dialog
initDialog
show
Overview
overview
3Static
static
3ac9d3e4a7e...18.exe
windows7-x64
3ac9d3e4a7e...18.exe
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...ed.dll
windows7-x64
3$PLUGINSDI...ed.dll
windows10-2004-x64
3$TEMP/Goog...ed.exe
windows7-x64
3$TEMP/Goog...ed.exe
windows10-2004-x64
3KwMusic.exe
windows7-x64
1KwMusic.exe
windows10-2004-x64
3Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
ac9d3e4a7ed6073350d145a16ff7f938_JaffaCakes118.exe
Resource
win7-20240729-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ac9d3e4a7ed6073350d145a16ff7f938_JaffaCakes118.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240704-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240705-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
$PLUGINSDIR/gtapi_signed.dll
Resource
win7-20240704-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
$PLUGINSDIR/gtapi_signed.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral9
Sample
$TEMP/GoogleToolbarInstaller_download_signed.exe
Resource
win7-20240708-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral10
Sample
$TEMP/GoogleToolbarInstaller_download_signed.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral11
Sample
KwMusic.exe
Resource
win7-20240708-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
KwMusic.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
ac9d3e4a7ed6073350d145a16ff7f938_JaffaCakes118
-
Size
3.4MB
-
MD5
ac9d3e4a7ed6073350d145a16ff7f938
-
SHA1
fe748c3f7bf453f9ad8b6e967ba42097b8d59745
-
SHA256
d83b04f050f9ddaa758fcbc39412dc5641a9f5c8f38d9b5bc1da654d9954ff39
-
SHA512
272756639c6d5e8a0f78b66ac0bf9cef4b8686f77be789084f4687db874f3a2c72821f97efcd58fa56d57b269dd96532df5a063b3981fa298e34d7738c0e5b83
-
SSDEEP
98304:CYxQnkKdhUt1siGdMcEmmc7zZqKD3OMxA:C1kiDdbJmaVD3ZxA
Score
3/10
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource ac9d3e4a7ed6073350d145a16ff7f938_JaffaCakes118 unpack001/$PLUGINSDIR/InstallOptions.dll unpack001/$PLUGINSDIR/System.dll -
NSIS installer 1 IoCs
resource yara_rule sample nsis_installer_1
Files
-
ac9d3e4a7ed6073350d145a16ff7f938_JaffaCakes118.exe windows:4 windows x86 arch:x86
237a51742fed62d237b6f1b75452402f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
CreateFileA
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
SetFileTime
ExitProcess
GetCommandLineA
GetWindowsDirectoryA
GetTempPathA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
CloseHandle
lstrcmpiA
lstrcmpA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
FindClose
MulDiv
FindNextFileA
FindFirstFileA
DeleteFileA
CopyFileA
user32
ExitWindowsEx
CharNextA
DialogBoxParamA
GetClassInfoA
SystemParametersInfoA
RegisterClassA
EndDialog
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
CheckDlgButton
GetAsyncKeyState
IsDlgButtonChecked
GetMessagePos
LoadBitmapA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
CreateDialogParamA
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
wvsprintfA
DispatchMessageA
PeekMessageA
SendMessageTimeoutA
FindWindowExA
IsWindow
GetDlgItem
LoadImageA
GetDC
EnableWindow
InvalidateRect
CreateWindowExA
GetWindowLongA
DrawFocusRect
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
ShowWindow
TrackPopupMenu
wsprintfA
SendMessageA
CallWindowProcA
MapWindowPoints
GetWindowRect
ScreenToClient
PtInRect
LoadCursorA
SetCursor
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
SetWindowLongA
gdi32
SetBkColor
GetDeviceCaps
GetCurrentObject
GetObjectA
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegEnumKeyA
RegEnumValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegQueryValueExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 440KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
$LOCALAPPDATA/Google/Custom Buttons/kuwo_music.xml.xml
-
$PLUGINSDIR/InstallOptions.dll.dll windows:4 windows x86 arch:x86
57354bdeea3dfae6e948101add87501a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
SetCurrentDirectoryA
GetCurrentDirectoryA
GetPrivateProfileIntA
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
MultiByteToWideChar
GlobalAlloc
user32
GetDlgCtrlID
GetClientRect
SetWindowRgn
MapWindowPoints
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
PtInRect
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
LoadIconA
gdi32
SetTextColor
GetObjectA
SelectObject
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
CreateCompatibleDC
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder
SHGetMalloc
ShellExecuteA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
Exports
Exports
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 954B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/KwMusic_google.ini
-
$PLUGINSDIR/System.dll.dll windows:4 windows x86 arch:x86
4ec328f99bdd944fc98d8a5cf11f7a62
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalAlloc
GlobalFree
GlobalSize
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
GetLastError
VirtualAlloc
VirtualProtect
user32
wsprintfA
ole32
StringFromGUID2
CLSIDFromString
Exports
Exports
Alloc
Call
Copy
Free
Get
Int64Op
Store
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 494B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/gtapi_signed.dll.dll windows:4 windows x86 arch:x86
a1cddef184beba696e690091795eacfd
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15/06/2007, 00:00Not After14/06/2012, 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04/12/2003, 00:00Not After03/12/2013, 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before16/07/2004, 00:00Not After15/07/2014, 23:59SubjectCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
31:44:c0:6a:6c:fb:50:76:c1:5d:39:95:72:c6:94:21Certificate
IssuerCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USNot Before19/06/2007, 00:00Not After18/06/2010, 23:59SubjectCN=Google Inc,OU=Digital ID Class 3 - Netscape Object Signing,O=Google Inc,L=Mountain View,ST=California,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
5a:d4:89:1c:dc:a0:67:a5:0d:5f:31:70:c9:f5:1a:18:ad:f2:70:25Signer
Actual PE Digest5a:d4:89:1c:dc:a0:67:a5:0d:5f:31:70:c9:f5:1a:18:ad:f2:70:25Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
gtapi.pdb
Imports
kernel32
GetCurrentProcessId
GetModuleHandleW
LocalFree
OpenProcess
lstrcmpA
GetLocalTime
LoadLibraryW
LoadLibraryA
LocalAlloc
lstrlenA
FreeLibrary
GetFileAttributesW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetCurrentThreadId
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetVersion
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapSize
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
GetProcAddress
lstrcmpiA
CloseHandle
SetLastError
GetLastError
GetVersionExA
TerminateProcess
OutputDebugStringA
user32
CharUpperA
CharNextA
advapi32
RegQueryValueExA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
Exports
Exports
CancelToolbarInstall
GetToolbarInstallerProgress
ToolbarCompatibilityCheck
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/t4_zh_cn.bmp
-
$TEMP/GoogleToolbarInstaller_download_signed.exe.exe windows:4 windows x86 arch:x86
1c1b680f2976066a0001a6e1b41dd5db
