ord4909
ord4912
ord4910
ord4911
ord6171
ord3806
ord3548
ord6429
ord3824
ord2468
ord6436
ord1440
ord967
ord4602
ord1683
ord9072
ord10568
ord12843
ord8265
ord5137
ord6019
ord9048
ord11113
ord10871
ord10823
ord10277
ord4080
ord11932
ord3802
ord1364
ord13654
ord11363
ord6212
ord14348
ord12520
ord1853
ord6062
ord6815
ord5624
ord845
ord7199
ord7353
ord9824
ord11581
ord9213
ord10984
ord10983
ord10096
ord5244
ord5253
ord14332
ord4029
ord2664
ord9334
ord4642
ord12492
ord12252
ord2504
ord13173
ord2789
ord7507
ord8239
ord11096
ord12408
ord5453
ord12618
ord8932
ord6070
ord5485
ord2804
ord12716
ord1517
ord4999
ord2329
ord2154
ord2254
ord6186
ord4034
ord1136
ord500
ord6096
ord2250
ord947
ord13216
ord8314
ord7505
ord1463
ord8230
ord12085
ord10278
ord12760
ord12697
ord4528
ord8169
ord5233
ord9996
ord9992
ord9989
ord2432
ord12375
ord12374
ord14409
ord7770
ord14415
ord9248
ord4093
ord4031
ord12779
ord4120
ord4150
ord4192
ord4226
ord4196
ord3784
ord8184
ord12291
ord8017
ord3880
ord12009
ord11936
ord11916
ord14398
ord13802
ord6714
ord3206
ord3312
ord5713
ord2596
ord2572
ord11554
ord11614
ord8843
ord4882
ord7496
ord12392
ord293
ord14230
ord14498
ord11810
ord483
ord5275
ord13102
ord8320
ord6681
ord3187
ord5768
ord13765
ord5247
ord6764
ord13259
ord13768
ord8206
ord8207
ord4054
ord2597
ord10273
ord5198
ord14418
ord8208
ord1415
ord8982
ord14420
ord7789
ord12084
ord1124
ord1467
ord2156
ord11865
ord1985
ord11821
ord11820
ord1817
ord14287
ord12364
ord7847
ord14487
ord6218
ord14489
ord6220
ord14488
ord6219
ord12369
ord13732
ord4388
ord8306
ord989
ord6723
ord1065
ord365
ord3794
ord5789
ord12077
ord8062
ord12089
ord12057
ord13958
ord5638
ord10095
ord2194
ord3619
ord14141
ord4921
ord8204
ord14232
ord4603
ord1514
ord4991
ord4264
ord900
ord4820
ord1135
ord2355
ord2336
ord2332
ord2330
ord817
ord13783
ord13075
ord1839
ord8349
ord1646
ord1503
ord1505
ord5216
ord2337
ord14242
ord13113
ord8664
ord8209
ord2128
ord2324
ord7183
ord4736
ord12253
ord4555
ord922
ord13076
ord1403
ord1449
ord13782
ord7890
ord12471
ord7237
ord923
ord1959
ord12444
ord12475
ord1404
ord6359
ord357
ord12917
ord12919
ord361
ord1061
ord997
ord1468
ord1345
ord6671
ord12511
ord818
ord1346
ord550
ord12428
ord6046
ord1175
ord555
ord1180
ord6661
ord1957
ord6933
ord7288
ord7992
ord892
ord6356
ord2466
ord449
ord12918
ord13109
ord13868
ord5091
ord12894
ord4510
ord7947
ord1101
ord12902
ord14311
ord4821
ord13074
ord12474
ord6744
ord6746
ord13757
ord13758
ord12875
ord13756
ord6742
ord551
ord8350
ord1647
ord12524
ord1176
ord884
ord1382
ord7294
ord2480
ord5295
ord11743
ord2172
ord6076
ord13784
ord12523
ord2297
ord2289
ord2359
ord12182
ord14424
ord14485
ord1678
