c:\Source\photoshop\e3\iaccore\Release\iaccore.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3f34d3543dc75a76361bec8068b9b349_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3f34d3543dc75a76361bec8068b9b349_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
3f34d3543dc75a76361bec8068b9b349_JaffaCakes118
-
Size
256KB
-
MD5
3f34d3543dc75a76361bec8068b9b349
-
SHA1
e829c8e2b861db3dcab83f82f96513fc038f4625
-
SHA256
679cd9264e18181d405734435529e5bfa3aa18911c094e3159a416a2e2f7333d
-
SHA512
9161f98b7850632a2e51531dc6968a102c0d4d6bf561d9017b1b47a89d7953fa7515b4585673c3c6305185cad3efb3253eadf498f5695f510af718688d800683
-
SSDEEP
6144:GBa1NEh0USSIalHptCYC1neMb4cRGanVIq:GmJOlJtC5manyq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f34d3543dc75a76361bec8068b9b349_JaffaCakes118
Files
-
3f34d3543dc75a76361bec8068b9b349_JaffaCakes118.dll windows:4 windows x86 arch:x86
e1d346364ab73c1e44763b20a28787f0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GlobalMemoryStatus
Sleep
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoW
FindNextFileW
FindClose
FindFirstFileExW
GetVersionExA
CreateProcessW
GetStdHandle
GetExitCodeProcess
CloseHandle
CreateFileA
SetLastError
GetModuleFileNameA
FlushFileBuffers
WriteFile
GetLocalTime
GetSystemInfo
LCMapStringW
LCMapStringA
GetLocaleInfoA
SetStdHandle
ReadFile
GetStringTypeW
GetStringTypeA
InitializeCriticalSection
GetCPInfo
GetOEMCP
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetComputerNameA
GetLastError
GetSystemTimeAsFileTime
GetACP
IsBadCodePtr
InterlockedExchange
LoadLibraryA
IsBadWritePtr
SetFilePointer
UnhandledExceptionFilter
VirtualFree
ExitProcess
RtlUnwind
RaiseException
IsBadReadPtr
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
GetCommandLineA
HeapFree
HeapAlloc
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
HeapReAlloc
HeapSize
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualProtect
VirtualAlloc
VirtualQuery
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
user32
GetTopWindow
GetWindowThreadProcessId
FindWindowW
GetQueueStatus
PeekMessageA
SendMessageA
FindWindowA
RegisterClassA
CreateWindowExA
DefWindowProcA
DestroyWindow
EnumThreadWindows
IsIconic
ShowWindow
SetForegroundWindow
GetWindowLongA
GetWindow
IsWindowEnabled
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyExA
shell32
ShellExecuteExW
ShellExecuteExA
SHGetSpecialFolderPathW
ole32
CoCreateInstance
CoInitialize
CoUninitialize
Exports
Exports
??0XPEPAppFactory@@QAE@ABV0@@Z
??0XPEPAppFactory@@QAE@XZ
??0XPEPCommandDataDeallocator@@QAE@ABV0@@Z
??0XPEPCommandDataDeallocator@@QAE@XZ