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15/06/2007, 00:00Not After14/06/2012, 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04/12/2003, 00:00Not After03/12/2013, 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before16/07/2004, 00:00Not After15/07/2014, 23:59SubjectCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
31:44:c0:6a:6c:fb:50:76:c1:5d:39:95:72:c6:94:21Certificate
IssuerCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USNot Before19/06/2007, 00:00Not After18/06/2010, 23:59SubjectCN=Google Inc,OU=Digital ID Class 3 - Netscape Object Signing,O=Google Inc,L=Mountain View,ST=California,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
ad:2a:fa:08:0e:82:60:c3:55:90:ad:4b:57:eb:46:b3:90:58:a5:b2Signer
Actual PE Digestad:2a:fa:08:0e:82:60:c3:55:90:ad:4b:57:eb:46:b3:90:58:a5:b2Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
RegisterClassW
version
VerQueryValueW
urlmon
CreateAsyncBindCtx
wintrust
WinVerifyTrust
advapi32
CryptVerifySignatureW
ole32
CLSIDFromProgID
shell32
ShellExecuteExW
oleaut32
VarUI4FromStr
shlwapi
SHGetValueW
gdi32
CreateRectRgn
userenv
UnloadUserProfile
crypt32
CryptImportPublicKeyInfo
msi
ord238
wininet
InternetOpenUrlW
Sections
.text Size: 155KB - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
KwMusic.exe.exe windows:4 windows x86 arch:x86
2abb13b453fdb37258834a9c4141d639
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15/06/2007, 00:00Not After14/06/2012, 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04/12/2003, 00:00Not After03/12/2013, 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21/05/2009, 00:00Not After20/05/2019, 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
27:44:c0:b5:76:7c:8e:59:14:a9:ec:be:07:49:c7:02Certificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before02/12/2009, 00:00Not After02/12/2011, 23:59SubjectCN=BEIJING KUWO TECHNOLOGY CO.\,LTD.\ ,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=BEIJING KUWO TECHNOLOGY CO.\,LTD.\ ,L=BEIJING,ST=BEIJING,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
7f:68:0c:0d:59:31:9f:77:60:47:9f:20:87:60:5b:08:a2:e8:ee:d7Signer
Actual PE Digest7f:68:0c:0d:59:31:9f:77:60:47:9f:20:87:60:5b:08:a2:e8:ee:d7Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
g:\Projects\AD\3004_AD_FIX\MusicBox_V2\dev\bin_r\KwMusic.pdb
Imports
http
?GetRequestIP@YL_CHTTPRequest@@QAEXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetHeaderItem@YL_CHTTPRequest@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV23@@Z
?GetRequestTime@YL_CHTTPRequest@@QAEXPAH0@Z
?Disconnect@YL_CHTTPRequest@@QAE_NXZ
??0YL_CHTTPDownFile@@QAE@XZ
?DownloadFile@YL_CHTTPDownFile@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0PAI@Z
??1YL_CHTTPDownFile@@QAE@XZ
?SendRequest@YL_CHTTPRequest@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4REQUEST_TYPE@1@JPAEI@Z
?GetHeader@YL_CHTTPRequest@@QAEPAEAAJ@Z
??0YL_CHTTPRequest@@QAE@XZ
?Request@YL_CHTTPRequest@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4REQUEST_TYPE@1@JPAEI@Z
?GetContent@YL_CHTTPRequest@@QAEPAEAAJ@Z
??1YL_CHTTPRequest@@QAE@XZ
cm
??1YL_CPUMem@@QAE@XZ
?GetMemUsage@YL_CPUMem@@QAE_NPBDAAI@Z
?GetCPUUsage@YL_CPUMem@@QAE_NPBDAAI@Z
??0YL_CPUMem@@QAE@XZ
zlib
?UnCompress@YL_CZlibZip@@SA?AW4ZIP_RESULT@1@PAEPAJPBEJ@Z
tag
?SaveTag_Album@YL_CTagDealer@@SA_NPBD0@Z
?SaveTag_Artist@YL_CTagDealer@@SA_NPBD0@Z
?GetAudioProperty@YL_CTagDealer@@SA_NPBDPAUMusicProperties@1@@Z
?GetTag@YL_CTagDealer@@SA_NPBDPAUMusicTag@1@@Z
?SaveTag@YL_CTagDealer@@SA_NPBDPBUMusicTag@1@@Z
?SaveTag_Title@YL_CTagDealer@@SA_NPBD0@Z
player
?CreateMediaPlayer@@YAPAVIMediaPlayer@@XZ
