dialog
initDialog
show
Overview
overview
7Static
static
7eb3b28c3e7...18.exe
windows7-x64
3eb3b28c3e7...18.exe
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$TEMP/msearch.exe
windows7-x64
7$TEMP/msearch.exe
windows10-2004-x64
7Monkey3.exe
windows7-x64
Monkey3.exe
windows10-2004-x64
Behavioral task
behavioral1
Sample
eb3b28c3e78c852f9ac378afc5483e94_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
eb3b28c3e78c852f9ac378afc5483e94_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$TEMP/msearch.exe
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$TEMP/msearch.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Monkey3.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Monkey3.exe
Resource
win10v2004-20240802-en
Target
eb3b28c3e78c852f9ac378afc5483e94_JaffaCakes118
Size
1.4MB
MD5
eb3b28c3e78c852f9ac378afc5483e94
SHA1
b9b5c6f30977511fcc7afd51fe7a948d89bd0234
SHA256
cc2c8bead42e807334275c9b4c42c8f462a1053e4f7e7480119600e377860cfe
SHA512
2fd1da28326570067c87ca6a3ecb08757067d178f0afa80a193e1efc7ac952c51dbed8fea6a5d3648c02c8466e5c616d107a5d21cc254597f3757ceaf7c5eb43
SSDEEP
24576:Ld/uPB7Xe2xqgkJsr8vT5kvggkKK6Fbvvuyoo2wgNkdZpjFzhm:gB7OGNwsIvTMHkKt3uto2NkdZpRVm
resource | yara_rule |
---|---|
static1/unpack001/$TEMP/msearch.exe | upx |
Checks for missing Authenticode signature.
resource |
---|
eb3b28c3e78c852f9ac378afc5483e94_JaffaCakes118 |
unpack001/$PLUGINSDIR/InstallOptions.dll |
unpack001/$PLUGINSDIR/System.dll |
unpack001/$TEMP/msearch.exe |
unpack002/out.upx |
unpack001/Monkey3.exe |
resource | yara_rule |
---|---|
sample | nsis_installer_1 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc
MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect
SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject
SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
CoTaskMemFree
dialog
initDialog
show
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalAlloc
GlobalFree
GlobalSize
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
GetLastError
VirtualAlloc
VirtualProtect
wsprintfA
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
d:\SVNProject\Develop\Monkey3_v9\Release\Monkey3.pdb
PathStripPathA
StrFormatByteSizeA
ord11
SHBrowseForFolderA
SHChangeNotify
DragQueryFileA
DragFinish
ShellExecuteExA
ExtractIconExA
SHFileOperationA
DragAcceptFiles
SHGetDesktopFolder
SHGetFileInfoA
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHAppBarMessage
SHGetSpecialFolderPathA
ShellExecuteA
Shell_NotifyIconA
InternetReadFile
InternetOpenUrlA
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetCloseHandle
InternetConnectA
InternetOpenA
TransparentBlt
GradientFill
mmioAdvance
mmioGetInfo
timeSetEvent
timeKillEvent
timeGetTime
waveOutClose
waveOutWrite
waveOutPrepareHeader
waveOutOpen
mmioClose
mmioOpenA
mmioAscend
mmioRead
mmioCreateChunk
mmioSeek
mmioSetInfo
mmioWrite
mmioDescend
GetAdaptersInfo
ImmReleaseContext
ImmGetContext
ImmGetConversionStatus
ImmSetConversionStatus
ord979
ord3225
ord5436
ord1700
ord5433
ord3999
ord3216
ord5350
ord4751
ord3842
ord451
ord4673
ord5602
ord4684
ord5641
ord2071
ord4417
ord2647
ord6362
ord6360
ord4717
ord5437
ord5434
ord2080
ord1734
ord4112
ord4000
ord4493
ord4752
ord542
ord541
ord3896
ord756
ord551
ord5645
ord547
ord549
ord4014
ord4996
ord2649
ord6810
ord6140
ord3413
ord6811
ord4113
ord6555
ord3414
ord652
ord390
ord6188
ord6329
ord6491
ord6150
ord2197
ord724
ord1424
ord481
ord1041
ord790
ord4026
ord3273
ord729
ord491
ord3126
ord5965
ord4807
ord4792
ord4292
ord4787
ord3049
ord2825
ord3757
ord2430
ord6525
ord773
ord1566
ord5793
ord6087
ord572
ord1457
ord1277
ord1275
ord5167
ord1110
ord1182
ord2045
ord833
ord5808
ord3717
ord5852
ord5997
ord784
ord3650
ord3269
ord4649
ord1723
ord1786
ord2286
ord4254
ord664
ord3390
ord2209
ord3351
ord405
ord5622
ord2207
ord340
ord6081
ord3611
ord3489
ord3228
ord5151
ord4616
ord6456
ord3638
ord1717
ord1782
ord3856
ord571
ord1145
ord6707
ord783
ord582
ord3491
ord1692
ord4386
ord899
ord3365
ord2648
ord2354
ord4963
ord3052
ord3931
ord3151
ord2590
ord3726
ord1061
ord6154
ord3157
ord580
ord781
ord2356
ord1691
ord4248
ord436
ord686
ord3141
ord3153
ord4157
ord3654
ord3213
ord305
ord6613
ord1611
ord1228
ord845
ord1272
ord5307
ord4311
ord1865
ord520
ord1878
ord1867
ord1866
ord1751
ord5745
ord1401
ord1391
ord2342
ord6290
ord6289
ord2359
ord4383
ord6583
ord6556
ord4528
ord6252
ord2895
ord4114
ord6558
ord4515
ord4512
ord2965
ord3728
ord6006
ord6430
ord3418
ord4279
ord6433
ord4282
ord2246
ord2125
ord1744
ord1745
ord3227
ord3485
ord474
ord721
ord4296
ord1764
ord1763
ord6597
ord5574
ord5593
ord1879
ord1739
ord4865
ord799
ord801
ord819
ord2364
ord306
ord1303
ord1254
ord1258
ord1087
ord2451
ord2452
ord321
ord2449
ord3965
ord1063
ord2140
ord3180
ord4308
ord3010
ord1265
ord320
ord6062
ord402
ord6101
ord4654
ord4695
ord5232
ord3705
ord3391
ord1667
ord1612
ord6102
ord5795
ord1616
ord4570
ord5162
ord5285
ord6086
ord5792
ord1547
ord960
ord3476
ord329
ord610
ord3980
ord1353
ord2448
ord1356
ord5660
ord4982
ord593
ord398
ord795
ord662
ord3939
ord1361
ord4498
ord2282
ord3568
ord2130
ord6646
ord6787
ord6786
ord6788
ord4281
ord3940
ord6151
ord1252
ord6084
ord4727
ord4513
ord5640
ord6557
ord463
ord711
ord3479
ord3612
ord525
ord333
ord6078
ord6077
ord2470
ord6048
ord3663
ord1016
ord611
ord772
ord1409
ord2224
ord1711
ord4686
ord1643
ord4678
ord5753
ord1555
ord6793
ord6257
ord1490
ord663
ord404
ord2447
ord5657
ord4481
ord1607
ord1186
ord5520
ord341
ord5552
ord617
ord1098
ord6462
ord4427
ord1220
ord2501
ord3013
ord266
ord5835
ord4392
ord4434
ord4409
ord6783
ord4159
ord6781
ord4733
ord2251
ord2206
ord6018
ord4165
ord1046
ord5533
ord6721
ord5813
ord4199
ord2087
ord3209
ord5659
ord4333
ord4981
ord5663
ord5646
ord6001
ord3110
ord4890
ord3659
ord589
ord793
ord4029
ord2588
ord6074
ord1357
ord3477
ord1358
ord337
ord613
ord6760
ord524
ord367
ord2097
ord636
ord6079
ord6527
ord744
ord4223
ord265
ord3178
ord3730
ord1045
ord4030
ord2283
ord1720
ord4646
ord4416
ord586
ord777
ord789
ord3627
ord3534
ord2106
ord1183
ord3528
ord1144
ord6584
ord4529
ord406
ord2490
ord1556
ord665
ord310
ord945
ord4477
ord2481
ord300
ord1746
ord3783
ord3949
ord3519
ord798
ord4502
ord2327
ord4384
ord4116
ord941
ord2899
ord6559
ord2360
ord6291
ord6365
ord539
ord753
ord654
ord3895
ord1108
ord1137
ord1603
ord4725
ord2896
ord6170
ord5924
ord5153
ord4594
ord6740
ord4013
ord2038
ord5495
ord5494
ord5496
ord5493
ord5601
ord2138
ord450
ord3841
ord2698
ord6785
ord1716
ord3632
ord767
ord2651
ord5930
ord3808
ord1709
ord2966
ord375
ord376
ord3629
ord766
ord4656
ord5291
ord4749
ord4970
ord5339
ord2445
ord2079
ord2855
ord5432
ord5435
ord4716
ord4539
ord3224
ord5323
ord3221
ord6359
ord3222
ord6361
ord978
ord5786
ord3278
ord2646
ord2645
ord4415
ord1684
ord4330
ord5581
ord5638
ord2369
ord1384
ord4683
ord6355
ord3217
ord5598
ord4671
ord3531
ord415
ord670
ord3994
ord5327
ord4431
ord6152
ord6493
ord4236
ord1329
ord1030
ord6178
ord6497
_setmbcp
_purecall
rand
srand
fclose
fgets
feof
fopen_s
_ltoa_s
memmove_s
_vsnprintf_s
_open
sscanf_s
memcpy
strcpy_s
strlen
strcat_s
??0exception@std@@QAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
_i64toa_s
_atoi64
_itoa_s
malloc
memset
strncpy_s
free
atoi
memcmp
_controlfp_s
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_except_handler4_common
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_wtoi
fabs
atan
fprintf
exit
strtok_s
_mbsrchr
sscanf
_mbsnbcpy
_findfirst64i32
_findnext64i32
_findclose
memmove
wcscat
wcsstr
_ftime64
ferror
fopen
strerror
fseek
ftell
_sleep
rename
_mkdir
_stat64
_fullpath
getenv
_lseeki64
?_open@@YAHPBDHH@Z
_filelengthi64
log
wcsncmp
wcstod
strncmp
sprintf
_snprintf
_snwprintf
wcscpy
strcpy
strncat
strcat
_wcstoi64
_i64tow
strtod
wcsncpy
strncpy
wcscspn
wcschr
_unlink
strftime
abs
wcscat_s
_getcwd
asin
cos
sin
sqrt
log10
pow
_mktime64
labs
ceil
_mbscmp
wcscmp
wcslen
wcscpy_s
_endthread
_msize
calloc
isalnum
isspace
memcpy_s
_mbsnbcpy_s
atof
remove
_lseek
_close
_write
_read
_sopen_s
strchr
strncat_s
_stricmp
strrchr
_mbschr
_mbsinc
_strnicmp
_access
strcmp
__RTDynamicCast
_beginthreadex
_localtime64_s
_gmtime64_s
clock
_get_osfhandle
_stat64i32
_errno
__iob_func
fflush
strtol
_fstat64i32
_chsize
sprintf_s
realloc
isprint
fwrite
printf
_snprintf_s
_time64
atol
_strdup
wcsncpy_s
fread
__CxxFrameHandler3
lstrcpynA
FindResourceA
FreeResource
lstrcmpiA
GlobalUnlock
GlobalFree
GlobalLock
lstrcpyA
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesA
FileTimeToLocalFileTime
FileTimeToDosDateTime
GetFileAttributesA
DosDateTimeToFileTime
LockResource
GetDiskFreeSpaceExA
QueryDosDeviceA
InterlockedIncrement
GetModuleHandleA
SetLastError
CompareStringA
GetLogicalDrives
IsBadWritePtr
SetThreadPriority
CreateEventA
ResumeThread
GlobalMemoryStatus
FindNextFileA
LockFileEx
LockFile
FlushViewOfFile
GetCPInfo
lstrlenW
GetVersion
GetExitCodeThread
GetVersionExA
InterlockedExchange
InterlockedCompareExchange
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetFullPathNameA
WinExec
GetFileInformationByHandle
WideCharToMultiByte
CreateThread
lstrlenA
SetEndOfFile
GetFileSize
SetFilePointer
ReadFile
GetVolumeInformationA
MoveFileA
FormatMessageA
ResetEvent
SetEvent
Sleep
GetCurrentDirectoryA
GetProcAddress
GetTickCount
GetLastError
EnterCriticalSection
InterlockedDecrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThreadId
GetCurrentProcess