??0XPEPCommandSession@@IAE@AAV?$linear_ptr@VXPEPTerminal@@U?$deallocate_generic@PAVXPEPTerminal@@@@@@AAV?$linear_ptr@VXPEPSessionInterface@@U?$deallocate_generic@PAVXPEPSessionInterface@@@@@@ABVZUID@@2PBV3@@Z
??0XPEPCommandSession@@QAE@ABV0@@Z
??0XPEPCommandSessionInterface@@QAE@ABV0@@Z
??0XPEPCommandSessionInterface@@QAE@XZ
??0XPEPFileSession@@IAE@V?$linear_array@GU?$deallocate_array@PAG@@@@AAV?$linear_ptr@VXPEPTerminal@@U?$deallocate_generic@PAVXPEPTerminal@@@@@@AAV?$linear_ptr@VXPEPSessionInterface@@U?$deallocate_generic@PAVXPEPSessionInterface@@@@@@ABVZUID@@3PBV4@W4XPEPEditMode@@@Z
??0XPEPFileSession@@QAE@ABV0@@Z
??0XPEPFileSessionInterface@@QAE@ABV0@@Z
??0XPEPFileSessionInterface@@QAE@XZ
??0XPEPObserverSession@@IAE@V?$linear_array@GU?$deallocate_array@PAG@@@@AAV?$linear_ptr@VXPEPTerminal@@U?$deallocate_generic@PAVXPEPTerminal@@@@@@AAV?$linear_ptr@VXPEPSessionInterface@@U?$deallocate_generic@PAVXPEPSessionInterface@@@@@@ABVZUID@@3PBV4@@Z
??0XPEPObserverSession@@QAE@ABV0@@Z
??0XPEPObserverSessionInterface@@QAE@ABV0@@Z
??0XPEPObserverSessionInterface@@QAE@XZ
??0XPEPParameterList@@IAE@XZ
??0XPEPParameterList@@QAE@ABV0@@Z
??0XPEPSession@@IAE@AAV?$linear_ptr@VXPEPTerminal@@U?$deallocate_generic@PAVXPEPTerminal@@@@@@AAV?$linear_ptr@VXPEPSessionInterface@@U?$deallocate_generic@PAVXPEPSessionInterface@@@@@@ABVZUID@@2PBV3@@Z
??0XPEPSession@@QAE@ABV0@@Z
??0XPEPSessionInterface@@QAE@ABV0@@Z
??0XPEPSessionInterface@@QAE@XZ
??0XPEPSessionMgr@@QAE@XZ
??0ZUID@@QAE@ABU_GUID@@@Z
??0ZUID@@QAE@ABV0@@Z
??0ZUID@@QAE@ABV0@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0ZUID@@QAE@ABV0@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
??0ZUID@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0ZUID@@QAE@PBD@Z
??0ZUID@@QAE@XZ
??1XPEPAppFactory@@UAE@XZ
??1XPEPCommandSession@@UAE@XZ
??1XPEPCommandSessionInterface@@UAE@XZ
??1XPEPFileSession@@UAE@XZ
??1XPEPFileSessionInterface@@UAE@XZ
??1XPEPObserverSession@@UAE@XZ
??1XPEPObserverSessionInterface@@UAE@XZ
??1XPEPParameterList@@UAE@XZ
??1XPEPSession@@UAE@XZ
??1XPEPSessionInterface@@UAE@XZ
??1XPEPSessionMgr@@QAE@XZ
??1ZUID@@QAE@XZ
??4XPEPAppFactory@@QAEAAV0@ABV0@@Z
??4XPEPCommandDataDeallocator@@QAEAAV0@ABV0@@Z
??4XPEPCommandSession@@QAEAAV0@ABV0@@Z
??4XPEPCommandSessionInterface@@QAEAAV0@ABV0@@Z
??4XPEPFileSession@@QAEAAV0@ABV0@@Z
??4XPEPFileSessionInterface@@QAEAAV0@ABV0@@Z
??4XPEPObserverSession@@QAEAAV0@ABV0@@Z
??4XPEPObserverSessionInterface@@QAEAAV0@ABV0@@Z
??4XPEPParameterList@@QAEAAV0@ABV0@@Z
??4XPEPSession@@QAEAAV0@ABV0@@Z
??4XPEPSessionInterface@@QAEAAV0@ABV0@@Z