ord8610
ord6052
ord6751
ord4946
ord556
ord8355
ord1652
ord12434
ord1181
ord553
ord8352
kernel32
GetCurrentProcess
OpenProcess
CreateFileW
lstrcmpiW
FindNextFileW
FindFirstFileW
RemoveDirectoryW
CreateDirectoryW
CreateMutexW
lstrcpyW
GetSystemTimeAsFileTime
FindClose
ReleaseMutex
SleepEx
CreateNamedPipeW
GetTempPathW
PeekNamedPipe
DisconnectNamedPipe
ConnectNamedPipe
CloseHandle
FlushFileBuffers
ReadFile
WriteFile
GetExitCodeThread
TerminateThread
CreateThread
GlobalUnlock
GetCurrentProcessId
FreeLibrary
MulDiv
GlobalFree
DeleteFileW
GetTempFileNameW
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
FreeResource
GetModuleHandleW
GetProcAddress
MultiByteToWideChar
GetLastError
GetModuleFileNameW
LocalFree
DebugBreak
FormatMessageW
GetFullPathNameW
GetFileSize
GetFileTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
CreateEventA
GetModuleHandleA
GetSystemInfo
DefineDosDeviceA
GetLocalTime
OpenMutexA
InitializeCriticalSection
SwitchToFiber
SearchPathA
GetWindowsDirectoryA
GetProcessTimes
DeleteCriticalSection
CreateFileMappingA
GetLocaleInfoW
GetPrivateProfileStringW
WritePrivateProfileStringW
SetProcessWorkingSetSize
GlobalSize
GetNumberFormatW
GetThreadLocale
LoadResource
LockResource
SizeofResource
FindResourceW
GetUserDefaultLCID
lstrlenW
VirtualAlloc
FindResourceA
CreateProcessW
TlsGetValue
TlsAlloc
FindNextFileA
CreateMutexA
HeapReAlloc
LocalAlloc
GetCurrentThreadId
FormatMessageA
DeleteFiber
WaitForSingleObject
LeaveCriticalSection
SetThreadPriority
OpenSemaphoreA
SetFileAttributesW
SystemTimeToFileTime
FileTimeToSystemTime
GetVersionExA
GetProcessHeap
SetEndOfFile
HeapAlloc
EnterCriticalSection
CreateFiber
GetComputerNameW
CreateSemaphoreA
QueryPerformanceCounter
GetTickCount
InterlockedCompareExchange
QueryPerformanceFrequency
OutputDebugStringA
ResumeThread
ReleaseSemaphore
SetErrorMode
FindFirstFileA
GetVolumeInformationA
SetFilePointer
SwitchToThread
GetModuleFileNameA
CreateFileA
TlsSetValue
GetEnvironmentVariableA
DeviceIoControl
LoadLibraryA
GetFileInformationByHandle
ConvertThreadToFiber
QueryDosDeviceA
HeapFree
GetVersion
SetEvent
GetSystemTime
Sleep
CreatePipe
GetComputerNameA
GetUserDefaultLangID
LoadLibraryExA
lstrcatA
lstrlenA
lstrcpyA
GlobalLock
GlobalAlloc
GetFileAttributesA
ExpandEnvironmentStringsA
CreateProcessA
GetComputerNameExA
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryW
user32
GetDC
GetClientRect
LoadMenuW
DestroyMenu
GetSubMenu
TrackPopupMenuEx
RedrawWindow
MapWindowPoints
GetSystemMetrics
GetWindowRect
GetKeyboardState
MessageBeep
ReleaseDC
OffsetRect
GetWindow
LoadIconW
ShowScrollBar
RegisterWindowMessageW
GetTopWindow
LoadCursorA