?GetMeidaPluginManagerFactory@@YAPAVIMeidaPluginManagerFactory@@XZ
?ReleaseMediaPlayer@@YAXPAVIMediaPlayer@@@Z
pd
DelRes
GetResInfo
StopDown
StartDown
StartKWMV
SetSysMsgWnd
AttachP2PListener
StopAll
DetachP2PListener
CloseKWMV
fzip
?UnCompress@YL_CFileZip@@SA_NPAXIABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@3@_N@Z
?UnCompress@YL_CFileZip@@SA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0AAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@3@_N@Z
reco
?SetInfo@YL_CRecoSong@@SAXPBD000@Z
?GetFPTimeAndInfo@YL_CRecoSong@@SAXPAH000PA_N@Z
?RecoSongByFp@YL_CRecoSong@@SA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAURECO_SONG_INFO@@PAI_N@Z
?RecoSongs2@YL_CRecoSong@@SA_NABV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@AAV?$vector@URECO_SONG_INFO@@V?$allocator@URECO_SONG_INFO@@@std@@@3@PAV?$vector@URECO_RESULT@@V?$allocator@URECO_RESULT@@@std@@@3@@Z
kwlogsvr
?LogInit@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?UpdateConfig@@YAXXZ
?LogUserActMsg@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?YL_Log@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H0PBDZZ
?LogRealMsg@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0_NPAPAEPAI@Z
?SetStartupType@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?LogFunctionalMsg@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
wininet
InternetGetConnectedState
InternetSetCookieA
InternetGetCookieA
ex_dll
?SetExit@@YGXXZ
?SetKwMusicMainWnd@@YGXPAUHWND__@@@Z
?RecordExceptionInfo_Release@@YGJPAU_EXCEPTION_POINTERS@@@Z
winmm
timeGetDevCaps
timeSetEvent
timeKillEvent
timeBeginPeriod
timeEndPeriod
mfc71
ord2468
ord741
ord2131
ord563
ord753
ord1009
ord3401
ord1425
ord6255
ord3605
ord3908
ord1230
ord4394
ord1654
ord1598
ord2876
ord3991
ord3799
ord2083
ord2870
ord2884
ord2878
ord3423
ord2086
ord1545
ord4232
ord3164
ord587
ord589
ord330
ord2075
ord4385
ord4400
ord5531
ord2853
ord2942
ord3169
ord468
ord694
ord2787
ord2814
ord3473
ord1279
ord5637
ord2090
ord1637
ord1558
ord4236
ord642
ord6120
ord602
ord347
ord3651
ord2092
ord1641
ord1571
ord4238
ord2958
ord3230
ord658
ord5866
ord2873
ord2794
ord3402
ord5871
ord2882
ord3875
ord1728
ord3680
ord3587
ord4350
ord754
ord2527
ord1198
ord1185
ord3255
ord5331
ord6297
ord5320
ord6286
ord313
ord5611
ord6060
ord5608
ord6054
ord4161
ord6057
ord5888
ord5727
ord5647
ord5523
ord5588
ord5414
ord5401
ord5921
ord5719
ord3180
ord1929
ord3989
ord3952
ord3795
ord1565
ord3337
ord1397
ord6266
ord1933
ord1570
ord4237
ord3229
ord657
ord3406
ord4100
ord2094
ord3244
ord1955
ord1283
ord3997
ord907
ord5710
ord2292
ord6144
ord2271
ord6179
ord6173
ord3489
ord3879
ord4001
ord5641
ord502
ord1192
ord1160
ord4118
ord5833
ord2654
ord3576
ord2475
ord2263
ord3287
ord5976
ord1968
ord1161
ord5985
ord3350
ord5622
ord5986
ord3352
ord3302
ord5634
ord2234
ord1071
ord1930
ord1966
ord3339
ord3295
ord530
ord722
ord3503
ord6005
ord5714
ord1118
ord3863
ord1091
ord4041
ord6062
ord5444
ord751
ord2477
ord1470
ord1595
ord562
ord2938
ord908
ord5529
ord298
ord300
ord2233
ord2469
ord1092
ord3233
ord423
ord660
ord4063
ord866
ord5466
ord3428
ord590
ord1117
ord331
ord3696
ord6180
ord6174
ord715
ord1643
ord1581
ord3292
ord2164
ord1873
ord3760
ord5419
ord5868
ord2867
ord2370
ord1486
ord5377
ord5869
ord5059
ord3348
ord4320
ord1024
ord6167
ord2866
ord5873
ord3650
ord3477
ord4298
ord4129
ord4132
ord2008
ord1302
ord4131
ord4961
ord4507
ord4946
ord4649
ord4964
ord5053
ord4805
ord4364
ord4710
ord4796
ord4963
ord4377
ord4376
ord4287
ord4794
ord4948
ord4200
ord4516
ord4971
ord4480
ord4529
ord4970
ord4846
ord4501
ord4368
ord4439
ord1916
ord4559