??4XPEPSessionMgr@@QAEAAV0@ABV0@@Z
??4ZUID@@QAEAAV0@ABV0@@Z
??8ZUID@@QBE_NABV0@@Z
??9ZUID@@QBE_NABV0@@Z
??MZUID@@QBE_NABV0@@Z
??_7XPEPAppFactory@@6B@
??_7XPEPCommandDataDeallocator@@6B@
??_7XPEPCommandSession@@6B@
??_7XPEPCommandSessionInterface@@6B@
??_7XPEPFileSession@@6B@
??_7XPEPFileSessionInterface@@6B@
??_7XPEPObserverSession@@6B@
??_7XPEPObserverSessionInterface@@6B@
??_7XPEPParameterList@@6B@
??_7XPEPSession@@6B@
??_7XPEPSessionInterface@@6B@
?AddDeallocator@XPEPCommandSession@@QAEXPAVXPEPCommandDataDeallocator@@@Z
?AddSession@XPEPSessionMgr@@QAEXPAVXPEPSession@@@Z
?AttachObservers@XPEPAppFactory@@UAEXAAVZUID@@@Z
?BeNice@XPEPAppFactory@@UAEXXZ
?BringAppFront@XPEPLaunch@@YAXPBGW4LauncherSearchHint@1@@Z
?CheckForXPEPMessages@XPEPSession@@QAEXXZ
?CheckRemoteInitiate@XPEPCommandSession@@QAEXABVZUID@@@Z
?ClientClose@XPEPCommandSession@@QAEXXZ
?CreateFileSession@XPEPSessionMgr@@QAEPAVXPEPFileSession@@AAVZUID@@0PBDKW4XPEPEditMode@@PAVXPEPFileSessionInterface@@PAW4XEDStatus@@1@Z
?CreateObserverSession@XPEPSessionMgr@@QAEPAVXPEPObserverSession@@AAVZUID@@PBDPAVXPEPObserverSessionInterface@@PAW4XEDStatus@@@Z
?DisableSendTerminators@XPEPSessionMgr@@QAEXXZ
?DoIdleTimeCommandProcessing@XPEPSessionMgr@@QAEXXZ
?EditMode@XPEPFileSession@@QAE?AW4XPEPEditMode@@XZ
?EndSession@XPEPSession@@QAEXXZ
?EndSession@XPEPSessionInterface@@UAEXXZ
?FindCommandSession@XPEPSessionMgr@@QAEPAVXPEPCommandSession@@XZ
?FindNotifier@XPEPSessionMgr@@QAEPAVXPEPObserverSession@@PAG@Z
?GetActiveCommand@XPEPCommandSession@@QAEPAVXPEPCommandPacket@@XZ
?GetActiveResponse@XPEPCommandSession@@QAEPAVXPEPCommandPacket@@XZ
?GetActiveXPEPCommand@XPEPSession@@QAE_NAAVZUID@@AAK@Z
?GetAppFactory@XPEPSessionMgr@@QAEPAVXPEPAppFactory@@XZ
?GetApplicationCommandLine@XPEPAppFactory@@UAE_NAAVZUID@@PADH@Z
?GetApplicationKey@XPEPSessionMgr@@SA?AVZUID@@PBD@Z
?GetApplicationKey@XPEPSessionMgr@@SA?AVZUID@@W4XEDTargetEditor@@@Z
?GetApplicationPath@XPEPAppFactory@@UAE_NAAVZUID@@PADH@Z
?GetApplicationString@XPEPSessionMgr@@SAPBDABVZUID@@@Z
?GetApplicationVersion@XPEPAppFactory@@UAE_NPADH@Z
?GetBTFString@XPEPSessionMgr@@SAXPBDPADH@Z
?GetClientContext@XPEPCommandSession@@QAEPAUsoap@@XZ
?GetCommandSession@XPEPSessionMgr@@QAEPAVXPEPCommandSession@@AAVZUID@@@Z
?GetConnectedApps@XPEPCommandSession@@UAEXAAV?$vector@VZUID@@V?$allocator@VZUID@@@std@@@std@@@Z
?GetConnectedApps@XPEPObserverSession@@UAEXAAV?$vector@VZUID@@V?$allocator@VZUID@@@std@@@std@@@Z
?GetConnectedApps@XPEPSession@@UAEXAAV?$vector@VZUID@@V?$allocator@VZUID@@@std@@@std@@@Z
?GetConnectedApps@XPEPSessionMgr@@QAEXAAV?$vector@VZUID@@V?$allocator@VZUID@@@std@@@std@@@Z