SetCursor
ShowCursor
MessageBoxA
wsprintfW
IsCharAlphaNumericW
LoadStringA
IsWindowVisible
DrawFocusRect
DrawEdge
GetSysColor
PtInRect
GetClassInfoW
SetRect
CopyRect
LoadCursorW
PeekMessageW
IsWindow
IsChild
IsZoomed
SetFocus
GetCapture
SetCapture
ReleaseCapture
UpdateWindow
InvalidateRect
ValidateRect
FillRect
InvertRect
IntersectRect
IsRectEmpty
GetKeyState
DestroyCursor
SetTimer
CallWindowProcW
RegisterClassW
UnregisterClassW
GetDlgCtrlID
SetWindowLongW
DefWindowProcW
IsIconic
RegisterClipboardFormatW
GetMenuStringW
SetRectEmpty
EqualRect
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
GetOpenClipboardWindow
KillTimer
GetCursorPos
ScreenToClient
LoadBitmapW
HideCaret
ShowCaret
SubtractRect
GetClassNameW
TranslateMessage
DispatchMessageW
CreateWindowExW
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
EnableScrollBar
InflateRect
ClientToScreen
GetWindowPlacement
SystemParametersInfoA
AdjustWindowRectEx
SetWindowPos
CreatePopupMenu
AppendMenuW
CreateCaret
DestroyCaret
SetCaretPos
GetSysColorBrush
GetDialogBaseUnits
CharLowerW
DrawTextW
GetDCEx
GetWindowLongA
ShowWindow
GetSystemMenu
EnableMenuItem
SetWindowLongA
EndDialog
DestroyWindow
DialogBoxParamA
CreateDialogParamA
GetDlgItem
IsDialogMessageA
SendMessageA
DrawTextExW
GrayStringW
TabbedTextOutW
TranslateAcceleratorW
GetActiveWindow
MessageBoxW
BringWindowToTop
GetFocus
EnableWindow
GetDesktopWindow
IsWindowEnabled
SetActiveWindow
PostMessageW
SendMessageW
FindWindowW
PostQuitMessage
LoadAcceleratorsW
GetParent
GetNextDlgTabItem
gdi32
SelectObject
GetMapMode
GetViewportExtEx
SetBrushOrgEx
CreatePolygonRgn
GetWindowExtEx
CreateBitmap
FrameRgn
FillRgn
CreateSolidBrush
Ellipse
BitBlt
DeleteObject
DPtoLP
ExtCreatePen
CreatePenIndirect
CreateFontIndirectW
CreateBrushIndirect
StretchBlt
CreatePen
CreateCompatibleDC
CreateCompatibleBitmap
SetWindowExtEx
SetViewportExtEx
SetMapMode
StretchDIBits
GetTextColor
GetObjectW
GetStockObject
EnumFontFamiliesW
EnumFontFamiliesExW
CreateICW
GetTextExtentPoint32W
GetTextAlign
LPtoDP
TextOutW
PtVisible
GetWindowOrgEx
GetViewportOrgEx
Escape
GetTextExtentPointW
RectVisible
ExtTextOutW
Rectangle
PatBlt
Polygon
SetPixel
CreateRectRgn
GetBkColor
DeleteDC
CreateFontW
EndPage
StartPage
EndDoc
StartDocW
GetTextMetricsW
GetDeviceCaps
advapi32
RegCloseKey
CryptAcquireContextW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyW
RegCreateKeyW
RegFlushKey
RegEnumKeyW
RegQueryInfoKeyW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
GetUserNameA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyW
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
shell32
SHGetFolderPathW
ole32
StringFromIID
