Static task
static1
Behavioral task
behavioral1
Sample
ba607d50c4d055822717d6859257b61d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ba607d50c4d055822717d6859257b61d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ba607d50c4d055822717d6859257b61d_JaffaCakes118
-
Size
41KB
-
MD5
ba607d50c4d055822717d6859257b61d
-
SHA1
5b5201427fb9ba396ca378c5701724380012a4b4
-
SHA256
344a014d4dd273b1fe866bdd8cd52d95dc758221e68a08fc496c1bfba6cceef0
-
SHA512
20ad6bc832f9c07c0708210426e051b68bcd392b9e64b46cc30b228ffb77cbce9e022a777a245ebe19e4e8ae9290f6313632cbf5f5d2313904a90ba976eba441
-
SSDEEP
768:r5P1qTVQdOdWobyTQZ8hl7G3L1vIskdRWPNe+CUAv+tQy6TYZBzek:rV1qTVYu198xqNw+i5+Sk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba607d50c4d055822717d6859257b61d_JaffaCakes118
Files
-
ba607d50c4d055822717d6859257b61d_JaffaCakes118.exe windows:5 windows x86 arch:x86
976055f8d239142d92239a9c9d5463d9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msdart
?sm_wDefaultSpinCount@CCritSec@@1GA
?IsReadLocked@CReaderWriterLock@@QBE_NXZ
?RemoveTail@CLockedDoubleList@@QAEQAVCListEntry@@XZ
?IsWriteUnlocked@CReaderWriterLock@@QBE_NXZ
?RemoveTail@CDoubleList@@QAEQAVCListEntry@@XZ
?_CalcKeyHash@CLKRHashTable@@ABEKK@Z
?_ReadLockSpin@CReaderWriterLock2@@AAEXXZ
?IsWriteUnlocked@CSmallSpinLock@@QBE_NXZ
?WriteUnlock@CLKRLinearHashTable@@QBEXXZ
?BucketSize@CLKRHashTableStats@@SGJJ@Z
?WriteLock@CFakeLock@@QAEXXZ
?IsReadLocked@CSmallSpinLock@@QBE_NXZ
?ReadUnlock@CCritSec@@QAEXXZ
??4CFakeLock@@QAEAAV0@ABV0@@Z
?_Contract@CLKRLinearHashTable@@AAE?AW4LK_RETCODE@@XZ
?ReadUnlock@CReaderWriterLock2@@QAEXXZ
?_Expand@CLKRLinearHashTable@@AAE?AW4LK_RETCODE@@XZ
?IsWriteUnlocked@CCritSec@@QBE_NXZ
?IsUnlocked@CLockedDoubleList@@QBE_NXZ
?sm_dblDfltSpinAdjFctr@CCritSec@@1NA
?ReadOrWriteUnlock@CFakeLock@@QAEX_N@Z
?IsWin9x@CMdVersionInfo@@SAHXZ
?BucketSizes@CLKRHashTableStats@@SGPBJXZ
?IsLocked@CLockedDoubleList@@QBE_NXZ
?GetDefaultSpinCount@CCritSec@@SGGXZ
?ConvertSharedToExclusive@CSpinLock@@QAEXXZ
?sm_dblDfltSpinAdjFctr@CReaderWriterLock3@@1NA
?ReadLock@CLKRLinearHashTable@@QBEXXZ
?_TryReadLock@CReaderWriterLock@@AAE_NXZ
?ReadLock@CReaderWriterLock@@QAEXXZ
?_TryLock@CSmallSpinLock@@AAE_NXZ
MpHeapReAlloc
??0CFakeLock@@QAE@XZ
?ConvertSharedToExclusive@CReaderWriterLock3@@QAEXXZ
??0CLockedSingleList@@QAE@XZ
?WriteUnlock@CFakeLock@@QAEXXZ
?ConvertSharedToExclusive@CFakeLock@@QAEXXZ
?ReadUnlock@CSmallSpinLock@@QAEXXZ
?sm_wDefaultSpinCount@CSmallSpinLock@@1GA
msvcp60
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
??0time_base@std@@QAE@I@Z
??_7logic_error@std@@6B@
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
??0?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??_8?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@7B@
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
?_Init@?$codecvt@DDH@std@@IAEXABV_Locinfo@2@@Z
?_Getcat@?$messages@G@std@@SAIXZ
?is_open@?$basic_ofstream@GU?$char_traits@G@std@@@std@@QBE_NXZ
??4_Winit@std@@QAEAAV01@ABV01@@Z
??1?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHIIABV12@@Z
?table_size@?$ctype@D@std@@2IB
?tolower@?$ctype@G@std@@QBEPBGPAGPBG@Z
?encoding@codecvt_base@std@@QBEHXZ