SetProcessAffinityMask
GetSystemDefaultLangID
GetModuleFileNameA
GetTempPathA
CreateProcessA
WaitForSingleObject
FindFirstFileA
CopyFileA
DeleteFileA
FindClose
SetCurrentDirectoryA
GlobalGetAtomNameA
GlobalAddAtomA
MulDiv
MultiByteToWideChar
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
CreateFileA
WriteFile
CloseHandle
CreateDirectoryA
LoadResource
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
HeapFree
GetProcessHeap
HeapAlloc
VirtualAlloc
CreateSemaphoreA
VirtualFree
ReleaseSemaphore
WaitForMultipleObjects
FlushFileBuffers
QueryPerformanceFrequency
QueryPerformanceCounter
SizeofResource
GetSystemTime
OpenFileMappingA
GetCurrentDirectoryW
GetSystemTimeAsFileTime
GetFileTime
GetSystemInfo
RaiseException
lstrcatA
VirtualQuery
GetACP
GetCurrentProcessId
FileTimeToSystemTime
GlobalAlloc
OutputDebugStringA
AdjustWindowRectEx
RegisterWindowMessageA
ReleaseDC
GetDC
GetParent
SendMessageA
LoadIconA
BringWindowToTop
SetForegroundWindow
DispatchMessageA
TranslateMessage
PeekMessageA
PostMessageA
SetTimer
KillTimer
FlashWindow
LoadCursorA
SetWindowLongA
SetCursor
ReleaseCapture
PtInRect
LoadBitmapA
DrawTextA
GetClientRect
InvalidateRect
RedrawWindow
SetCapture
CreateWindowExA
RegisterClassA
FindWindowA
GetClassInfoA
LoadAcceleratorsA
UnregisterClassA
DestroyWindow
SetFocus
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
IsIconic
TranslateAcceleratorA
IsWindowVisible
GetSystemMetrics
GetWindowLongA
GetDesktopWindow
IsWindow
SetRect
GetWindowRect
CloseWindow
SetWindowPos
SystemParametersInfoA
GetMonitorInfoA
MonitorFromWindow
GetCursorPos
GetKeyState
CopyRect
CreatePopupMenu
AppendMenuA
SetParent
EnableMenuItem
ClientToScreen
WindowFromPoint
LockWindowUpdate
GetDlgItem
GetActiveWindow
RegisterDeviceNotificationA
GetSysColor
DeleteMenu
CheckMenuItem
ScreenToClient
DestroyIcon
DrawIconEx
InflateRect
TabbedTextOutA
DrawTextExA
GrayStringA
WindowFromDC
SetScrollRange
SetScrollPos
SetScrollInfo
GetScrollRange
GetScrollPos
EnableScrollBar
MessageBoxA
GetCapture
SetClassLongA
UnionRect
RemovePropA
SetPropA
GetMessagePos
ShowWindow
MoveWindow
OpenClipboard
GetTopWindow
GetWindow
GetSystemMenu
DrawIcon
EmptyClipboard
SetClipboardData
CloseClipboard
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExA
LoadStringA
wvsprintfA
wsprintfW
GetAsyncKeyState
RegisterClipboardFormatA
IsZoomed
GetScrollInfo
GetClassLongA
GetWindowRgn
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
MapWindowPoints
IsMenu
EnableWindow
DrawFrameControl
CopyIcon
SetActiveWindow
DrawAnimatedRects
EnumChildWindows
GetClassNameA
SetMenuDefaultItem
GetNextDlgTabItem
DrawFocusRect
DrawStateA
FrameRect
LoadMenuA
GetIconInfo
CreateIconIndirect
TrackPopupMenuEx
DestroyCursor
RemoveMenu
ModifyMenuA
InsertMenuA
GetSubMenu
GetMenuState
GetMenuItemID
CreateMenu
GetMenuItemInfoA
DrawEdge
GetFocus
ShowScrollBar
SetRectEmpty
DefWindowProcA
TrackPopupMenu
wsprintfA
DestroyMenu
GetMenuItemCount
InsertMenuItemA
GetPropA
CallWindowProcA
UpdateWindow
SetWindowRgn
GetWindowDC
GetSysColorBrush
OffsetRect
LoadImageA
TrackMouseEvent
FillRect
CreateRectRgn
GetMapMode
GetViewportExtEx
GetWindowExtEx
DPtoLP
LPtoDP
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
DeleteDC
SetTextColor
SetBkColor
SelectObject
CreateBitmap
CreatePen
CombineRgn
GetDIBits
Ellipse
Pie
RoundRect
PatBlt
GetBkColor
CreateDIBSection
CreateHatchBrush
GetBkMode
GetPixel
SetPixel
CreatePolygonRgn
GetCurrentObject
SetRectRgn
OffsetRgn
GetWindowOrgEx
SetBkMode
CreateEllipticRgn
CreateRoundRectRgn
CreatePalette
RealizePalette
EnumFontsA
LineTo
MoveToEx
UnrealizeObject
SetBrushOrgEx
CreatePatternBrush
SelectClipRgn
IntersectClipRect
PlayEnhMetaFile
SetWindowOrgEx
DeleteObject
CreateSolidBrush
Rectangle
CreateFontA
StretchBlt
BitBlt
GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectA
CreateFontIndirectA
FillRgn
GetTextColor
GetTextExtentPoint32A
GetStockObject
GetTextExtentPoint32W
CreateRectRgnIndirect
EnumFontFamiliesA
ChooseFontA
RegEnumKeyA
RegQueryValueExA
RegCreateKeyExA
GetUserNameA
RegQueryValueA
RegEnumValueA
RegOpenKeyExA
RegCloseKey
RegOpenKeyA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
ImageList_GetIconSize
_TrackMouseEvent
InitCommonControlsEx
CoInitialize
CoUninitialize
CoFreeUnusedLibraries
CreateStreamOnHGlobal
CoTaskMemAlloc
StgIsStorageFile
StgOpenStorage
StringFromCLSID
GetRunningObjectTable
CreateItemMoniker
OleCreateStaticFromData
ReleaseStgMedium
OleDuplicateData
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleSetContainedObject
PropVariantClear
CoTaskMemFree
OleInitialize
StgCreateDocfile
CoCreateInstance
VariantClear
VariantInit
SysFreeString
SysAllocStringLen
SysStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreatePropertyFrame
OleLoadPicture
SysAllocString
URLDownloadToFileA
HlinkSimpleNavigateToString
listen
WSAStartup
inet_addr
ntohs
getsockname
getsockopt
setsockopt
WSAGetLastError
??Z?$complex@N@std@@QAEAAV01@ABV01@@Z
??Y?$complex@N@std@@QAEAAV01@ABV01@@Z
??0?$complex@N@std@@QAE@ABN0@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
??X?$complex@N@std@@QAEAAV01@ABV01@@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0ABV12@@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHPBD@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEPADXZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?ID3_HasPicture@@YA_NPBVID3_Tag@@@Z
?Update@ID3_Tag@@QAEGG@Z
?ID3_AddPicture@@YAPAVID3_Frame@@PAVID3_Tag@@PBD1_N@Z
?AttachFrame@ID3_Tag@@QAE_NPAVID3_Frame@@@Z
?GetField@ID3_Frame@@QBEPAVID3_Field@@W4ID3_FieldID@@@Z
?Find@ID3_Tag@@QBEPAVID3_Frame@@W4ID3_FrameID@@@Z
?RemoveFrame@ID3_Tag@@QAEPAVID3_Frame@@PBV2@@Z
??0ID3_Frame@@QAE@W4ID3_FrameID@@@Z
??1ID3_Frame@@UAE@XZ
?Contains@ID3_Frame@@QBE_NW4ID3_FieldID@@@Z
?ID3_GetGenre@@YAPADPBVID3_Tag@@@Z
?ID3_GetTrack@@YAPADPBVID3_Tag@@@Z
?ID3_GetComment@@YAPADPBVID3_Tag@@PBD@Z
?ID3_GetYear@@YAPADPBVID3_Tag@@@Z
?ID3_GetAlbum@@YAPADPBVID3_Tag@@@Z
?ID3_GetArtist@@YAPADPBVID3_Tag@@@Z
?ID3_FreeString@@YAXPAD@Z
?ID3_GetTitle@@YAPADPBVID3_Tag@@@Z
ord2
ord49
ord36
ord18
ord13
ord1
ord45
ord40
ord41
??1ID3_Tag@@UAE@XZ
?GetMp3HeaderInfo@ID3_Tag@@QBEPBUMp3_Headerinfo@@XZ
?Link@ID3_Tag@@QAEIPBDG@Z
ord53
??0ID3_Tag@@QAE@PBD@Z
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