CoSetProxyBlanket
CoCreateInstance
StringFromGUID2
CoCreateGuid
CoTaskMemFree
oleaut32
VariantChangeType
VariantClear
VariantInit
SysFreeString
SysAllocStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocString
GetErrorInfo
VarUdateFromDate
VarBstrFromDate
VarDateFromStr
VarR8FromStr
msvcp110
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?fail@ios_base@std@@QBE_NXZ
??7ios_base@std@@QBE_NXZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?is@?$ctype@D@std@@QBE_NFD@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
?_BADOFF@std@@3_JB
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Add_vtordisp2@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
?_Add_vtordisp1@?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Add_vtordisp1@?$basic_istream@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WXZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W0@Z
?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?width@ios_base@std@@QAE_J_J@Z
?width@ios_base@std@@QBE_JXZ
?flags@ios_base@std@@QBEHXZ
?good@ios_base@std@@QBE_NXZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??Bid@locale@std@@QAEIXZ
?uncaught_exception@std@@YA_NXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
??0id@locale@std@@QAE@I@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
?ignore@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
toolkitpro1640vc110u
?GetCommandBars@?$CXTPCommandBarsSiteBase@VCFrameWnd@@@@QBEPAVCXTPCommandBars@@XZ
??0?$CXTPFrameWndBase@VCFrameWnd@@@@QAE@XZ
??1?$CXTPFrameWndBase@VCFrameWnd@@@@UAE@XZ
?SetTheme@CXTPPaintManager@@SAXW4XTPPaintTheme@@@Z
?AddCategories@CXTPCustomizeCommandsPage@@QAEHIH@Z
?InsertNewMenuCategory@CXTPCustomizeCommandsPage@@QAEXIH@Z
?InsertAllCommandsCategory@CXTPCustomizeCommandsPage@@QAEXIHH@Z
?InsertBuiltInMenus@CXTPCustomizeCommandsPage@@QAEHIIH@Z
??0CXTPCustomizeOptionsPage@@QAE@PAVCXTPCustomizeSheet@@@Z
??1CXTPCustomizeOptionsPage@@UAE@XZ
??0CXTPCustomizeSheet@@QAE@PAVCXTPCommandBars@@I@Z
??1CXTPCustomizeSheet@@UAE@XZ
?GetCommandsPage@CXTPCustomizeSheet@@QBEPAVCXTPCustomizeCommandsPage@@XZ
?DoModal@CXTPCustomizeSheet@@UAEHXZ
?AddPage@CXTPCustomizeSheet@@QAEXPAVCXTPPropertyPage@@H@Z
??0CXTPCommandBarsFrameHook@@QAE@XZ
??1CXTPCommandBarsFrameHook@@UAE@XZ
?EnableOffice2007Frame@CXTPCommandBarsFrameHook@@QAEXPAVCXTPCommandBars@@@Z
?AccessibleDoDefaultAction@CXTPControl@@MAEJUtagVARIANT@@@Z
?AccessibleHitTest@CXTPControl@@MAEJJJPAUtagVARIANT@@@Z
?AccessibleLocation@CXTPControl@@MAEJPAJ000UtagVARIANT@@@Z
?AccessibleNavigate@CXTPAccessible@@UAEJJUtagVARIANT@@PAU2@@Z
?AccessibleSelect@CXTPControl@@MAEJJUtagVARIANT@@@Z