ord4920
ord4520
ord4519
ord4914
ord3740
ord4444
ord4443
ord4790
ord4204
ord4781
ord4389
ord4980
ord4171
ord4178
ord4587
ord4776
ord4386
ord4401
ord4399
ord4381
ord4384
ord4379
ord4863
ord4860
ord3974
ord5914
ord1619
ord5151
ord5206
ord3344
ord1360
ord5166
ord1562
ord2717
ord4273
ord648
ord2419
ord2420
ord2421
ord2418
ord2417
ord496
ord410
ord6282
ord6288
ord383
ord6166
ord1793
ord3088
ord783
ord4674
ord4673
ord1308
ord2176
ord1729
ord1931
ord1483
ord4098
ord2089
ord1547
ord4234
ord3171
ord591
ord4752
ord4928
ord2803
ord2246
ord1913
ord2615
ord5009
ord5012
ord4309
ord4135
ord2939
ord4904
ord943
ord5356
ord2992
ord2425
ord2424
ord4019
ord1557
ord3945
ord5148
ord2173
ord1306
ord4277
ord4265
ord5205
ord4342
ord4927
ord3648
ord3466
ord4250
ord5165
ord4450
ord635
ord395
ord4299
ord1151
ord5625
ord655
ord1443
ord5111
ord421
ord2308
ord5284
ord5287
ord5661
ord996
ord5107
ord2804
ord2159
ord6280
ord4127
ord6205
ord548
ord675
ord442
ord4044
ord378
ord631
ord2280
ord386
ord2751
ord3931
ord2288
ord5346
ord1452
ord2910
ord744
ord5097
ord556
ord6310
ord3389
ord3094
ord3174
ord747
ord559
ord1646
ord1588
ord3312
ord911
ord1875
ord4564
ord5969
ord2019
ord333
ord739
ord1647
ord1589
ord3315
ord1881
ord4211
ord4734
ord2022
ord2943
ord3205
ord391
ord5746
ord5807
ord427
ord664
ord3591
ord4067
ord870
ord259
ord1580
ord2346
ord262
ord868
ord4065
ord5526
ord662
ord425
ord6138
ord6178
ord3349
ord5055
ord2719
ord785
ord308
ord3919
ord1629
ord1628
ord6103
ord5141
ord5160
ord1609
ord4457
ord765
ord2566
ord763
ord5315
ord1320
ord1312
ord2146
ord5832
ord5831
ord2163
ord3988
ord6089
ord6064
ord4124
ord5802
ord2653
ord3759
ord6066
ord4117
ord4114
ord2718
ord3399
ord5571
ord5944
ord3114
ord3906
ord5947
ord3909
ord2058
ord1950
ord1612
ord1613
ord454
ord686
ord3620
ord2250
ord314
ord2253
ord2252
ord5715
ord745
ord557
ord2451
ord1207
ord760
ord572
ord3596
ord3684
ord384
ord5089
ord629
ord2903
ord1439
ord5323
ord5403
ord2306
ord6017
ord432
ord3331
ord2707
ord5493
ord380
msvcr71
_strlwr
_time64
_mbscmp
wcscmp
wcslen
_beginthreadex
_mbsstr
fgets
toupper
isxdigit
strtod
strtoul
_strdup
_mbsrev
_mbsnbcpy
strrchr
_stat64
sscanf
vsprintf
_vscprintf
_mbschr
ftell
wcschr
fwrite
??0exception@@QAE@ABQBD@Z
strncpy
_access
_atoi64
memmove
fopen
fread
fclose
fseek
fprintf
atof
strchr
atol
fflush
rewind
_beginthread
exit
??0bad_cast@@QAE@PBD@Z
??1bad_cast@@UAE@XZ
??0bad_cast@@QAE@ABV0@@Z
strtok
tolower
strncmp
__RTDynamicCast
_purecall
time
srand
isdigit
_ui64toa
_unlink
strftime
_localtime64
_errno
mbstowcs
setlocale
_splitpath
_stricmp
_itoa
ceil
_mbsncmp
_mbsnbcmp
_snprintf
rand
_CxxThrowException
??0exception@@QAE@ABV0@@Z
atoi
??0exception@@QAE@XZ
??1exception@@UAE@XZ
strstr
__p___argc
__p___argv
__CxxFrameHandler
sprintf
wcscpy
_except_handler3
malloc
_mbclen
_mbccpy
_local_unwind2
_strnicmp
getc
_iob
strerror
vfprintf
isspace
memset
??1type_info@@UAE@XZ
__security_error_handler
__dllonexit
_onexit
?terminate@@YAXXZ
_exit
_XcptFilter
_ismbblead
free
_cexit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
_strupr
_strcmpi
memcpy
_CIacos
_finite
_ftol
_CIpow
iswpunct
iswdigit
iswalpha
iswspace
longjmp
_setjmp3
ldexp
floor
tmpfile
_setmbcp
__p__fmode
__set_app_type
_c_exit
_controlfp
kernel32
lstrcatA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetCurrentProcess
GetCurrentProcessId
CreateProcessA
DuplicateHandle
TerminateProcess
CreateToolhelp32Snapshot
Process32First
Process32Next
CreateMutexA
ReleaseMutex
CloseHandle
WaitForSingleObject
lstrlenA
lstrlenW
lstrcmpiA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetStartupInfoA
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetEvent
GetTickCount
CreateThread
CreateEventA
OpenProcess
FreeLibrary
LoadLibraryA
GetCommandLineA
SetUnhandledExceptionFilter
SetProcessWorkingSetSize
GetCurrentThreadId
RaiseException
InitializeCriticalSection
DeleteCriticalSection
TerminateThread
GetExitCodeThread
GetModuleFileNameA
Sleep
GetProcAddress
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
FindClose
FindNextFileA
FindFirstFileA
LeaveCriticalSection
EnterCriticalSection
LockResource
LoadResource
FindResourceA
DeviceIoControl
CreateFileA
GetDriveTypeA
GetLogicalDrives
GlobalFree
GlobalAlloc
MoveFileExA
RemoveDirectoryA
DeleteFileA
SetFileAttributesA
CreateDirectoryA
GetLogicalDriveStringsA
GetFileAttributesA
GetSystemDirectoryA
GlobalUnlock
GlobalLock
MapViewOfFile
CreateFileMappingA
lstrcpyA
MulDiv
lstrcpynA
GetWindowsDirectoryA
WinExec
ResetEvent
ResumeThread
FreeResource
HeapFree
GetProcessHeap
GetModuleHandleA
HeapAlloc
GetCurrentDirectoryA
GetCPInfo
VirtualFreeEx
ReadProcessMemory
VirtualAllocEx
GetFileTime
SetFileTime
SystemTimeToFileTime
GetSystemTime
TryEnterCriticalSection
WritePrivateProfileSectionA
GetPrivateProfileSectionA
WriteFile
SetFilePointer
GetFileSize
InterlockedIncrement
WaitForMultipleObjects
CopyFileA
ReadFile
LocalFree
LocalAlloc
IsDBCSLeadByte
GetVolumeInformationA
GetExitCodeProcess
FileTimeToSystemTime
InterlockedDecrement
FormatMessageA
HeapDestroy
HeapReAlloc
HeapSize
SetLastError
VirtualProtect
FlushInstructionCache
GetSystemInfo
IsProcessorFeaturePresent
OutputDebugStringA
CreateFileW
UnmapViewOfFile
ExitProcess
user32
SendMessageTimeoutA
IsWindow
PostMessageA
UnregisterHotKey
RegisterHotKey
wsprintfW
SetActiveWindow
GetWindowRgn
GetAsyncKeyState
wsprintfA
CheckDlgButton
IsDlgButtonChecked
GetWindowTextA
GetCursor
SetCursorPos
mouse_event
ShowCursor
UpdateLayeredWindow
LoadCursorFromFileA
IsClipboardFormatAvailable
PeekMessageA
PostThreadMessageA
keybd_event
EnumChildWindows
RegisterWindowMessageA
GetDoubleClickTime
GetKeyNameTextA
GetDlgItem
FindWindowExA
CheckMenuItem
AdjustWindowRectEx
GetDlgCtrlID
GetMenuItemInfoA
ModifyMenuA
InsertMenuA
GetMenuState
GetMenuItemID
GetMenuItemCount
AppendMenuA
DeleteMenu
CreatePopupMenu
CreateMenu
DestroyIcon
DrawIconEx
GetIconInfo
SetWindowsHookExA
CallNextHookEx
RegisterClassExA
UnhookWindowsHookEx
IsRectEmpty
LoadImageA
CallWindowProcA
GetWindowDC
WindowFromDC
FrameRect
GetSysColorBrush
DrawFrameControl
SetPropA
RemovePropA
SetScrollRange
SetScrollPos
SetScrollInfo
GetScrollRange
GetScrollPos
GetScrollInfo
EnableScrollBar
DrawTextW
GetClassInfoA
SetParent
ShowScrollBar
OffsetRect
GetNextDlgGroupItem
DrawEdge
LoadMenuA
GetSubMenu
DrawFocusRect
TrackMouseEvent
GrayStringA
DrawTextExA
TabbedTextOutA
GetCursorPos
GetUpdateRect
SetRectEmpty
CopyRect
TranslateAcceleratorA
MessageBeep
GetMessagePos
UpdateWindow
InflateRect
CopyIcon
GetSysColor
SetRect
BeginPaint
EndPaint
DefWindowProcA
WindowFromPoint
GetClassNameA
CreateWindowExA
GetKeyState
DrawTextA
DestroyWindow
FillRect
GetFocus
SetWindowLongA
SetLayeredWindowAttributes
EmptyClipboard
SetClipboardData
OpenClipboard
GetClipboardData
CloseClipboard
ScreenToClient
EqualRect
FindWindowA
CopyImage
SetWindowPos
PtInRect
GetForegroundWindow
AttachThreadInput
BringWindowToTop
GetDesktopWindow
InvalidateRect
ReleaseCapture
SetWindowRgn
GetSystemMetrics
LoadIconA
GetParent
SetCapture
GetCapture
KillTimer
SetForegroundWindow
DispatchMessageA
TranslateMessage
GetMessageA
MapWindowPoints
ShowWindow
LoadAcceleratorsA
SendMessageA