?GetDisplayName@XPEPLaunch@@YA_NPBG00PAGH@Z
?GetDocumentPath@XPEPFileSession@@QAEPBGXZ
?GetEditorType@XPEPSessionMgr@@SA?AW4XEDTargetEditor@@AAVZUID@@@Z
?GetFloat@XPEPParameterList@@UBEFKAAN@Z
?GetImmediateProcessingMode@XPEPSessionMgr@@QAE_NXZ
?GetInt32@XPEPParameterList@@UBEFKAAJ@Z
?GetObserverName@XPEPObserverSession@@QAEPBGXZ
?GetOtherAppID@XPEPSession@@QAEABVZUID@@XZ
?GetPath@XPEPLaunch@@YA_NPBG00000PAGH1H@Z
?GetPath@XPEPSessionMgr@@SA?AW4XEDStatus@@VZUID@@PADH@Z
?GetSessionID@XPEPSession@@QAEABVZUID@@XZ
?GetSessionInterface@XPEPSession@@QAEPAVXPEPSessionInterface@@XZ
?GetSessionMgr@XPEPSessionMgr@@SAAAV1@XZ
?GetSessionTypeID@XPEPSession@@QAEABVZUID@@XZ
?GetSessionVersion@XPEPSession@@QAEFXZ
?GetSoapInitializer@XPEPSessionMgr@@QAEP6AXPAUsoap@@@ZXZ
?GetSoapServers@XPEPSessionMgr@@QAEXAAV?$vector@P6AHPAUsoap@@@ZV?$allocator@P6AHPAUsoap@@@Z@std@@@std@@@Z
?GetString@XPEPParameterList@@UBEFKAAV?$linear_array@GU?$deallocate_array@PAG@@@@@Z
?GetTerminal@XPEPSession@@QAEPAVXPEPTerminal@@XZ
?GetZUID@XPEPParameterList@@UBEFKAAVZUID@@@Z
?Init@XPEPCommandSession@@UAEXABVZUID@@@Z
?Init@XPEPFileSession@@UAEXABVZUID@@@Z
?Init@XPEPObserverSession@@UAEXABVZUID@@@Z
?Init@XPEPSession@@MAEXABVZUID@@@Z
?InitXPEP@@YAXXZ
?InitializeXPEP@XPEPSessionMgr@@SAXXZ
?InitiateRemoteSession@XPEPCommandSession@@AAEXABVZUID@@@Z
?InsertFloat@XPEPParameterList@@UAEFKABN@Z
?InsertInt32@XPEPParameterList@@UAEFKJ@Z
?InsertString@XPEPParameterList@@UAEFKPBG@Z
?InsertZUID@XPEPParameterList@@UAEFKABVZUID@@@Z
?IsAsyncMessaging@XPEPSessionMgr@@QAE_NXZ
?IsDocumentModal@XPEPFileSession@@QAE_NXZ
?IsFrontProcess@XPEPLaunch@@YA_NPBG@Z
?IsRunning@@YA_NVZUID@@@Z
?IsRunning@XPEPLaunch@@YA_NPBG@Z
?IsSessionStarted@XPEPSession@@QAE_NXZ
?LaunchAssociatedEditor@XPEPLaunch@@YA_NPBGW4BlockingOption@1@@Z
?Make@XPEPCommandSession@@SAPAV1@AAV?$linear_ptr@VXPEPTerminal@@U?$deallocate_generic@PAVXPEPTerminal@@@@@@AAV?$linear_ptr@VXPEPSessionInterface@@U?$deallocate_generic@PAVXPEPSessionInterface@@@@@@ABVZUID@@2PBV4@@Z
?Make@XPEPFileSession@@SAPAV1@AAV?$linear_array@GU?$deallocate_array@PAG@@@@AAV?$linear_ptr@VXPEPTerminal@@U?$deallocate_generic@PAVXPEPTerminal@@@@@@AAV?$linear_ptr@VXPEPSessionInterface@@U?$deallocate_generic@PAVXPEPSessionInterface@@@@@@ABVZUID@@3PBV5@W4XPEPEditMode@@@Z
?Make@XPEPObserverSession@@SAPAV1@AAV?$linear_array@GU?$deallocate_array@PAG@@@@AAV?$linear_ptr@VXPEPTerminal@@U?$deallocate_generic@PAVXPEPTerminal@@@@@@AAV?$linear_ptr@VXPEPSessionInterface@@U?$deallocate_generic@PAVXPEPSessionInterface@@@@@@ABVZUID@@3PBV5@@Z
?Make@XPEPParameterList@@SAPAV1@XZ
?PreReceiveMessage@XPEPCommandSessionInterface@@UAEXK@Z
?PreReceiveMessage@XPEPObserverSessionInterface@@UAEXK@Z
?PreReceiveMessage@XPEPSession@@QAEXK@Z
?PreReceiveMessage@XPEPSessionInterface@@UAEXK@Z
?ProcessCommandQueue@XPEPCommandSession@@QAEXXZ
?ReceiveAcknowledge@XPEPCommandSessionInterface@@UAEXABVZUID@@KF@Z
?ReceiveAcknowledge@XPEPFileSession@@UAEXABVZUID@@FPAV2@@Z
?ReceiveAcknowledge@XPEPObserverSession@@UAEXABVZUID@@FPAV2@@Z
?ReceiveAcknowledge@XPEPObserverSessionInterface@@UAEXABVZUID@@KF@Z
?ReceiveAcknowledge@XPEPSession@@UAEXABVZUID@@FPAV2@@Z
?ReceiveActivateSession@XPEPSession@@QAEXABVZUID@@@Z
?ReceiveActivateSession@XPEPSessionInterface@@UAEFABVZUID@@@Z
?ReceiveCommandRequestData@XPEPCommandSession@@UAEXABVZUID@@0PBD_N@Z
?ReceiveCommandRequestExecute@XPEPCommandSession@@UAEXABVZUID@@0PBD@Z
?ReceiveCommandResponse@XPEPCommandSession@@UAEXABVZUID@@0PBD@Z
?ReceiveDocument@XPEPFileSession@@QAEXABVZUID@@_NABV?$linear_array@GU?$deallocate_array@PAG@@@@@Z
?ReceiveInitiate@XPEPCommandSession@@UAEXABVZUID@@FF@Z
?ReceiveInitiate@XPEPSession@@UAEXABVZUID@@FF@Z
?ReceiveInitiateVersion@XPEPCommandSession@@UAEXABVZUID@@F@Z
?ReceiveInitiateVersion@XPEPObserverSession@@UAEXABVZUID@@F@Z
?ReceiveInitiateVersion@XPEPSession@@UAEXABVZUID@@F@Z
?ReceiveMessage@XPEPSession@@UAEXABVZUID@@KPBVXPEPParameterList@@@Z
?ReceiveMessage@XPEPSessionInterface@@UAEFABVZUID@@KPBVXPEPParameterList@@@Z
?ReceiveOutputOptimized@XPEPSession@@QAEXABVZUID@@ABV?$linear_array@GU?$deallocate_array@PAG@@@@KAAV?$linear_array@EU?$deallocate_array@PAE@@@@@Z
?ReceiveOutputOptimized@XPEPSessionInterface@@UAEFABVZUID@@ABV?$linear_array@GU?$deallocate_array@PAG@@@@KAAV?$linear_array@EU?$deallocate_array@PAE@@@@@Z
?ReceiveOutputOptimizedFinished@XPEPSession@@QAEXABVZUID@@ABV?$linear_array@GU?$deallocate_array@PAG@@@@KAAV?$linear_array@EU?$deallocate_array@PAE@@@@@Z
?ReceiveOutputOptimizedFinished@XPEPSessionInterface@@UAEFABVZUID@@ABV?$linear_array@GU?$deallocate_array@PAG@@@@KAAV?$linear_array@EU?$deallocate_array@PAE@@@@@Z
?ReceivePing@XPEPSession@@QAEXABVZUID@@@Z
?ReceiveQuerySessionDocument@XPEPFileSession@@QAEXABVZUID@@@Z
?ReceiveRequestDocument@XPEPCommandSessionInterface@@UAEFABVZUID@@_N@Z
?ReceiveRequestDocument@XPEPFileSession@@QAEXABVZUID@@_N@Z
?ReceiveRequestDocument@XPEPObserverSessionInterface@@UAEFABVZUID@@_N@Z
?ReceiveResumeEdit@XPEPFileSession@@QAEXABVZUID@@@Z
?ReceiveSetDocumentPath@XPEPFileSession@@QAEXABVZUID@@AAV?$linear_array@GU?$deallocate_array@PAG@@@@@Z
?ReceiveSetDocumentPath@XPEPFileSessionInterface@@UAEFABVZUID@@ABV?$linear_array@GU?$deallocate_array@PAG@@@@@Z
?ReceiveSuspendEdit@XPEPFileSession@@QAEXABVZUID@@@Z
?ReceiveTerminateReceiver@XPEPCommandSessionInterface@@UAEXABVZUID@@@Z
?ReceiveTerminateReceiver@XPEPObserverSessionInterface@@UAEXABVZUID@@@Z
?ReceiveTerminateReceiver@XPEPSession@@QAEXABVZUID@@@Z
?ReceiveTerminateSender@XPEPCommandSession@@UAEXABVZUID@@0_N@Z
?ReceiveTerminateSender@XPEPCommandSessionInterface@@UAEXABVZUID@@@Z
?ReceiveTerminateSender@XPEPObserverSession@@UAEXABVZUID@@0_N@Z
?ReceiveTerminateSender@XPEPObserverSessionInterface@@UAEXABVZUID@@@Z
?ReceiveTerminateSender@XPEPSession@@UAEXABVZUID@@0_N@Z
?RecieveAddObserver@XPEPObserverSession@@QAEXABVZUID@@0@Z
?RecieveNotifyEvent@XPEPObserverSession@@QAEXHPBD@Z
?RegisterApplication@XPEPSessionMgr@@QAEXPBD_N@Z
?RegisterGlobalZUID@XPEPSessionMgr@@SAXAAVZUID@@@Z
?RegisterNamespace@XPEPCommandSession@@SAXPBD_N@Z
?RegisterSoapInitializer@XPEPSessionMgr@@QAEXP6AXPAUsoap@@@Z@Z
?RegisterSoapServer@XPEPSessionMgr@@QAEXP6AHPAUsoap@@@Z@Z
?ResolveFileShortcut@XPEPLaunch@@YA_NPBGPAGH@Z
?SendAcknowledge@XPEPSession@@QAEXABVZUID@@F_N@Z
?SendActivateSession@XPEPSession@@QAEXXZ
?SendCommandResponse@XPEPCommandSession@@UAEXABVZUID@@PBDH@Z
?SendDocument@XPEPFileSession@@QAEXPAG@Z
?SendIACMessage@XPEPSession@@QAEXKPBVXPEPParameterList@@@Z
?SendNotifyObservers@XPEPObserverSession@@QAEXHPBD@Z
?SendOutputOptimized@XPEPSession@@QAEXPBGKPBX@Z
?SendOutputOptimizedFinished@XPEPSession@@QAEXPBGKPBX@Z
?SendPing@XPEPSession@@QAEXXZ
?SendQuerySessionDocument@XPEPFileSession@@QAEXXZ
?SendRemoteCommandData@XPEPCommandSession@@UAE_NABVZUID@@PBDH_N@Z
?SendRemoteCommandExecute@XPEPCommandSession@@UAE_NABVZUID@@_N@Z
?SendRequestDocument@XPEPFileSession@@QAEXXZ
?SendResumeEdit@XPEPFileSession@@QAEXXZ
?SendSetDocumentPath@XPEPFileSession@@QAEXPAG@Z
?SendSignal@XPEPSessionMgr@@QAEXPBDH0@Z
?SendSuspendEdit@XPEPFileSession@@QAEXXZ
?SendTerminateReceiver@XPEPSession@@QAEX_N@Z
?SendTerminateSender@XPEPSession@@QAEX_N@Z
?SessionEnded@XPEPSessionMgr@@QAEXPAVXPEPSession@@@Z
?SessionReady@XPEPCommandSessionInterface@@UAEXXZ
?SessionReady@XPEPObserverSessionInterface@@UAEXXZ
?SetActiveXPEPCommand@XPEPSession@@QAEXAAVZUID@@K@Z
?SetAppFactory@XPEPSessionMgr@@QAEXPAVXPEPAppFactory@@@Z
?SetImmediateProcessingMode@XPEPSessionMgr@@QAEX_N@Z
?SetMessageProcessingMode@XPEPSessionMgr@@QAEX_N@Z
?SetOtherAppID@XPEPCommandSession@@UAEXABVZUID@@0@Z
?SetOtherAppID@XPEPObserverSession@@UAEXABVZUID@@0@Z
?SetOtherAppID@XPEPSession@@UAEXABVZUID@@0@Z
?SetReceiveDocStatus@XPEPFileSession@@QAEXF@Z
?SetSessionID@XPEPSession@@QAEXAAVZUID@@@Z
