Overview
overview
8Static
static
8setup.exe
windows7-x64
7setup.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows7-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3avpr.chm
windows7-x64
1avpr.chm
windows10-2004-x64
1avpr.exe
windows7-x64
3avpr.exe
windows10-2004-x64
3license.doc
windows7-x64
4license.doc
windows10-2004-x64
1Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
avpr.chm
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
avpr.chm
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
avpr.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
avpr.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
license.doc
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
license.doc
Resource
win10v2004-20240802-en
General
-
Target
14a7e7b6675f0e39ebc9d0ea32dcfa3d_JaffaCakes118
-
Size
982KB
-
MD5
14a7e7b6675f0e39ebc9d0ea32dcfa3d
-
SHA1
8a3f33ca7fc6aa941dac6588d377e4490c9f659b
-
SHA256
a58eb6df9eab33d850e6c28363bd1fe57fb8160ef1da3f5702b1c150d4bf701b
-
SHA512
9e6a0eba596f9f439d03f80c5748e86d79c12da659f7a913c3d2c60646794c1b3bfaca5f90b92112e87360c5e482680d61dd59f56261c0cc9af7c578f4aeb5cc
-
SSDEEP
24576:v7p3KgIE+sPHBllt3sRawnhvIQGlFgWSo:vF3nIE+yPsEwJ5q
Malware Config
Signatures
-
resource static1/unpack002/license.doc -
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack002/$PLUGINSDIR/InstallOptions.dll unpack002/$PLUGINSDIR/StartMenu.dll unpack002/avpr.exe -
NSIS installer 1 IoCs
resource yara_rule static1/unpack001/setup.exe nsis_installer_1
Files
-
14a7e7b6675f0e39ebc9d0ea32dcfa3d_JaffaCakes118.zip
-
file_id.diz
-
order.txt
-
readme.txt
-
setup.exe.exe windows:4 windows x86 arch:x86
a3b0ee1fb29253dbfbd34b387e7a55c9
Code Sign
70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bfCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before29-01-1996 00:00Not After01-08-2028 23:59SubjectOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04-12-2003 00:00Not After03-12-2008 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
57:64:6e:2b:55:00:23:d4:90:53:4a:55:3e:ab:0d:0aCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before16-07-2004 00:00Not After15-07-2009 23:59SubjectCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
57:af:e5:c6:77:5e:9e:ef:c5:c1:0a:83:96:82:c1:2dCertificate
IssuerCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USNot Before15-07-2005 00:00Not After03-09-2006 23:59SubjectCN=ElcomSoft Co.Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Development,O=ElcomSoft Co.Ltd.,L=Moscow,ST=Moscow,C=RUExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
90:a3:01:8c:08:a3:d3:8e:0a:a0:0e:72:b2:33:30:b5:76:83:14:5dSigner
Actual PE Digest90:a3:01:8c:08:a3:d3:8e:0a:a0:0e:72:b2:33:30:b5:76:83:14:5dDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
CopyFileA
ExitProcess
lstrcpynA
GetCommandLineA
GetWindowsDirectoryA
SetFileTime
GetUserDefaultLangID
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
GlobalAlloc
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
lstrcpyA
lstrlenA
lstrcatA
GetSystemDirectoryA
CloseHandle
lstrcmpiA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
GlobalFree
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
MulDiv
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA
user32
SystemParametersInfoA
RegisterClassA
EndDialog
ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