?do_date_order@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBEHXZ
?_Getcat@?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0_Timevec@std@@QAE@PAX@Z
??1strstreambuf@std@@UAE@XZ
?_Init@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?pubsync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEHXZ
?eof@?$char_traits@G@std@@SAGXZ
?max@?$numeric_limits@K@std@@SAKXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
??_7?$moneypunct@G$00@std@@6B@
??_8?$basic_ofstream@DU?$char_traits@D@std@@@std@@7B@
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
??_7ios_base@std@@6B@
?unget@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?_Nanv@?$_Ctr@M@std@@SAMM@Z
?positive_sign@?$_Mpunct@D@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
??1?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
?do_decimal_point@?$_Mpunct@G@std@@MBEGXZ
??_7?$basic_ofstream@DU?$char_traits@D@std@@@std@@6B@
??Gstd@@YA?AV?$complex@N@0@ABV10@ABN@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
?at@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAGI@Z
?do_toupper@?$ctype@G@std@@MBEPBGPAGPBG@Z
??4?$complex@N@std@@QAEAAV01@ABV01@@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Init@?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?imbue@?$basic_ios@GU?$char_traits@G@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?sync@?$basic_filebuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?arg@std@@YANABV?$complex@N@1@@Z
_Getctype
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?exp@std@@YA?AV?$complex@O@1@ABV21@@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAGH@Z
?do_decimal_point@?$numpunct@D@std@@MBEDXZ
?nothrow@std@@3Unothrow_t@1@B
?conj@std@@YA?AV?$complex@O@1@ABV21@@Z
??_7?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
?length@?$char_traits@D@std@@SAIPBD@Z
??1?$moneypunct@G$0A@@std@@UAE@XZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?is_open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QBE_NXZ
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAD@Z
?do_always_noconv@codecvt_base@std@@MBE_NXZ
??4?$allocator@X@std@@QAEAAV01@ABV01@@Z
??_F?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?pow@std@@YA?AV?$complex@M@1@ABMABV21@@Z
??0overflow_error@std@@QAE@ABV01@@Z
??8locale@std@@QBE_NABV01@@Z
_Cosh
?thousands_sep@?$numpunct@D@std@@QBEDXZ
?gcount@?$basic_istream@GU?$char_traits@G@std@@@std@@QBEHXZ
?decimal_point@?$_Mpunct@D@std@@QBEDXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIGI@Z
?getloc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE?AVlocale@2@XZ
??0underflow_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??4?$complex@M@std@@QAEAAV01@ABV01@@Z
??_0?$_Complex_base@O@std@@QAEAAV01@ABO@Z
?pword@ios_base@std@@QAEAAPAXH@Z
?_Incref@facet@locale@std@@QAEXXZ
??Mstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?_Getcat@?$collate@G@std@@SAIXZ
?infinity@?$numeric_limits@H@std@@SAHXZ
?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEPAGXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Refcnt@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEAAEPBG@Z
??1?$moneypunct@D$00@std@@UAE@XZ
?do_scan_is@?$ctype@G@std@@MBEPBGFPBG0@Z
?denorm_min@?$numeric_limits@G@std@@SAGXZ