GetWindowThreadProcessId
MessageBoxA
IsWindowVisible
GetWindow
IntersectRect
MoveWindow
SystemParametersInfoA
SetCursor
LoadCursorA
GetWindowRect
IsMenu
LoadBitmapA
GetClientRect
GetWindowLongA
DrawIcon
EnableWindow
GetPropA
SetTimer
RedrawWindow
ReleaseDC
GetDC
ClientToScreen
IsIconic
GetSystemMenu
EnableMenuItem
gdi32
CreateFontIndirectW
GetCharacterPlacementW
GetCharacterPlacementA
GetFontLanguageInfo
GetTextMetricsW
SetTextAlign
ExtTextOutW
GetDIBits
CreateDIBitmap
CreateDIBSection
StretchDIBits
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteDC
SelectPalette
RectInRegion
SetBitmapDimensionEx
GetTextAlign
GetBitmapDimensionEx
GetBkColor
EnumFontFamiliesExA
CreateRoundRectRgn
DeleteObject
CreatePalette
GetObjectW
PtInRegion
MoveToEx
CreateFontW
GetTextExtentPoint32W
Ellipse
GetBkMode
FrameRgn
OffsetRgn
EqualRgn
CreatePolygonRgn
GetClipBox
SetPixel
Polygon
IntersectClipRect
SetWindowOrgEx
PlayEnhMetaFile
CreatePatternBrush
SetBrushOrgEx
UnrealizeObject
GetTextExtentPointW
CreateRectRgn
CombineRgn
SelectClipRgn
GetPixel
GetCharWidthA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
SaveDC
StretchBlt
SetStretchBltMode
RestoreDC
GetTextColor
GetTextExtentPoint32A
GetStockObject
LineTo
SetBkMode
CreateBitmap
SetMapMode
BitBlt
GetTextMetricsA
CreatePen
CreateSolidBrush
GetDeviceCaps
CreateFontIndirectA
SetTextColor
SetBkColor
GetTextExtentPointA
CreateFontA
GetObjectA
CreateICA
ExtCreateRegion
PatBlt
msimg32
TransparentBlt
AlphaBlend
comdlg32
CommDlgExtendedError
advapi32
RegDeleteValueA
RegQueryValueA
RegOpenKeyA
RegDeleteKeyA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegEnumKeyExA
shell32
DragQueryFileA
SHGetFileInfoA
SHGetPathFromIDListA
SHGetMalloc
SHBrowseForFolderA
Shell_NotifyIconA
SHFileOperationA
SHGetSpecialFolderPathA
ShellExecuteA
SHGetFolderPathA
SHChangeNotify
comctl32
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_Draw
ord17
ImageList_AddMasked
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_GetImageCount
ImageList_Remove
ImageList_GetIcon
ImageList_Add
InitCommonControlsEx
ImageList_DragLeave
ImageList_DragEnter
ImageList_DragShowNolock
ImageList_DragMove
ImageList_EndDrag
ImageList_BeginDrag
ImageList_SetBkColor
shlwapi
HashData
PathFileExistsA
StrStrIA
PathAddBackslashA
ole32
CoUninitialize
CoCreateInstance
CoInitialize
CreateStreamOnHGlobal
oleaut32
VariantCopy
SysStringByteLen
SysAllocStringByteLen
SysAllocString
VariantInit
OleLoadPicturePath
VariantClear
SysAllocStringLen
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
OleLoadPicture
SysFreeString
msvcp71
??0_Lockit@std@@QAE@H@Z
?id@?$ctype@D@std@@2V0locale@2@A
??Bid@locale@std@@QAEIXZ
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@@Z
?_Incref@facet@locale@std@@QAEXXZ
?_Register@facet@locale@std@@QAEXXZ
??1_Lockit@std@@QAE@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??$?PDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@XZ
?eof@ios_base@std@@QBE_NXZ
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?bad@ios_base@std@@QBE_NXZ
?fail@ios_base@std@@QBE_NXZ
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??$?ODU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@JH@Z
??$?PDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?exceptions@ios_base@std@@QAEXH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
?ignore@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@HH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?unsetf@ios_base@std@@QAEXH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?ws@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@@Z