?Clone@CXTPControlBitmap@@UAEPAVCXTPControl@@H@Z
?Compare@CXTPControl@@UAEHPAV1@@Z
?Copy@CXTPControl@@UAEXPAV1@H@Z
?CustomizeStartDrag@CXTPControl@@MAEXVCPoint@@@Z
?CustomizeStartResize@CXTPControl@@MAEHVCPoint@@@Z
?Draw@CXTPControlBitmap@@MAEXPAVCDC@@@Z
?GenerateCommandBarList@CXTPControl@@MAEXAAKPAVCXTPCommandBarList@@PAUXTP_COMMANDBARS_PROPEXCHANGE_PARAM@@@Z
?GetAccessible@CXTPControl@@MAEPAVCCmdTarget@@XZ
?GetAccessibleChild@CXTPControl@@MAEJUtagVARIANT@@PAPAUIDispatch@@@Z
?GetAccessibleChildCount@CXTPControl@@MAEJPAJ@Z
?GetAccessibleDefaultAction@CXTPControl@@MAEJUtagVARIANT@@PAPA_W@Z
?GetAccessibleDescription@CXTPControl@@MAEJUtagVARIANT@@PAPA_W@Z
?GetAccessibleFocus@CXTPAccessible@@UAEJPAUtagVARIANT@@@Z
?GetAccessibleHelp@CXTPAccessible@@UAEJUtagVARIANT@@PAPA_W@Z
?GetAccessibleHelpTopic@CXTPAccessible@@UAEJPAPA_WUtagVARIANT@@PAJ@Z
?GetAccessibleKeyboardShortcut@CXTPControl@@MAEJUtagVARIANT@@PAPA_W@Z
?GetAccessibleName@CXTPControl@@MAEJUtagVARIANT@@PAPA_W@Z
?GetAccessibleParent@CXTPControl@@MAEJPAPAUIDispatch@@@Z
?GetAccessibleRole@CXTPControl@@MAEJUtagVARIANT@@PAU2@@Z
?GetAccessibleSelection@CXTPAccessible@@UAEJPAUtagVARIANT@@@Z
?GetAccessibleState@CXTPControl@@MAEJUtagVARIANT@@PAU2@@Z
?GetAccessibleValue@CXTPAccessible@@UAEJUtagVARIANT@@PAPA_W@Z
?GetButtonSize@CXTPControl@@UBE?AVCSize@@XZ
?GetCaption@CXTPControl@@UBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?GetCommandBar@CXTPControl@@UBEPAVCXTPCommandBar@@XZ
?GetCustomizeMinHeight@CXTPControl@@MBEHXZ
?GetCustomizeMinWidth@CXTPControl@@MBEHXZ
?GetDescription@CXTPControl@@UBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?GetIconSize@CXTPControl@@UBE?AVCSize@@XZ
?GetImage@CXTPControl@@UBEPAVCXTPImageManagerIcon@@H@Z
?GetInterfaceMap@CXTPControl@@MBEPBUAFX_INTERFACEMAP@@XZ
?GetPopuped@CXTPControl@@UBEHXZ
?GetPressed@CXTPControl@@UBEHXZ
?GetRuntimeClass@CXTPControlBitmap@@UBEPAUCRuntimeClass@@XZ
??1CXTPControlBitmap@@UAE@XZ
?GetSize@CXTPControlBitmap@@MAE?AVCSize@@PAVCDC@@@Z
?GetTooltip@CXTPControl@@UBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?InitCommandBars@?$CXTPCommandBarsSiteBase@VCFrameWnd@@@@UAEHPAUCRuntimeClass@@@Z
?IsCaptionVisible@CXTPControl@@UBEHXZ
?IsCustomizeDragOverAvail@CXTPControl@@MAEHPAVCXTPCommandBar@@VCPoint@@AAK@Z
?IsCustomizeMovable@CXTPControl@@UBEHXZ
?IsCustomizeResizeAllow@CXTPControl@@MBEHXZ
?IsFocusable@CXTPControl@@MBEHXZ
?IsFocused@CXTPControl@@UBEHXZ
?IsTransparent@CXTPControl@@UBEHXZ
?IsVisible@CXTPControl@@UBEHK@Z
?LoadCommandBars@?$CXTPCommandBarsSiteBase@VCFrameWnd@@@@UAEXPB_WH@Z
?LoadFrame@?$CXTPFrameWndBase@VCFrameWnd@@@@UAEHIKPAVCWnd@@PAUCCreateContext@@@Z