?do_thousands_sep@?$_Mpunct@D@std@@MBEDXZ
??0?$codecvt@GDH@std@@QAE@I@Z
?open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXPBDF@Z
_FInf
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IID@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
??1runtime_error@std@@UAE@XZ
?sin@std@@YA?AV?$complex@O@1@ABV21@@Z
??0?$codecvt@GDH@std@@QAE@ABV_Locinfo@1@I@Z
?intl@?$moneypunct@G$0A@@std@@2_NB
?opfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE_NXZ
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@G@Z
?_Sinh@?$_Ctr@N@std@@SANNN@Z
??_F?$moneypunct@D$00@std@@QAEXXZ
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
?_Ifmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@KAPADPADDH@Z
?_Stinit@?1??_Init@?$basic_filebuf@DU?$char_traits@D@std@@@std@@IAEXPAU_iobuf@@W4_Initfl@23@@Z@4HA
?sputbackc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PAD0PBDI@Z
wininet
InternetSecurityProtocolToStringA
FreeUrlCacheSpaceW
HttpEndRequestA
HttpEndRequestW
FindNextUrlCacheGroup
InternetShowSecurityInfoByURLW
SetUrlCacheEntryGroupW
FtpGetCurrentDirectoryA
HttpOpenRequestW
InternetAutodialCallback
InternetCreateUrlW
CreateMD5SSOHash
GetUrlCacheConfigInfoW
InternetQueryOptionA
FindNextUrlCacheContainerA
FtpRemoveDirectoryW
InternetGetCertByURLA
InternetSetOptionExW
ShowClientAuthCerts
ResumeSuspendedDownload
CreateUrlCacheContainerW
GopherFindFirstFileW
InternetOpenUrlA
GetUrlCacheEntryInfoExA
InternetTimeFromSystemTimeW
InternetDialA
DeleteIE3Cache
CommitUrlCacheEntryA
CommitUrlCacheEntryW
InternetAutodialHangup
UnlockUrlCacheEntryStream
InternetInitializeAutoProxyDll
FtpSetCurrentDirectoryA
InternetSetDialStateA
SetUrlCacheConfigInfoW
InternetDial
InternetSetStatusCallback
SetUrlCacheHeaderData
InternetFindNextFileW
InternetGetLastResponseInfoW
DeleteUrlCacheEntry
FindFirstUrlCacheEntryW
FindFirstUrlCacheEntryExW
kernel32
_hwrite
GetNextVDMCommand
GetVersion
ChangeTimerQueueTimer
EnumerateLocalComputerNamesW
VirtualFree
HeapDestroy
GetDiskFreeSpaceExA
AllocateUserPhysicalPages
GetNamedPipeHandleStateA
MultiByteToWideChar
ReadConsoleOutputCharacterA
GetComputerNameExA
GetCompressedFileSizeW
CreateIoCompletionPort
WritePrivateProfileSectionA
GetComputerNameExW
CreateFileMappingA
LZDone
TzSpecificLocalTimeToSystemTime
ShowConsoleCursor
WriteConsoleOutputCharacterA
FatalAppExitW
FindFirstVolumeA
_lread
Heap32ListNext
VirtualAlloc
SignalObjectAndWait
IsBadHugeReadPtr
FindFirstFileW
SetComputerNameExA
GetTempFileNameW
SetVolumeMountPointA
SetConsoleDisplayMode
EnumResourceLanguagesA
EscapeCommFunction
IsSystemResumeAutomatic
AllocConsole
VirtualQueryEx
Beep
BaseInitAppcompatCacheSupport
SetupComm
_llseek
CreateFiber
GlobalWire
ConvertThreadToFiber
GetProfileStringW
SetThreadIdealProcessor
GetConsoleProcessList
GetTapeParameters
UpdateResourceA
SetVolumeLabelA
DeleteFileA
BuildCommDCBAndTimeoutsW
GetProcessVersion
UnregisterWait
UnmapViewOfFile
RegisterWowExec
DelayLoadFailureHook
RtlMoveMemory
GetProcessWorkingSetSize
TlsFree
Sleep
EnumResourceTypesW
PrepareTape
SetTermsrvAppInstallMode
WritePrivateProfileStructA
CreateWaitableTimerW
GetCurrencyFormatA
ReadConsoleInputExA
GetConsoleFontInfo
Thread32First
PeekConsoleInputW