?setf@ios_base@std@@QAEHHH@Z
??$?5DU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAD@Z
??1istrstream@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??7ios_base@std@@QBE_NXZ
??1ostrstream@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1strstreambuf@std@@UAE@XZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?freeze@strstreambuf@std@@QAEX_N@Z
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Init@strstreambuf@std@@IAEXHPAD0H@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?overflow@strstreambuf@std@@MAEHH@Z
?pbackfail@strstreambuf@std@@MAEHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?underflow@strstreambuf@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z
?seekoff@strstreambuf@std@@MAE?AV?$fpos@H@2@JHH@Z
?seekpos@strstreambuf@std@@MAE?AV?$fpos@H@2@V32@H@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHPBD@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@XZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@V312@0@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?close@?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@H@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??Bios_base@std@@QBEPAXXZ
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AViterator@12@XZ
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AViterator@12@V312@@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@Viterator@12@0PB_W@Z
??_D?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?push_back@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXD@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?to_int_type@?$char_traits@_W@std@@SAGAB_W@Z
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?good@ios_base@std@@QBE_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?width@ios_base@std@@QAEHH@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?is@?$ctype@D@std@@QBE_NFD@Z
?to_char_type@?$char_traits@D@std@@SADABH@Z
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?eof@?$char_traits@D@std@@SAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?width@ios_base@std@@QBEHXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??1locale@std@@QAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?to_int_type@?$char_traits@D@std@@SAHABD@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?flags@ios_base@std@@QBEHXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?to_char_type@?$char_traits@_W@std@@SA_WABG@Z
?eq_int_type@?$char_traits@_W@std@@SA_NABG0@Z
?eof@?$char_traits@_W@std@@SAGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?max_size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
sensapi
IsNetworkAlive
ws2_32
gethostbyname
connect
send
recv
htons
socket
closesocket
localserver
??0CLocalSvrManage@@QAE@XZ
?SendToAllExceptID@CLocalSvrManage@@QAEXPAEHH@Z
?SetActiveID@CLocalSvrManage@@QAEXH@Z
?GetActiveID@CLocalSvrManage@@QAEHXZ
?SendByID@CLocalSvrManage@@QAEXPAEHH@Z
?SendToAll@CLocalSvrManage@@QAEXPAEH@Z
?GetConnectionCount@CLocalSvrManage@@QAEHXZ
?Close@CLocalSvrManage@@QAEXXZ
?RemoveFlashMsgReceiver@CLocalSvrManage@@QAEXPAVIFlashMsgReceiver@@@Z
?AddFlashMsgReceiver@CLocalSvrManage@@QAEXPAVIFlashMsgReceiver@@@Z
?Create@CLocalSvrManage@@QAEHI@Z
??1CLocalSvrManage@@QAE@XZ
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 592KB - Virtual size: 590KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 152KB - Virtual size: 450KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SHARED Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 248KB - Virtual size: 246KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