?SetSessionTypeID@XPEPSession@@QAEXABVZUID@@@Z
?SetSessionVersion@XPEPSession@@QAEXF@Z
?SetXPEPSession@XPEPCommandSessionInterface@@EAEXPAVXPEPSession@@@Z
?SetXPEPSession@XPEPFileSessionInterface@@EAEXPAVXPEPSession@@@Z
?SetXPEPSession@XPEPObserverSessionInterface@@EAEXPAVXPEPSession@@@Z
?SetXPEPSession@XPEPSessionInterface@@EAEXPAVXPEPSession@@@Z
?StartApp@XPEPLaunch@@YA_NPBG00PAPAX@Z
?StartApplication@XPEPSessionMgr@@QAE_NAAVZUID@@@Z
?SyncSessionReady@XPEPObserverSession@@QAE_NXZ
?TerminateAllConnectedApps@XPEPSessionMgr@@QAEX_N@Z
?TerminateApplication@XPEPSessionMgr@@QAEXAAVZUID@@_N@Z
?TerminateXPEP@@YAXXZ
?TerminateXPEP@XPEPSessionMgr@@SAXXZ
?XEDCancelEdit@XPEPSessionMgr@@QAE?AW4XEDStatus@@W4XEDTargetEditor@@AAVZUID@@@Z
?XEDHandleCopyData@XPEPSessionMgr@@QAE_NHH@Z
?XEDIsInstalled@XPEPSessionMgr@@QAE_NW4XEDTargetEditor@@@Z
?XEDStartEditor@XPEPSessionMgr@@QAE?AW4XEDStatus@@W4XEDTargetEditor@@@Z
?XPEPAppStatusReply@XPEPAppFactory@@UAEXFABVZUID@@@Z
?XPEPCanSendMessage@@YA_N_N@Z
?XPEPIdle@@YAXXZ
?XPEPMessagesPending@XPEPSessionMgr@@QAE_N_N@Z
?XPEPProcessIdle@XPEPSessionMgr@@SAXXZ
?XPEPQueryDocumentReply@XPEPAppFactory@@UAEXFAAV?$linear_array@GU?$deallocate_array@PAG@@@@@Z
?XPEPQuitApplication@XPEPAppFactory@@UAEX_N@Z
?XPEPRemoteQueryAppStatus@XPEPAppFactory@@UAEXABVZUID@@@Z
?XPEPRemoteQueryAppStatus@XPEPSessionMgr@@QAEXABVZUID@@@Z
?XPEPRemoteQueryDocument@XPEPSessionMgr@@QAEXABVZUID@@AAV?$linear_array@GU?$deallocate_array@PAG@@@@@Z
?XPEPRemoteQueryWorkspace@XPEPAppFactory@@UAEXABVZUID@@@Z
?XPEPRemoteQueryWorkspace@XPEPSessionMgr@@QAEXABVZUID@@@Z
?XPEPRequestAppStatus@XPEPAppFactory@@UAEFXZ
?XPEPRequestNewSession@XPEPAppFactory@@UAEPAVXPEPSessionInterface@@ABVZUID@@0AAV?$linear_array@GU?$deallocate_array@PAG@@@@@Z
?XPEPRequestQueryDocument@XPEPAppFactory@@UAEFPAG@Z
?XPEPRequestSupportedDocTypes@XPEPAppFactory@@UAEFAAUXPEPDocumentInfo@@@Z
?XPEPRequestWorkspace@XPEPAppFactory@@UAEFAAV?$vector@EV?$allocator@E@std@@@std@@@Z
?XPEPStartMessages@@YAXXZ
?XPEPStopMessages@@YAXXZ
?XPEPSupportedDocTypesReply@XPEPAppFactory@@UAEXFABVZUID@@AAUXPEPDocumentInfo@@@Z
?XPEPWorkspaceReply@XPEPAppFactory@@UAEXFABVZUID@@AAV?$vector@EV?$allocator@E@std@@@std@@@Z
?c_str@ZUID@@QBEPADXZ
?null@ZUID@@2V1@B
?str@ZUID@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?toChar@@YAXPBGPADH@Z
?toChar@XPEPLaunch@@YA_NPBGPADH@Z
?toUTF16@XPEPLaunch@@YA_NPBDPAGH@Z
?toWChar@@YAXPBDPAGH@Z
?useHiddenWindow@XPEPAppFactory@@QAEXPAX@Z
?uuid@ZUID@@QBE?AU_GUID@@XZ
?validateSessions@XPEPSessionMgr@@QAEXVZUID@@@Z
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