SuspendThread
GetAtomNameA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
FindFirstVolumeW
FindNextVolumeA
OpenEventW
FatalExit
FormatMessageA
GetProcessAffinityMask
GetDiskFreeSpaceA
DebugSetProcessKillOnExit
ntdll
NtOpenIoCompletion
RtlLargeIntegerShiftLeft
NtAccessCheckByType
RtlGetNtVersionNumbers
RtlUnicodeStringToAnsiSize
ZwDeleteFile
RtlEqualLuid
ZwQueryIoCompletion
ZwFlushVirtualMemory
NtCreateProfile
NtFsControlFile
ZwLockFile
RtlGetLengthWithoutLastFullDosOrNtPathElement
NtRemoveIoCompletion
ZwTraceEvent
RtlReleaseMemoryStream
NtStartProfile
NtYieldExecution
CsrGetProcessId
wcsncat
DbgPrintReturnControlC
NtSetSystemPowerState
isprint
RtlValidAcl
_memccpy
ZwTranslateFilePath
iswxdigit
_lfind
RtlCommitMemoryStream
iswctype
RtlAddRefMemoryStream
RtlUniform
NtDuplicateObject
msvcrt40
_wchdir
__toascii
??4ifstream@@QAEAAV0@ABV0@@Z
??_8fstream@@7Bostream@@@
ftell
?put@ostream@@QAEAAV1@D@Z
time
getwchar
_mtlock
__doserrno
?open@ifstream@@QAEXPBDHH@Z
?binary@filebuf@@2HB
?read@istream@@QAEAAV1@PACH@Z
_rotr
__iscsym
_wmkdir
rewind
??_Dstdiostream@@QAEXXZ
_mbsset
??0streambuf@@IAE@XZ
_memicmp
__isascii
sscanf
_wrename
??4istream@@IAEAAV0@PAVstreambuf@@@Z
_mbsnccnt
_longjmpex
??5istream@@QAEAAV0@AAC@Z
??0ios@@IAE@ABV0@@Z
?precision@ios@@QAEHH@Z
_execve
user32
RealGetWindowClassW
GetClassInfoA
CharUpperBuffA
OemToCharW
GetMenuItemRect
IsClipboardFormatAvailable
SetWindowContextHelpId
GetWindowModuleFileNameA
CharToOemA
DdePostAdvise
IsMenu
FindWindowW
CreateAcceleratorTableA
LoadImageA
DrawMenuBar
OemToCharBuffW
UnloadKeyboardLayout
DdeAddData
TileChildWindows
IsZoomed
EnumPropsW
SetMenuDefaultItem
GetMouseMovePointsEx
SetDlgItemInt
RedrawWindow
OpenWindowStationA
CallWindowProcA
UpdatePerUserSystemParameters
CreateDialogIndirectParamAorW
ImpersonateDdeClientWindow
PrivateExtractIconExA
DefRawInputProc
UnlockWindowStation
GetDialogBaseUnits
CreateDialogParamA
SetCaretPos
PostMessageA
SwitchDesktop
PaintDesktop
CharNextExA
EndPaint
HideCaret
GetRawInputDeviceInfoW
AttachThreadInput
DlgDirListA
DefWindowProcA
CallWindowProcW
ClipCursor
SetMenuContextHelpId
DragDetect
GetInternalWindowPos
UserLpkPSMTextOut
LoadAcceleratorsW
GetMenuItemID
RegisterHotKey
LoadCursorFromFileW
DdeInitializeA
PostQuitMessage
GetScrollInfo
InternalGetWindowText
DlgDirSelectExW
ChangeDisplaySettingsA
SetWinEventHook
RegisterShellHookWindow
CharPrevExA
GetAltTabInfoW
SetDlgItemTextW
DlgDirSelectComboBoxExW
GetDlgItemInt
GetRegisteredRawInputDevices
GetAltTabInfoA
DeleteMenu
SetWindowLongW
DestroyIcon
CopyRect
CreateIcon
msorcl32
SQLAllocConnect
DllRegisterServer
SQLGetStmtOption
SQLCancel
SQLDescribeParam
SQLRowCount
SQLBindCol
SQLParamData
SQLMoreResults
SQLFetch
SQLExtendedFetch
SQLAllocStmt
SQLProcedures
SQLError
SQLGetTypeInfo
DllMain
SQLColAttributes
SQLGetCursorName
SQLGetData
SQLPutData
SQLPrepare
SQLExecDirect
SQLSetCursorName
SQLDisconnect
SQLForeignKeys
LoadByOrdinal
SQLFreeConnect
SQLSetScrollOptions
SQLBindParameter
SQLDriverConnect
SQLTransact
SQLAllocEnv
SQLGetInfo
SQLSetPos
SQLGetConnectOption
rpcrt4
I_RpcBindingInqWireIdForSnego
NdrProxyFreeBuffer
RpcGetAuthorizationContextForClient
I_RpcClearMutex
NdrMapCommAndFaultStatus