?OnActionChanged@CXTPControl@@MAEXH@Z
?OnActionChanging@CXTPControl@@MAEXH@Z
?OnCalcDynamicSize@CXTPControl@@UAEXK@Z
?OnCaptionChanged@CXTPControl@@MAEXXZ
?OnClick@CXTPControlLabel@@UAEXHVCPoint@@@Z
?OnCmdMsg@CXTPControl@@MAEHIHPAXPAUAFX_CMDHANDLERINFO@@@Z
?OnCustomizeDragOver@CXTPControl@@MAEXPAV1@VCPoint@@AAK@Z
?OnEnabledChanged@CXTPControl@@UAEXXZ
?OnExecute@CXTPControl@@UAEXXZ
?OnHookKeyDown@CXTPControl@@MAEHIJ@Z
?OnHookMessage@CXTPCommandBarsFrameHook@@MAEHPAUHWND__@@IAAIAAJ2@Z
?OnHookMouseWheel@CXTPControl@@MAEHIFVCPoint@@@Z
?OnIdleUpdate@CXTPControl@@MAEXXZ
?OnLButtonDblClk@CXTPControl@@MAEHVCPoint@@@Z
??0CXTPControlBitmap@@QAE@XZ
?GetFlags@CXTPControl@@QBEKXZ
?OnLButtonDown@CXTPControl@@MAEXVCPoint@@@Z
?OnLButtonUp@CXTPControl@@MAEXVCPoint@@@Z
?OnMouseHover@CXTPControl@@MAEXXZ
?OnMouseMove@CXTPControl@@MAEXVCPoint@@@Z
?OnRButtonDown@CXTPControl@@MAEHVCPoint@@@Z
?OnRButtonUp@CXTPControl@@MAEHVCPoint@@@Z
?OnRemoved@CXTPControl@@MAEXXZ
?OnSetPreviewMode@?$CXTPFrameWndBase@VCFrameWnd@@@@UAEXHPAUCPrintPreviewState@@@Z
?OnSetSelected@CXTPControl@@MAEHH@Z
?OnThemeChanged@CXTPControl@@UAEXXZ
?OnToolHitTest@CXTPControl@@MBEHVCPoint@@PAUtagTOOLINFOW@@@Z
?OnUnderlineActivate@CXTPControl@@UAEXXZ
?OnUpdateMDIChildrenTheme@CXTPCommandBarsFrameHook@@MAEXXZ
?OnWndMsg@?$CXTPCommandBarsSiteBase@VCFrameWnd@@@@MAEHIIJPAJ@Z
?PreTranslateMessage@?$CXTPCommandBarsSiteBase@VCFrameWnd@@@@MAEHPAUtagMSG@@@Z
?PutAccessibleName@CXTPAccessible@@UAEJUtagVARIANT@@PA_W@Z
?PutAccessibleValue@CXTPAccessible@@UAEJUtagVARIANT@@PA_W@Z
?RestoreCommandBarList@CXTPControl@@MAEXPAVCXTPCommandBarList@@@Z
?SaveCommandBars@?$CXTPCommandBarsSiteBase@VCFrameWnd@@@@UAEXPB_W@Z
?SetAction@CXTPControl@@UAEXPAVCXTPControlAction@@@Z
?SetBeginGroup@CXTPControl@@UAEXH@Z
?SetChecked@CXTPControl@@UAEXH@Z
?SetEnabled@CXTPControl@@UAEXH@Z
?SetFocused@CXTPControl@@UAEXH@Z
?SetHeight@CXTPControl@@UAEXH@Z
?SetHideFlags@CXTPControl@@UAEXK@Z
?SetParent@CXTPControl@@MAEXPAVCXTPCommandBar@@@Z
?SetRect@CXTPControl@@UAEXVCRect@@@Z
?SetWidth@CXTPControl@@UAEXH@Z
?SetFlags@CXTPControl@@QAEXK@Z
?Add@CXTPControls@@QAEPAVCXTPControl@@PAV2@HPB_WHH@Z
?GetThisClass@CXTPMenuBar@@SGPAUCRuntimeClass@@XZ
?SetFlags@CXTPCommandBar@@QAEXKK@Z
?SetOwner@CXTPCommandBar@@QAEXPAVCWnd@@@Z
?GetControls@CXTPCommandBar@@QBEPAVCXTPControls@@XZ
?GetThisClass@CXTPCommandBars@@SGPAUCRuntimeClass@@XZ
?GetImageManager@CXTPCommandBars@@QBEPAVCXTPImageManager@@XZ
?GetCommandBarsOptions@CXTPCommandBars@@QBEPAVCXTPCommandBarsOptions@@XZ
?Add@CXTPCommandBars@@QAEPAVCXTPToolBar@@PB_WW4XTPBarPosition@@PAUCRuntimeClass@@@Z
?SetMenu@CXTPCommandBars@@QAEPAVCXTPMenuBar@@PB_WI@Z
?SaveWindowPos@CXTPWindowPos@@QAEHPAVCWnd@@PB_W1@Z
?SetTheme@CXTPControlTheme@@SAXPAUHWND__@@W4XTPControlTheme@@@Z
?LoadWindowPos@CXTPWindowPos@@QAEHPAVCWnd@@PB_W1@Z
??0CXTPWindowPos@@QAE@XZ
?XTPResourceImages@@YAPAVCXTPResourceImages@@XZ
?SetHandle@CXTPResourceImages@@QAEHPB_W0@Z
?XTPImageManager@@YAPAVCXTPImageManager@@XZ
?SetIcon@CXTPImageManager@@QAEHABVCXTPImageManagerIconHandle@@IVCSize@@W4XTPImageState@@@Z
?SetIcons@CXTPImageManager@@QAEHIPAIHVCSize@@W4XTPImageState@@@Z
?CreateIconFromResource@CXTPImageManagerIconHandle@@QAEHPAUHINSTANCE__@@PB_WVCSize@@H@Z
??1CXTPImageManagerIconHandle@@QAE@XZ
??0CXTPImageManagerIconHandle@@QAE@XZ
?XTPResourceManager@@YAPAVCXTPResourceManager@@XZ
?GetResourceHandle@CXTPResourceManager@@QBEPAUHINSTANCE__@@XZ
?LoadShortcuts@CXTPShortcutManager@@QAEXPB_W@Z
?SaveShortcuts@CXTPShortcutManager@@QAEXPB_W@Z
?GetThisClass@CXTPCommandBarEditCtrl@@SGPAUCRuntimeClass@@XZ
?EnableDocking@CXTPCommandBars@@QAEXXZ
?SetSite@CXTPCommandBars@@QAEXPAVCWnd@@@Z
?OnFrameWndMsg@CXTPCommandBars@@QAEHIIJPAJ@Z
?PreTranslateFrameMessage@CXTPCommandBars@@QAEHPAUtagMSG@@@Z
?GetShortcutManager@CXTPCommandBars@@QBEPAVCXTPShortcutManager@@XZ
?LoadOptions@CXTPCommandBars@@QAEXPB_W@Z
?SaveOptions@CXTPCommandBars@@QAEXPB_W@Z
?LoadBarState@CXTPCommandBars@@QAEXPB_WH@Z
?GetSelected@CXTPControlLabel@@UBEHXZ
?SaveBarState@CXTPCommandBars@@QAEXPB_WH@Z
?DoPropExchange@CXTPControl@@UAEXPAVCXTPPropExchange@@@Z
?OnSetPopup@CXTPControl@@MAEHH@Z
libifcoremd
for_adjustl
GETHWNDQQ
for_inquire
for_write_seq_lis_xmit
for_pause
for_read_seq_fmt_xmit
for_read_seq_lis
for_backspace
d_int_val
for_write_seq_lis
f_lanint_val
for_stop_core
for_write_dir_xmit
for_read_int_fmt
for_read_seq_fmt
for_write_dir_i8
for_concat
for_f90_index
for_len_trim
for_cpstr
for_write_seq_fmt_xmit
for_write_int_fmt_xmit
for_write_int_fmt
for_write_seq_xmit
for_write_seq
for_rewind
for_write_seq_fmt
for_read_dir_xmit
for_read_dir_i8
for_read_seq_xmit
for_read_seq
for_open
for_close
for_cpystr
for_dealloc_allocatable
for_check_mult_overflow
for_allocate
for_write_int_lis
for_trim
libifportmd
GETDATI2
MBCONVERTUNICODETOMB
ABORT
GETTIMI2
libmmd
cos
ceil
__powr4i4
asinf
cosf
sin
tanf
acosf
__powr8i4
log10f
sqrtf
fmod
pow
floor
sinf
modf
mpr
WNetGetProviderNameW
version
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
VerQueryValueA
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoA
psapi
EnumProcessModules
comctl32
ord17
Sections
.text Size: 4.7MB - Virtual size: 4.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text1 Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 344KB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