LoadCursorA
SetCursor
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
CreateWindowExA
OpenClipboard
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
IsWindow
GetClassInfoA
DialogBoxParamA
CharNextA
ExitWindowsEx
CreateDialogParamA
EmptyClipboard
DestroyWindow
SetWindowLongA
LoadImageA
GetDC
EnableWindow
PeekMessageA
DispatchMessageA
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
GetDlgItem
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/InstallOptions.dll.dll windows:4 windows x86 arch:x86
9d433976e02d79532f0d635ee81d0b20
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
MultiByteToWideChar
GetModuleHandleA
GetPrivateProfileIntA
GlobalAlloc
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
lstrcmpiA
user32
GetDlgCtrlID
GetClientRect
SetWindowRgn
LoadIconA
MapWindowPoints
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
PtInRect
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
LoadImageA
gdi32
SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject
shell32
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder
ShellExecuteA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
Exports
Exports
dialog
initDialog
show
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 930B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/StartMenu.dll.dll windows:4 windows x86 arch:x86
7d85f9c30f9e87a65fff848de2c96ac1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrcpynA
GlobalAlloc
MulDiv
GetModuleHandleA
GlobalFree
FindClose
FindNextFileA
FindFirstFileA
lstrcmpiA
lstrcatA
lstrcpyA
user32
GetMessageA
IsDialogMessageA
PostMessageA
CallWindowProcA
TranslateMessage
CheckDlgButton
ShowWindow
LoadIconA
GetClientRect
MoveWindow
ScreenToClient
GetWindowRect
ReleaseDC
GetDC
EnableWindow
SetWindowTextA
SendMessageA
GetWindowTextA
IsDlgButtonChecked
DispatchMessageA
DestroyWindow
GetDlgItem
CreateDialogParamA
SetWindowLongA
wsprintfA
GetWindowLongA
gdi32
GetTextMetricsA
SelectObject
shell32
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
Exports
Exports
Init
Select
Show
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 460B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/ioSpecial.ini
-
$PLUGINSDIR/modern-header.bmp
-
$PLUGINSDIR/modern-wizard.bmp
-
$PLUGINSDIR/reg_dialog.ini
-
Uninstall.exe.nsis
-
avpr.chm.chm
-
avpr.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
@$xp$14PROPERTYORIGIN
@$xp$14Rxgif@TGIFBits
@$xp$14Rxgif@TGIFData
@$xp$14Rxgif@TGIFItem
@$xp$15Rxgif@TGIFFrame
@$xp$15Rxgif@TGIFImage
@$xp$16Anifile@TANINAME
@$xp$16Ehsbase@TehsBase
@$xp$16Rxctrls@TRxLabel
@$xp$16Rxtimer@TRxTimer
@$xp$17Icolist@TIconList
@$xp$17Placemnt@TIniLink
@$xp$17Rxgif@TGIFVersion
@$xp$18Anifile@TIconFrame
@$xp$18Rxctrls@TCheckKind
@$xp$18Rxmenus@RxMenus__1
@$xp$18Speedbar@TSpeedBar
@$xp$19Dateutil@TDateOrder
@$xp$19Rxgif@TGIFColorItem
@$xp$19Rxgraph@TRxGradient
@$xp$19Rxmenus@TRxMainMenu
@$xp$19Speedbar@TBoundLine
@$xp$19Speedbar@TSpeedItem
@$xp$19Themesrv@TThemeData
@$xp$19Themesrv@TThemedTab
@$xp$20Dateutil@TDaysOfWeek
@$xp$20Ehshhapi@THHWIN_PROP
@$xp$20Rxctrls@TButtonImage
@$xp$20Rxctrls@TGlyphLayout
@$xp$20Rxctrls@TPositiveInt
@$xp$20Rxctrls@TRxNumGlyphs
@$xp$20Rxctrls@TSecretPanel
@$xp$20Rxctrls@TTextListBox
@$xp$20Rxgif@TGIFColorTable
@$xp$20Rxhook@TRxWindowHook
@$xp$20Rxmenus@TRxMenuStyle
@$xp$20Rxmenus@TRxPopupMenu
@$xp$20Speedbar@SpeedBar__2
@$xp$20Speedbar@TBoundLines
@$xp$20Speedbar@TBtnControl
@$xp$20Themesrv@TThemedEdit
@$xp$20Themesrv@TThemedMenu
@$xp$20Themesrv@TThemedPage
@$xp$20Themesrv@TThemedSpin
@$xp$21Ehshhapi@THHWIN_PARAM
@$xp$21Ehshhapi@THHWIN_PROPS
@$xp$21Placemnt@TFormStorage
@$xp$21Placemnt@TStoredValue
@$xp$21Rxgif@TDisposalMethod
@$xp$21Rxprops@TPropInfoList
@$xp$21Rxprops@TPropsStorage
@$xp$21Rxprops@TReadStrEvent
@$xp$21Speedbar@TBarPosition
@$xp$21Speedbar@TForEachItem
@$xp$21Thememgr@TThemeOption
@$xp$21Themesrv@TThemedClock
@$xp$21Themesrv@TThemedRebar
@$xp$22Ehshhapi@THHWIN_BUTTON
@$xp$22Ehshhapi@THHWIN_PARAMS
@$xp$22Ehswhatsthis@TF1Action
@$xp$22Placemnt@TStoredValues
@$xp$22Rxctrls@TRxButtonGlyph
@$xp$22Rxctrls@TRxButtonState
@$xp$22Rxctrls@TRxCustomLabel
@$xp$22Rxctrls@TRxSpeedButton
@$xp$22Rxgraph@TMappingMethod
@$xp$22Rxprops@TWriteStrEvent
@$xp$22Speedbar@TSbScaleFlags
@$xp$22Thememgr@TThemeManager
@$xp$22Thememgr@TThemeOptions
@$xp$22Themesrv@TThemedButton
@$xp$22Themesrv@TThemedHeader
@$xp$22Themesrv@TThemedStatus
@$xp$22Themesrv@TThemedWindow
@$xp$22Vclutils@TScreenCanvas
@$xp$23Dateutil@TDayOfWeekName
@$xp$23Ehshelprouter@THelpType
@$xp$23Ehshelprouter@TShowType
@$xp$23Ehshhapi@THHWIN_BUTTONS
@$xp$23Ehswhatsthis@TWhatsThis
@$xp$23Placemnt@TFormPlacement
@$xp$23Placemnt@TWinMinMaxInfo
@$xp$23Rxctrls@TPanelDrawEvent
@$xp$23Rxctrls@TRxCheckListBox
@$xp$23Rxctrls@TShadowPosition
@$xp$23Rxmenus@TItemImageEvent
@$xp$23Rxprops@TEraseSectEvent
@$xp$23Speedbar@ESpeedbarError
@$xp$23Themesrv@TThemeServices
@$xp$23Themesrv@TThemedElement
@$xp$23Themesrv@TThemedTaskBar
@$xp$23Themesrv@TThemedToolBar
@$xp$23Themesrv@TThemedToolTip
@$xp$23Vclutils@TFillDirection
@$xp$23Vclutils@TVertAlignment
@$xp$24Rxctrls@TRxCustomListBox
@$xp$24Rxctrls@TScrollDirection
@$xp$24Rxhook@THookMessageEvent
@$xp$24Rxmenus@TDrawMarginEvent
@$xp$24Rxmenus@TItemParamsEvent
@$xp$24Speedbar@TBarOrientation
@$xp$24Speedbar@TSpeedbarOption
@$xp$24Thememgr@TWindowProcList
@$xp$24Themesrv@TThemedComboBox
@$xp$24Themesrv@TThemedListview
@$xp$24Themesrv@TThemedProgress
@$xp$24Themesrv@TThemedTaskBand
@$xp$24Themesrv@TThemedTrackBar
@$xp$24Themesrv@TThemedTreeview
@$xp$25Ehshelprouter@THelpRouter
@$xp$25Ehshelprouter@THtmlOption
@$xp$25Ehswhatsthis@TContextInfo
@$xp$25Ehswhatsthis@TWTHelpEvent
@$xp$25Placemnt@TPlacementOption
@$xp$25Rxctrls@TChangeStateEvent
@$xp$25Speedbar@TApplyAlignEvent
@$xp$25Speedbar@TSpeedbarOptions
@$xp$25Speedbar@TSpeedbarSection
@$xp$25Themesrv@TThemedScrollBar
@$xp$26Ehshelprouter@THtmlOptions
@$xp$26Ehswhatsthis@TWTPopupEvent
@$xp$26Placemnt@TPlacementOptions
@$xp$26Placemnt@TPlacementRegRoot
@$xp$26Placemnt@TStoredValueEvent
@$xp$26Rxctrls@TGetItemWidthEvent
@$xp$26Rxctrls@TRxDropDownMenuPos
@$xp$26Rxmenus@TDrawMenuItemEvent
@$xp$26Themesrv@TThemedStartPanel
@$xp$26Themesrv@TThemedTrayNotify
@$xp$27Ehswhatsthis@TWhatsThisMode
@$xp$27Rxmenus@TMenuOwnerDrawState
@$xp$27Themesrv@TThemedExplorerBar
@$xp$28Anifile@TAnimatedCursorImage
@$xp$28Ehswhatsthis@TF1KeyDownEvent
@$xp$28Placemnt@TPlacementOperation
@$xp$28Sbsetup@TSpeedbarSetupWindow
@$xp$29Ehscontextmap@THelpContextMap
@$xp$29Ehswhatsthis@TWhatsThisOption
@$xp$29Rxmenus@TMeasureMenuItemEvent
@$xp$29Thememgr@PControlMessageEvent
@$xp$29Thememgr@TControlMessageEvent
@$xp$30Ehswhatsthis@TWhatsThisOptions
@$xp$30Themesrv@PThemedElementDetails
@$xp$30Themesrv@TThemedElementDetails
@$xp$31Thememgr@TAllowSubclassingEvent
@$xp$32Ehswhatsthis@TWTHelpContextEvent
@$xp$9THEMESIZE
@@Aboutd@Finalize
@@Aboutd@Initialize
@@Avpr_u@Finalize
@@Avpr_u@Initialize
@@Epass_u@Finalize
@@Epass_u@Initialize
@@Order_u@Finalize
@@Order_u@Initialize
@@Spass_u@Finalize
@@Spass_u@Initialize
@@Vbamp_u@Finalize
@@Vbamp_u@Initialize
@Anifile@Finalization$qqrv
@Anifile@TAnimatedCursorImage@
@Anifile@TAnimatedCursorImage@$bctr$qqrv
@Anifile@TAnimatedCursorImage@$bdtr$qqrv
@Anifile@TAnimatedCursorImage@Assign$qqrp19Classes@TPersistent
@Anifile@TAnimatedCursorImage@AssignTo$qqrp19Classes@TPersistent
@Anifile@TAnimatedCursorImage@AssignToBitmap$qqrp16Graphics@TBitmap15Graphics@TColoroo
@Anifile@TAnimatedCursorImage@Clear$qqrv
@Anifile@TAnimatedCursorImage@Draw$qqrp16Graphics@TCanvasrx13Windows@TRect
@Anifile@TAnimatedCursorImage@GetCreator$qqrv
@Anifile@TAnimatedCursorImage@GetDefaultRate$qqrv
@Anifile@TAnimatedCursorImage@GetFrame$qqri
@Anifile@TAnimatedCursorImage@GetIcon$qqri
@Anifile@TAnimatedCursorImage@GetIconCount$qqrv
@Anifile@TAnimatedCursorImage@GetTitle$qqrv
@Anifile@TAnimatedCursorImage@LoadFromFile$qqrx17System@AnsiString
@Anifile@TAnimatedCursorImage@LoadFromStream$qqrp15Classes@TStream
@Anifile@TAnimatedCursorImage@NewImage$qqrv
@Anifile@TAnimatedCursorImage@ReadAniStream$qqrp15Classes@TStream
@Anifile@TAnimatedCursorImage@ReadCreateIcon$qqrp15Classes@TStreamir14Windows@TPointro
@Anifile@TAnimatedCursorImage@ReadStream$qqrip15Classes@TStream
@Anifile@TAnimatedCursorImage@RiffReadError$qqrv
@Anifile@TAnimatedCursorImage@SaveToStream$qqrp15Classes@TStream
@Anifile@TAnimatedCursorImage@WriteStream$qqrp15Classes@TStreamo
@Anifile@TIconFrame@
@Anifile@TIconFrame@$bctr$qqrii
@Anifile@TIconFrame@$bdtr$qqrv
@Anifile@TIconFrame@Assign$qqrp19Classes@TPersistent
@Anifile@initialization$qqrv
@Apputils@AppBroadcast$qqriii
@Apputils@AppTaskbarIcons$qqro
@Apputils@DefCompanyName
@Apputils@Finalization$qqrv
@Apputils@FindForm$qqrp17System@TMetaClass
@Apputils@FindShowForm$qqrp17System@TMetaClassx17System@AnsiString
@Apputils@GetDefaultIniData$qqrp17Controls@TControlr17System@AnsiStringt2o
@Apputils@GetDefaultIniName$qqrv
@Apputils@GetDefaultIniRegKey$qqrv
@Apputils@GetDefaultSection$qqrp18Classes@TComponent
@Apputils@GetUniqueFileNameInDir$qqrx17System@AnsiStringt1
@Apputils@IniDeleteKey$qqrp14System@TObjectx17System@AnsiStringt2
@Apputils@IniEraseSection$qqrp14System@TObjectx17System@AnsiString
@Apputils@IniReadBool$qqrp14System@TObjectx17System@AnsiStringt2o
@Apputils@IniReadInteger$qqrp14System@TObjectx17System@AnsiStringt2i
@Apputils@IniReadSections$qqrp14System@TObjectp16Classes@TStrings
@Apputils@IniReadString$qqrp14System@TObjectx17System@AnsiStringt2t2
@Apputils@IniStrToStr$qqrx17System@AnsiString
@Apputils@IniWriteBool$qqrp14System@TObjectx17System@AnsiStringt2o
@Apputils@IniWriteInteger$qqrp14System@TObjectx17System@AnsiStringt2i
@Apputils@IniWriteString$qqrp14System@TObjectx17System@AnsiStringt2t2
@Apputils@InstantiateForm$qqrp17System@TMetaClasspv
@Apputils@InternalRestoreGridLayout$qqrp17Grids@TCustomGridp14System@TObjectx17System@AnsiString
@Apputils@InternalRestoreMDIChildren$qqrp11Forms@TFormp14System@TObject
@Apputils@InternalSaveGridLayout$qqrp17Grids@TCustomGridp14System@TObjectx17System@AnsiString
@Apputils@InternalSaveMDIChildren$qqrp11Forms@TFormp14System@TObject
@Apputils@OnGetDefaultIniName
@Apputils@ReadFormPlacement$qqrp11Forms@TFormp17Inifiles@TIniFilex17System@AnsiStringoo
@Apputils@ReadFormPlacementReg$qqrp11Forms@TFormp20Registry@TRegIniFilex17System@AnsiStringoo
@Apputils@RegUseAppTitle
@Apputils@RestoreFormPlacement$qqrp11Forms@TFormx17System@AnsiStringo
@Apputils@RestoreGridLayout$qqrp17Grids@TCustomGridp17Inifiles@TIniFile
@Apputils@RestoreGridLayoutReg$qqrp17Grids@TCustomGridp20Registry@TRegIniFile
@Apputils@RestoreMDIChildren$qqrp11Forms@TFormp17Inifiles@TIniFile
@Apputils@RestoreMDIChildrenReg$qqrp11Forms@TFormp20Registry@TRegIniFile
@Apputils@SaveFormPlacement$qqrp11Forms@TFormx17System@AnsiStringo
@Apputils@SaveGridLayout$qqrp17Grids@TCustomGridp17Inifiles@TIniFile
@Apputils@SaveGridLayoutReg$qqrp17Grids@TCustomGridp20Registry@TRegIniFile
@Apputils@SaveMDIChildren$qqrp11Forms@TFormp17Inifiles@TIniFile
@Apputils@SaveMDIChildrenReg$qqrp11Forms@TFormp20Registry@TRegIniFile
@Apputils@ShowDialog$qqrp17System@TMetaClass
@Apputils@StrToIniStr$qqrx17System@AnsiString
@Apputils@WriteFormPlacement$qqrp11Forms@TFormp17Inifiles@TIniFilex17System@AnsiString
@Apputils@WriteFormPlacementReg$qqrp11Forms@TFormp20Registry@TRegIniFilex17System@AnsiString
@Apputils@initialization$qqrv
@Clipicon@AssignClipboardIcon$qqrp14Graphics@TIcon
@Clipicon@CF_ICON
@Clipicon@CopyIconToClipboard$qqrp14Graphics@TIcon15Graphics@TColor
@Clipicon@CreateIconFromClipboard$qqrv
@Clipicon@CreateRealSizeIcon$qqrp14Graphics@TIcon
@Clipicon@DrawRealSizeIcon$qqrp16Graphics@TCanvasp14Graphics@TIconii
@Clipicon@Finalization$qqrv
@Clipicon@GetIconSize$qqruirit2
@Clipicon@initialization$qqrv
@Dateutil@CenturyOffset
@Dateutil@CurrentYear$qqrv
@Dateutil@CutTime$qqr16System@TDateTime
@Dateutil@DateDiff$qqr16System@TDateTimet1rust3t3
@Dateutil@DaysBetween$qqr16System@TDateTimet1
@Dateutil@DaysInPeriod$qqr16System@TDateTimet1
@Dateutil@DaysPerMonth$qqrii
@Dateutil@DefDateFormat$qqro
@Dateutil@DefDateMask$qqrco
@Dateutil@ExtractDay$qqr16System@TDateTime
@Dateutil@ExtractMonth$qqr16System@TDateTime
@Dateutil@ExtractYear$qqr16System@TDateTime
@Dateutil@Finalization$qqrv
@Dateutil@FirstDayOfNextMonth$qqrv
@Dateutil@FirstDayOfPrevMonth$qqrv
@Dateutil@FormatLongDate$qqr16System@TDateTime
@Dateutil@FormatLongDateTime$qqr16System@TDateTime
@Dateutil@FourDigitYear
@Dateutil@GetDateOrder$qqrx17System@AnsiString
@Dateutil@IncDate$qqr16System@TDateTimeiii
@Dateutil@IncDay$qqr16System@TDateTimei
@Dateutil@IncHour$qqr16System@TDateTimei
@Dateutil@IncMSec$qqr16System@TDateTimei
@Dateutil@IncMinute$qqr16System@TDateTimei
@Dateutil@IncMonth$qqr16System@TDateTimei
@Dateutil@IncSecond$qqr16System@TDateTimei
@Dateutil@IncTime$qqr16System@TDateTimeiiii
@Dateutil@IncYear$qqr16System@TDateTimei
@Dateutil@IsLeapYear$qqri
@Dateutil@LastDayOfPrevMonth$qqrv
@Dateutil@MonthFromName$qqrx17System@AnsiStringuc
@Dateutil@MonthsBetween$qqr16System@TDateTimet1
@Dateutil@NullDate
@Dateutil@StrToDateDef$qqrx17System@AnsiString16System@TDateTime
@Dateutil@StrToDateFmt$qqrx17System@AnsiStringt1
@Dateutil@StrToDateFmtDef$qqrx17System@AnsiStringt116System@TDateTime
@Dateutil@ValidDate$qqr16System@TDateTime
@Dateutil@initialization$qqrv
@Ehsbase@Finalization$qqrv
@Ehsbase@TehsBase@
@Ehsbase@TehsBase@$bdtr$qqrv
@Ehsbase@TehsBase@Loaded$qqrv
@Ehsbase@TehsBase@WndProc$qqrr17Messages@TMessage
@Ehsbase@initialization$qqrv
@Ehscontextmap@Finalization$qqrv
@Ehscontextmap@THelpContextMap@
@Ehscontextmap@THelpContextMap@$bctr$qqrp18Classes@TComponent
@Ehscontextmap@THelpContextMap@$bdtr$qqrv
@Ehscontextmap@THelpContextMap@DefineProperties$qqrp14Classes@TFiler
@Ehscontextmap@THelpContextMap@GetContext$qqr17System@AnsiString
@Ehscontextmap@THelpContextMap@ReadFileData$qqrp15Classes@TStream
@Ehscontextmap@THelpContextMap@SetFileName$qqr17System@AnsiString
@Ehscontextmap@THelpContextMap@WriteFileData$qqrp15Classes@TStream
@Ehscontextmap@initialization$qqrv
@Ehshelprouter@Finalization$qqrv
@Ehshelprouter@GLOBAL_HELPROUTER
@Ehshelprouter@THelpRouter@
@Ehshelprouter@THelpRouter@$bctr$qqrp18Classes@TComponent
@Ehshelprouter@THelpRouter@$bdtr$qqrv
@Ehshelprouter@THelpRouter@CurrentForm$qqrv
@Ehshelprouter@THelpRouter@FindHandle$qqrv
@Ehshelprouter@THelpRouter@FindHelpfile$qqrv
@Ehshelprouter@THelpRouter@HTMLhelpInstalled$qqrv
@Ehshelprouter@THelpRouter@HelpALink$qqr17System@AnsiString
@Ehshelprouter@THelpRouter@HelpContent$qqrv
@Ehshelprouter@THelpRouter@HelpJump$qqr17System@AnsiStringt1
@Ehshelprouter@THelpRouter@HelpKLink$qqr17System@AnsiString
@Ehshelprouter@THelpRouter@HelpKeyword$qqr17System@AnsiString
@Ehshelprouter@THelpRouter@HelpPopup$qqriii17System@AnsiString
@Ehshelprouter@THelpRouter@OnRouteHelp$qqrusiro
@Ehshelprouter@THelpRouter@SetHelpType$qqr23Ehshelprouter@THelpType
@Ehshelprouter@THelpRouter@ValidateHTMLID$qqr17System@AnsiString
@Ehshelprouter@initialization$qqrv
@Ehshhapi@Finalization$qqrv
@Ehshhapi@HHCTRL
@Ehshhapi@HHLoaded$qqrv
@Ehshhapi@HtmlHelpA
@Ehshhapi@LoadHH$qqrv
@Ehshhapi@UnLoadHH$qqrv
@Ehshhapi@initialization$qqrv
@Ehshshtb@Finalization$qqrv
@Ehshshtb@GetHashValue$qqr17System@AnsiString
@Ehshshtb@initialization$qqrv
@Ehswhatsthis@Finalization$qqrv
@Ehswhatsthis@HelpItemClick$qqrp14System@TObject
@Ehswhatsthis@Keyboard_Proc$qqsiii
@Ehswhatsthis@Mouse_Proc$qqsiii
@Ehswhatsthis@TWhatsThis@
@Ehswhatsthis@TWhatsThis@$bctr$qqrp18Classes@TComponent
@Ehswhatsthis@TWhatsThis@$bdtr$qqrv
@Ehswhatsthis@TWhatsThis@Activate$qqrv
@Ehswhatsthis@TWhatsThis@CancelContextHelp$qqrv
@Ehswhatsthis@TWhatsThis@ContextHelp$qqrv
@Ehswhatsthis@TWhatsThis@ControlFromHandle$qqrui
@Ehswhatsthis@TWhatsThis@ControlFromPoint$qqruirx14Windows@TPoint
@Ehswhatsthis@TWhatsThis@Deactivate$qqrv
@Ehswhatsthis@TWhatsThis@DoOnHelp$qqrp14System@TObjectoiiiro
@Ehswhatsthis@TWhatsThis@FindMenuItem$qqruiii
@Ehswhatsthis@TWhatsThis@HookCallWnd$qqrv
@Ehswhatsthis@TWhatsThis@HookWindow$qqrui
@Ehswhatsthis@TWhatsThis@InvokeHelp$qqrii
@Ehswhatsthis@TWhatsThis@Loaded$qqrv
@Ehswhatsthis@TWhatsThis@Notification$qqrp18Classes@TComponent18Classes@TOperation
@Ehswhatsthis@TWhatsThis@SetActive$qqro
@Ehswhatsthis@TWhatsThis@SetHelpContextMap$qqrp29Ehscontextmap@THelpContextMap
@Ehswhatsthis@TWhatsThis@SetMode$qqr27Ehswhatsthis@TWhatsThisMode
@Ehswhatsthis@TWhatsThis@SetPopupCaption$qqr17System@AnsiString
@Ehswhatsthis@TWhatsThis@SetPopupHelpContext$qqri
@Ehswhatsthis@TWhatsThis@SetWTMenuItem$qqrp15Menus@TMenuItem
@Ehswhatsthis@TWhatsThis@SetWTToolbarButton$qqrp17Controls@TControl
@Ehswhatsthis@TWhatsThis@UnhookCallWnd$qqrv
@Ehswhatsthis@TWhatsThis@UnhookWindow$qqrv
@Ehswhatsthis@TWhatsThis@UpdateControlEvents$qqro
@Ehswhatsthis@TWhatsThis@UpdateControls$qqro
@Ehswhatsthis@TWhatsThis@WhatsThisMenuClick$qqrp14System@TObject
@Ehswhatsthis@TWhatsThis@WindowHookProc$qqrr17Messages@TMessage
@Ehswhatsthis@TWhatsThis@WndProc$qqrr17Messages@TMessage
@Ehswhatsthis@initialization$qqrv
@Fileutil@BrowseComputer$qqrr17System@AnsiStringx17System@AnsiStringi
@Fileutil@BrowseDirectory$qqrr17System@AnsiStringx17System@AnsiStringi
@Fileutil@ClearDir$qqrx17System@AnsiStringo
@Fileutil@CopyFile$qqrx17System@AnsiStringt1p17Controls@TControl
@Fileutil@CopyFileEx$qqrx17System@AnsiStringt1oop17Controls@TControl
@Fileutil@CreateFileLink$qqrx17System@AnsiStringt1i
@Fileutil@DeleteFileLink$qqrx17System@AnsiStringi
@Fileutil@DeleteFiles$qqrx17System@AnsiString
@Fileutil@DeleteFilesEx$qqrpx17System@AnsiStringxi
@Fileutil@DirExists$qqr17System@AnsiString
@Fileutil@FileDateTime$qqrx17System@AnsiString
@Fileutil@FileLock$qqriii
@Fileutil@FileLock$qqrijj
@Fileutil@FileUnlock$qqriii
@Fileutil@FileUnlock$qqrijj
@Fileutil@Finalization$qqrv
@Fileutil@ForceDirectories$qqr17System@AnsiString
@Fileutil@GetFileSize$qqrx17System@AnsiString
@Fileutil@GetSystemDir$qqrv
@Fileutil@GetTempDir$qqrv
@Fileutil@GetWindowsDir$qqrv
@Fileutil@HasAttr$qqrx17System@AnsiStringi
@Fileutil@LongToShortFileName$qqrx17System@AnsiString
@Fileutil@LongToShortPath$qqrx17System@AnsiString
@Fileutil@MoveFile$qqrx17System@AnsiStringt1
@Fileutil@MoveFileEx$qqrx17System@AnsiStringt1o
@Fileutil@NormalDir$qqrx17System@AnsiString
@Fileutil@RemoveBackSlash$qqrx17System@AnsiString
@Fileutil@ShortToLongFileName$qqrx17System@AnsiString
@Fileutil@ShortToLongPath$qqrx17System@AnsiString
@Fileutil@ValidFileName$qqrx17System@AnsiString
@Fileutil@initialization$qqrv
@Icolist@Finalization$qqrv
@Icolist@TIconList@
@Icolist@TIconList@$bctr$qqrv
@Icolist@TIconList@$bdtr$qqrv
@Icolist@TIconList@Add$qqrp14Graphics@TIcon
@Icolist@TIconList@AddIcon$qqrp14Graphics@TIcon
@Icolist@TIconList@AddResource$qqruipc
@Icolist@TIconList@Assign$qqrp19Classes@TPersistent
@Icolist@TIconList@BeginUpdate$qqrv
@Icolist@TIconList@Changed$qqrv
@Icolist@TIconList@Clear$qqrv
@Icolist@TIconList@DefineProperties$qqrp14Classes@TFiler
@Icolist@TIconList@Delete$qqri
@Icolist@TIconList@EndUpdate$qqrv
@Icolist@TIconList@Exchange$qqrii
@Icolist@TIconList@Get$qqri
@Icolist@TIconList@GetCount$qqrv
@Icolist@TIconList@IconChanged$qqrp14System@TObject
@Icolist@TIconList@IndexOf$qqrp14Graphics@TIcon
@Icolist@TIconList@Insert$qqrip14Graphics@TIcon
@Icolist@TIconList@InsertResource$qqriuipc
@Icolist@TIconList@LoadFromStream$qqrp15Classes@TStream
@Icolist@TIconList@LoadResource$qqruippxcxi
@Icolist@TIconList@Move$qqrii
@Icolist@TIconList@Put$qqrip14Graphics@TIcon
@Icolist@TIconList@ReadData$qqrp15Classes@TStream
@Icolist@TIconList@SaveToStream$qqrp15Classes@TStream
@Icolist@TIconList@SetUpdateState$qqro
@Icolist@TIconList@WriteData$qqrp15Classes@TStream
@Icolist@initialization$qqrv
@Maxmin@Finalization$qqrv
@Maxmin@Max$qqrii
@Maxmin@MaxDateTime$qqrpx16System@TDateTimexi
@Maxmin@MaxFloat$qqrpxgxi
@Maxmin@MaxInt64$qqrpxjxi
@Maxmin@MaxInteger$qqrpxixi
@Maxmin@MaxOf$qqrpx14System@Variantxi
@Maxmin@Min$qqrii
@Maxmin@MinDateTime$qqrpx16System@TDateTimexi
@Maxmin@MinFloat$qqrpxgxi
@Maxmin@MinInt64$qqrpxjxi
@Maxmin@MinInteger$qqrpxixi
@Maxmin@MinOf$qqrpx14System@Variantxi
@Maxmin@SwapInt$qqrrit1
@Maxmin@SwapInt64$qqrrjt1
@Maxmin@SwapLong$qqrrit1
@Maxmin@initialization$qqrv
@Placemnt@Finalization$qqrv
@Placemnt@TFormPlacement@
@Placemnt@TFormPlacement@$bctr$qqrp18Classes@TComponent
@Placemnt@TFormPlacement@$bdtr$qqrv
@Placemnt@TFormPlacement@AddLink$qqrp17Placemnt@TIniLink
@Placemnt@TFormPlacement@CheckMinMaxInfo$qqrv
@Placemnt@TFormPlacement@CheckToggleHook$qqrv
@Placemnt@TFormPlacement@DoReadString$qqrx17System@AnsiStringt1t1
@Placemnt@TFormPlacement@DoWriteString$qqrx17System@AnsiStringt1t1
@Placemnt@TFormPlacement@EraseSections$qqrv
@Placemnt@TFormPlacement@FormCloseQuery$qqrp14System@TObjectro
@Placemnt@TFormPlacement@FormDestroy$qqrp14System@TObject
@Placemnt@TFormPlacement@FormShow$qqrp14System@TObject
@Placemnt@TFormPlacement@GetForm$qqrv
@Placemnt@TFormPlacement@GetIniFile$qqrv
@Placemnt@TFormPlacement@GetIniFileName$qqrv
@Placemnt@TFormPlacement@GetIniSection$qqrv
@Placemnt@TFormPlacement@IniFree$qqrv
@Placemnt@TFormPlacement@IniNeeded$qqro
@Placemnt@TFormPlacement@Loaded$qqrv
@Placemnt@TFormPlacement@MinMaxInfoModified$qqrv
@Placemnt@TFormPlacement@NotifyLinks$qqr28Placemnt@TPlacementOperation
@Placemnt@TFormPlacement@ReadInteger$qqrx17System@AnsiStringi
@Placemnt@TFormPlacement@ReadString$qqrx17System@AnsiStringt1
@Placemnt@TFormPlacement@ReleaseHook$qqrv
@Placemnt@TFormPlacement@RemoveLink$qqrp17Placemnt@TIniLink
@Placemnt@TFormPlacement@Restore$qqrv
@Placemnt@TFormPlacement@RestoreEvents$qqrv
@Placemnt@TFormPlacement@RestoreFormPlacement$qqrv
@Placemnt@TFormPlacement@RestorePlacement$qqrv
@Placemnt@TFormPlacement@Save$qqrv
@Placemnt@TFormPlacement@SaveFormPlacement$qqrv
@Placemnt@TFormPlacement@SavePlacement$qqrv
@Placemnt@TFormPlacement@SetEvents$qqrv
@Placemnt@TFormPlacement@SetHook$qqrv
@Placemnt@TFormPlacement@SetIniFileName$qqrx17System@AnsiString
@Placemnt@TFormPlacement@SetIniSection$qqrx17System@AnsiString
@Placemnt@TFormPlacement@SetPreventResize$qqro
@Placemnt@TFormPlacement@SetWinMinMaxInfo$qqrp23Placemnt@TWinMinMaxInfo
@Placemnt@TFormPlacement@UpdatePlacement$qqrv
@Placemnt@TFormPlacement@UpdatePreventResize$qqrv
@Placemnt@TFormPlacement@WndMessage$qqrp14System@TObjectr17Messages@TMessagero
@Placemnt@TFormPlacement@WriteInteger$qqrx17System@AnsiStringi
@Placemnt@TFormPlacement@WriteString$qqrx17System@AnsiStringt1
@Placemnt@TFormStorage@
@Placemnt@TFormStorage@$bctr$qqrp18Classes@TComponent
@Placemnt@TFormStorage@$bdtr$qqrv
@Placemnt@TFormStorage@GetStoredValue$qqrx17System@AnsiString
@Placemnt@TFormStorage@Loaded$qqrv
@Placemnt@TFormStorage@Notification$qqrp18Classes@TComponent18Classes@TOperation
@Placemnt@TFormStorage@RestorePlacement$qqrv
@Placemnt@TFormStorage@RestoreProperties$qqrv
@Placemnt@TFormStorage@SavePlacement$qqrv
@Placemnt@TFormStorage@SaveProperties$qqrv
@Placemnt@TFormStorage@SetNotification$qqrv
@Placemnt@TFormStorage@SetStoredProps$qqrp16Classes@TStrings
@Placemnt@TFormStorage@SetStoredValue$qqrx17System@AnsiStringrx14System@Variant
@Placemnt@TFormStorage@SetStoredValues$qqrp22Placemnt@TStoredValues
@Placemnt@TFormStorage@WriteState$qqrp15Classes@TWriter
@Placemnt@TIniLink@
@Placemnt@TIniLink@$bdtr$qqrv
Sections
Size: 361KB - Virtual size: 964KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 173KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 96KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
file_id.diz
-
license.doc.doc windows office2003
ThisDocument
-
order.txt
-
readme.txt