NdrFullPointerInsertRefId
NdrUserMarshalFree
NdrNonConformantStringMarshall
I_RpcTransDatagramFree
RpcSsDestroyClientContext
NdrComplexStructUnmarshall
NdrMesSimpleTypeAlignSize
NdrXmitOrRepAsMarshall
RpcStringBindingParseW
RpcServerUseProtseqIfW
NdrOutInit
RpcMgmtSetAuthorizationFn
RpcSsSwapClientAllocFree
I_RpcPauseExecution
RpcEpRegisterNoReplaceA
RpcServerUseProtseqW
RpcServerInqDefaultPrincNameW
RpcSsContextLockExclusive
NdrStubForwardingFunction
RpcServerInqBindings
RpcBindingServerFromClient
RpcBindingVectorFree
RpcObjectInqType
RpcBindingFromStringBindingW
NdrFixedArrayFree
opengl32
glColor4bv
glTexCoord3fv
glColor3usv
glLightModeliv
glPixelStoref
glMapGrid2d
glRectf
glEvalCoord1f
glGetMapiv
glDrawArrays
glLineWidth
glStencilOp
glNormal3sv
glLighti
glInitNames
glPassThrough
glTexCoordPointer
glTexCoord2dv
glRects
glEnableClientState
glGetMaterialiv
glTexCoord4fv
glScissor
glNormal3iv
glBegin
glBlendFunc
glCopyTexSubImage1D
glPixelTransferi
glColor4b
glEvalCoord2dv
glGetTexEnviv
glEvalCoord2d
glCullFace
glLineStipple
glColor3bv
glRasterPos3dv
wglGetPixelFormat
glRasterPos4f
glGetMapdv
glVertex4dv
glGetTexLevelParameterfv
glTexParameteri
glIsEnabled
glTexGend
glGetTexParameterfv
glFlush
glColor3uiv
glTexCoord2sv
glGetPolygonStipple
wglGetProcAddress
glTranslatef
glTexImage1D
glVertex3i
glFrontFace
glClearStencil
wglShareLists
glFogi
glTexCoord4i
glEvalCoord1d
glIndexsv
glColorMaterial
glRectsv
glDrawBuffer
glIndexs
glPushAttrib
msi
MsiSourceListForceResolutionA
MsiSetPropertyA
MsiConfigureProductExA
MsiViewExecute
MsiGetUserInfoW
MsiApplyPatchA
MsiFormatRecordA
MsiProcessAdvertiseScriptA
MsiSummaryInfoPersist
MsiDoActionA
MsiLoadStringA
MsiGetProductPropertyA
MsiProvideComponentW
MsiReinstallFeatureFromDescriptorA
MsiDatabaseImportA
MsiEnumProductsW
MsiGetTargetPathW
MsiPreviewBillboardA
MsiCreateRecord
DllCanUnloadNow
MsiGetSourcePathA
MsiOpenProductW
MsiEnumComponentQualifiersA
MsiAdvertiseProductW
MsiEnableLogW
MsiGetSummaryInformationW
MsiRecordSetStreamA
MsiDoActionW
MsiDatabaseMergeA
MsiNotifySidChangeW
MsiGetFeatureStateA
MsiSetFeatureStateW
MsiProvideQualifiedComponentExW
MsiMessageBoxA
query
?PidToRealPid@CPidMapper@@QAEKK@Z
?Reset@CRegChangeEvent@@QAEXXZ
?AcquireRead@CPropertyStore@@AAEXAAVCReadWriteLockRecord@@@Z
??0CCategorizationSet@@QAE@I@Z
?AddArg@CEventItem@@QAEXPBG@Z
??0CVirtualString@@QAE@I@Z
??0CLangList@@QAE@PAUICiCLangRes@@K@Z
?GetOleDBErrorInfo@@YGJPAUIUnknown@@ABU_GUID@@KIPAUtagERRORINFO@@PAPAUIErrorInfo@@@Z
?SetUI4@CStorageVariant@@QAEXKI@Z
?DoIt@CCopyRcovObject@@QAEJXZ
??1CSdidLookupTable@@QAE@XZ
?ShrinkFromFront@CPhysStorage@@QAEKKK@Z
?ReportEventW@CFwEventItem@@QAEXAAUICiCAdviseStatus@@@Z
?IsScopeValid@@YGJPBGIH@Z
??0CMmStream@@QAE@KH@Z
?AddRef@CEmptyPropertyList@@UAGKXZ
?Release@CWorkQueue@@QAEXPAVCWorkThread@@@Z
?AddRef@CEnumWorkid@@UAGKXZ
?EnumPropInfo@CEmptyPropertyList@@UAGJKPAPBGPAPAUtagDBID@@PAGPAI@Z
??0SStorageObject@@QAE@PAVPStorageObject@@@Z
?ReadProperty@CPropertyStore@@QAEHKKAAUtagPROPVARIANT@@@Z
?PropertyToPropId@CStandardPropMapper@@QAEKABVCFullPropSpec@@H@Z
?WriteProperty@CPropStoreManager@@QAEJKKABVCStorageVariant@@@Z
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE